Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Np/7pveLdhtj6blOPKIfjLPv1lyGwW89xzKfLXwMcqQ=
Subject key identifier:   C3:AD:2F:BF:1B:93:7D:E7:84:52:98:9A:84:B5:63:D4:30:A4:E9:92
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       34106A0C20AE29330183E11AD445F9ADF3F4E3AE
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:42 +0000
ROA not before:           Thu 06 Mar 2025 02:26:42 +0000
ROA not after:            Thu 05 Mar 2026 02:31:42 +0000
asID:                     52706
IP address blocks:        2804:c70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:10:6a:0c:20:ae:29:33:01:83:e1:1a:d4:45:f9:ad:f3:f4:e3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:42 2025 GMT
            Not After : Mar  5 02:31:42 2026 GMT
        Subject: CN=C3AD2FBF1B937DE78452989A84B563D430A4E992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:b6:45:9d:4a:e4:30:09:e2:d7:27:f6:ac:
                    b6:94:d6:91:ed:13:db:2b:3e:1f:a6:cb:a2:47:87:
                    da:c5:38:48:8b:a6:96:1d:df:1b:29:82:d6:22:89:
                    f0:d0:71:d3:9a:be:9b:54:87:80:36:96:33:0b:75:
                    d5:a1:2e:39:44:94:93:26:31:e3:b4:78:79:ef:3c:
                    72:32:30:db:73:45:95:42:f8:ee:b8:93:49:20:8b:
                    93:7e:67:e0:5e:d6:18:3d:5c:14:58:dd:4a:bb:10:
                    05:d5:9b:3d:69:b0:ff:1f:e8:d6:14:3a:e4:e2:4c:
                    2b:0d:06:eb:d9:1a:c3:eb:33:80:87:70:8f:92:46:
                    95:76:9f:b5:43:03:54:1c:47:5f:91:6a:64:f4:87:
                    52:c4:99:39:dd:ed:a7:b9:28:75:32:f1:5a:fe:7d:
                    88:8a:55:97:02:76:9d:ca:f1:79:0a:8b:2a:41:a0:
                    f9:ba:a3:21:b8:0a:95:b2:b7:28:5e:d4:c5:73:12:
                    ea:09:82:bb:50:fa:1a:6d:8f:26:ec:33:3e:f4:ec:
                    fb:c1:91:df:58:32:8f:7d:ae:e5:fc:3c:98:32:72:
                    77:39:8b:31:b2:32:49:57:8e:6d:18:e1:1b:b0:f7:
                    61:4f:cb:a6:95:6d:b2:3a:d3:dd:70:ff:6a:2b:e6:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:2F:BF:1B:93:7D:E7:84:52:98:9A:84:B5:63:D4:30:A4:E9:92
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:e3:13:7f:45:da:a3:e3:d0:3a:0d:1f:8c:53:81:e1:fc:
         35:10:d2:b1:cd:7f:48:fe:a6:c7:44:63:3e:fb:59:6c:dd:21:
         96:20:c2:c9:3e:03:b2:f1:a3:f6:43:4b:84:e8:d5:42:b7:4a:
         5e:59:95:0a:b7:dd:70:80:00:18:25:44:49:c5:fd:b9:b3:b5:
         53:15:40:f5:56:c1:27:f7:cf:c1:42:09:e8:7b:31:54:03:32:
         a6:e7:e9:a3:69:de:94:af:6d:d0:ce:ce:37:02:35:d2:25:28:
         0b:ed:29:29:41:2c:f5:3d:36:6f:ed:a2:c7:17:53:ed:38:f2:
         6f:f9:c4:de:d3:ac:b0:68:2d:18:c6:88:12:09:11:00:ff:9e:
         46:de:b9:d4:dc:b3:8c:fd:26:88:ed:01:5e:e0:92:d5:28:98:
         0d:2c:82:8e:9c:44:11:d8:88:96:4f:56:8b:fd:d4:ef:2b:1f:
         14:4e:b7:f8:e0:ef:55:ab:4e:69:55:2a:56:d4:c1:19:7c:b6:
         c1:49:ee:1b:f5:7e:ce:9b:2e:00:4f:5f:16:35:12:8c:20:c6:
         52:b6:02:eb:1f:bf:50:e1:ce:a2:ef:3b:55:f9:b2:5d:72:ad:
         42:b8:58:56:f1:58:e8:d8:ad:69:45:1d:f5:5c:e1:f4:92:0b:
         06:31:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:16 2025 by rpki-client