Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          da0gtdaYWre83DaYpGdpqRuWVFWMPzxYSOsBAOi8sr0=
Subject key identifier:   32:62:DE:D6:08:39:F3:A6:76:03:B2:DB:29:0E:08:B3:EB:5B:FF:BA
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       3062A0ED1E57D18430F21292F41F816E12D707D3
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:13 +0000
ROA not before:           Tue 29 Oct 2024 12:26:13 +0000
ROA not after:            Tue 28 Oct 2025 12:31:13 +0000
asID:                     265010
IP address blocks:        2804:3160:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:62:a0:ed:1e:57:d1:84:30:f2:12:92:f4:1f:81:6e:12:d7:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:13 2024 GMT
            Not After : Oct 28 12:31:13 2025 GMT
        Subject: CN=3262DED60839F3A67603B2DB290E08B3EB5BFFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:51:62:35:cb:7a:3c:40:32:f7:52:c4:3a:
                    61:32:c2:2e:66:b4:0f:0a:32:7f:25:23:0c:5f:85:
                    58:cc:2c:af:41:9c:b0:ca:7a:04:15:4d:fb:45:0e:
                    1e:2c:2e:83:79:96:e7:a1:ef:19:2d:3f:91:9b:e2:
                    5f:16:20:9d:e3:aa:29:e1:e4:ff:ad:74:12:e7:85:
                    e9:80:37:25:82:3a:20:a8:c4:26:b9:b8:09:62:d2:
                    1e:b8:b3:8c:ce:97:57:f0:06:70:fc:c4:a5:9f:e4:
                    f2:a2:7a:bb:e2:37:f5:bd:0f:45:15:03:87:5d:a7:
                    06:42:6c:a9:df:72:e1:78:67:06:68:10:38:95:3d:
                    d5:07:45:e4:3b:a5:61:16:8e:4e:4d:ff:5b:88:69:
                    6d:4d:bb:f1:cc:6a:93:43:1a:d4:36:52:68:8c:80:
                    f8:61:bf:f1:8a:87:6d:a9:06:f2:db:b7:20:19:d5:
                    47:78:f0:77:3d:f0:f7:6c:df:db:82:a7:82:15:0f:
                    4d:a8:c8:e9:b3:08:7a:4a:30:2d:89:31:e7:e3:5e:
                    47:99:3d:6a:48:7f:0f:f5:52:ce:17:a4:75:73:1c:
                    09:fb:fa:e9:0b:66:3f:07:82:6c:e1:03:01:eb:8f:
                    30:4f:99:b4:08:65:b7:9a:38:48:ba:b7:a3:7c:d9:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:62:DE:D6:08:39:F3:A6:76:03:B2:DB:29:0E:08:B3:EB:5B:FF:BA
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:a7:a2:68:f4:14:b7:03:69:f6:0e:ce:fe:13:34:35:51:
         3f:05:14:98:2e:3a:3e:b7:a3:cd:7e:64:d1:bf:e1:1a:11:05:
         cd:85:9f:aa:53:c6:37:a1:97:d8:63:ce:c6:ab:46:94:aa:a5:
         a4:d7:5b:b1:1b:4d:66:88:b6:6e:da:c0:74:04:0c:45:f4:d4:
         aa:1a:bf:7b:ea:e6:d8:43:2c:57:d6:6b:bb:f8:f2:0d:00:40:
         c1:f4:28:26:de:a4:27:32:08:27:cc:be:77:ba:f8:0f:bc:4d:
         d3:75:84:a8:38:af:2d:51:e7:39:c8:0d:e2:19:22:0b:dc:51:
         ee:ad:4a:a4:cf:03:1e:d0:5b:f3:85:90:31:7f:58:87:5c:b1:
         ac:c2:05:0d:48:2f:ff:1c:d2:8f:70:35:c9:24:3b:ac:b4:bd:
         83:2e:2e:74:fc:aa:f9:5a:8f:9b:00:d7:07:62:70:01:a0:aa:
         75:28:b8:36:b2:a2:3b:0d:92:06:f6:31:ea:47:f5:ff:e2:ae:
         d0:d3:fb:8b:a1:32:1b:7e:fe:d2:0d:c4:35:a9:10:94:f0:a4:
         80:04:5f:6d:d0:62:ff:a4:d7:81:97:2a:20:16:31:4c:20:34:
         c7:bd:61:c0:67:7f:4d:f3:0e:b7:8e:fe:05:43:82:3e:c5:27:
         8c:ca:4a:c1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMGKg7R5X0YQw8hKS9B+BbhLXB9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFNDIwNDJCRTYyNzQ3RENERjJCREU3NkQzNjlFNzJE
QzExRDgzODAeFw0yNDEwMjkxMjI2MTNaFw0yNTEwMjgxMjMxMTNaMDMxMTAvBgNV
BAMTKDMyNjJERUQ2MDgzOUYzQTY3NjAzQjJEQjI5MEUwOEIzRUI1QkZGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGA1FiNct6PEAy91LEOmEywi5m
tA8KMn8lIwxfhVjMLK9BnLDKegQVTftFDh4sLoN5lueh7xktP5Gb4l8WIJ3jqinh
5P+tdBLnhemANyWCOiCoxCa5uAli0h64s4zOl1fwBnD8xKWf5PKierviN/W9D0UV
A4ddpwZCbKnfcuF4ZwZoEDiVPdUHReQ7pWEWjk5N/1uIaW1Nu/HMapNDGtQ2UmiM
gPhhv/GKh22pBvLbtyAZ1Ud48Hc98Pds39uCp4IVD02oyOmzCHpKMC2JMefjXkeZ
PWpIfw/1Us4XpHVzHAn7+ukLZj8HgmzhAwHrjzBPmbQIZbeaOEi6t6N82TmpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMmLe1gg586Z2A7LbKQ4Is+tb/7owHwYDVR0j
BBgwFoAU7eQgQr5idH3N8r3nbTaectwR2DgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMC9FREU0MjA0MkJFNjI3NDdEQ0RGMkJERTc2RDM2OUU3MkRDMTFEODM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VERTQyMDQyQkU2Mjc0N0RD
REYyQkRFNzZEMzY5RTcyREMxMUQ4MzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzAv
MzIzODMwMzQzYTMzMzEzNjMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEMWAQMA0GCSqGSIb3DQEBCwUA
A4IBAQAI+6eiaPQUtwNp9g7O/hM0NVE/BRSYLjo+t6PNfmTRv+EaEQXNhZ+qU8Y3
oZfYY87Gq0aUqqWk11uxG01miLZu2sB0BAxF9NSqGr976ubYQyxX1mu7+PINAEDB
9Cgm3qQnMggnzL53uvgPvE3TdYSoOK8tUec5yA3iGSIL3FHurUqkzwMe0FvzhZAx
f1iHXLGswgUNSC//HNKPcDXJJDustL2DLi50/Kr5Wo+bANcHYnABoKp1KLg2sqI7
DZIG9jHqR/X/4q7Q0/uLoTIbfv7SDcQ1qRCU8KSABF9t0GL/pNeBlyogFjFMIDTH
vWHAZ39N8w63jv4FQ4I+xSeMykrB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:03 2025 by rpki-client