Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          0EPyT8FF5Gfyj1EMd0nfcY+ZlUst7gyHmbfvloJOIdI=
Subject key identifier:   5B:97:6B:A1:E0:92:5C:69:FC:EC:74:F2:1A:C9:0D:9D:AA:94:49:D9
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       21D25A047C8B550AE306C598F4EE371AC6F40564
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        2804:c70::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d2:5a:04:7c:8b:55:0a:e3:06:c5:98:f4:ee:37:1a:c6:f4:05:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=5B976BA1E0925C69FCEC74F21AC90D9DAA9449D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:d8:23:92:a9:18:fb:8c:6c:ff:54:53:c3:
                    3f:ce:bd:55:55:67:20:94:b1:06:bf:6d:6f:86:8c:
                    1d:cc:82:a2:bb:83:6d:2a:a2:02:8f:65:8f:7c:49:
                    f9:d0:5b:8d:bb:f6:68:b4:3c:ef:37:57:42:dd:fe:
                    9c:ae:0d:65:98:b9:4e:7a:03:b9:b1:51:5c:0a:7b:
                    d9:a3:8d:76:18:00:cf:b0:b7:6c:e4:80:61:86:90:
                    a0:f8:2d:68:32:b7:bb:2d:29:a1:38:19:cc:a4:02:
                    a6:4c:cf:37:19:04:45:a3:c1:44:41:29:7e:55:3b:
                    18:a8:f1:d3:04:34:76:0a:da:be:b3:5d:8c:57:c9:
                    8f:6d:e2:49:07:8c:10:b8:d9:89:2a:82:9a:0d:49:
                    57:5f:6a:75:78:85:5e:2b:60:39:75:a7:80:a6:65:
                    0d:87:78:e4:d6:09:36:5e:39:17:d8:2e:21:56:99:
                    4d:e1:10:c1:05:9f:ed:42:2f:0e:1e:c9:53:56:e3:
                    89:fa:04:f5:e1:4a:77:f2:9a:5f:da:45:73:75:db:
                    b5:8e:30:40:b2:bf:66:a9:00:60:2b:41:73:97:ff:
                    5c:93:63:f8:c5:aa:43:48:7f:a1:28:05:59:b0:19:
                    46:d3:90:36:25:10:7c:f0:d4:bd:cd:be:ab:34:c5:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:6B:A1:E0:92:5C:69:FC:EC:74:F2:1A:C9:0D:9D:AA:94:49:D9
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:06:dd:c1:98:c3:94:18:c8:f0:0c:36:05:dc:07:38:18:
         91:fc:34:0f:57:89:d0:89:c0:65:f8:8e:f5:2c:5a:be:01:c5:
         86:15:ea:5b:30:32:dd:6e:5a:0e:77:09:c1:7e:fa:02:8a:e2:
         a2:cc:98:11:d4:56:83:68:99:4d:2c:c6:8d:c1:e9:fc:49:e9:
         f5:bc:8e:b2:db:b2:96:57:31:51:99:df:2c:d3:aa:3a:52:57:
         a8:b4:61:68:6e:ae:8f:dd:fe:17:33:49:cf:16:c9:8f:45:48:
         b2:22:00:d2:76:03:ef:7a:aa:21:e3:f1:51:d2:bd:c2:67:75:
         57:05:a7:89:f9:78:35:84:69:a7:94:e1:73:6c:df:6d:17:d5:
         39:29:41:6e:aa:04:76:4f:1e:07:c6:bf:d7:2c:97:4e:53:b0:
         a3:81:81:70:db:9a:e2:1b:ed:83:75:55:bf:d3:25:66:6b:d6:
         87:c4:dd:e2:de:ca:97:6c:c6:9b:f7:fa:bb:2c:25:14:ff:88:
         59:8b:d0:80:0b:da:41:48:e2:c2:8f:5a:f8:20:53:2d:4d:0b:
         fc:b6:26:fc:1b:8b:92:aa:52:21:2e:33:e5:60:2d:fe:8d:1f:
         30:d0:c5:d7:ac:d1:9f:c6:07:5f:36:4e:66:1e:fb:ce:dd:25:
         f0:12:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org