Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          19obPa/GNx0mNlvn2anQWEHAtv6lxK0E0EBsVpjIbnU=
Subject key identifier:   CF:70:A8:85:73:F1:80:82:1C:90:0E:B4:DF:1C:DC:5D:A3:A7:95:A7
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       3336CEE4FFA47A615FA4024CB2A129FEA0E6A381
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:12 +0000
ROA not before:           Tue 29 Oct 2024 12:26:12 +0000
ROA not after:            Tue 28 Oct 2025 12:31:12 +0000
asID:                     265010
IP address blocks:        2804:3160:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:ce:e4:ff:a4:7a:61:5f:a4:02:4c:b2:a1:29:fe:a0:e6:a3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:12 2024 GMT
            Not After : Oct 28 12:31:12 2025 GMT
        Subject: CN=CF70A88573F180821C900EB4DF1CDC5DA3A795A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:00:a9:9c:0f:b7:dd:36:18:53:80:fa:a2:
                    3b:16:4e:7d:07:ba:37:5e:37:e2:1b:39:13:d5:f1:
                    86:10:b8:2e:2b:57:9b:10:d8:0f:75:bd:a5:fe:a0:
                    4b:cd:bd:28:f7:c0:80:31:69:56:7c:ff:fd:bc:8f:
                    2a:3b:b1:17:0d:0c:73:3f:19:34:47:ad:2d:8a:54:
                    17:3e:e8:43:39:be:82:2a:99:2c:88:3c:a6:e7:61:
                    06:59:ca:87:17:ca:0f:69:e2:62:46:1e:8e:94:41:
                    62:61:82:33:85:a8:0f:d9:79:dc:0f:41:c1:c6:6b:
                    37:17:b9:47:ae:a5:70:f8:94:f3:41:24:03:5d:0a:
                    7c:cf:e4:fb:70:f1:61:9d:12:60:de:0b:df:d9:c4:
                    11:9e:c9:f7:3c:03:b7:de:9b:24:de:9f:1e:56:d9:
                    cc:4c:ab:04:93:eb:27:78:e0:f7:20:30:fc:90:b1:
                    da:81:de:80:f4:e6:6a:48:ec:e9:65:62:1c:3d:96:
                    b2:2c:8c:e1:8f:3a:94:e4:7c:2d:02:6d:7f:06:58:
                    4a:df:06:32:4b:39:f1:fe:81:f4:0a:60:ea:e8:19:
                    6d:43:c9:53:62:69:fd:ed:ed:4f:d8:5b:7f:da:b7:
                    6e:a0:cf:ba:64:3a:2a:5a:2e:5e:6f:dd:4f:8a:86:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:A8:85:73:F1:80:82:1C:90:0E:B4:DF:1C:DC:5D:A3:A7:95:A7
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:43:a7:e7:48:01:ca:50:c8:e5:ad:18:f7:ef:3e:11:be:5e:
         6c:40:bd:9e:83:84:9d:a9:7c:43:d3:7d:1b:6e:c7:32:27:a8:
         7f:d6:aa:f3:46:8a:5b:c1:65:c9:f4:b3:73:a2:32:b0:6a:1d:
         96:a5:f4:bb:e1:2f:2b:97:e9:e4:5d:68:0f:98:f6:f4:75:e5:
         6d:23:f9:31:fc:ff:22:52:74:93:55:9e:ab:8d:90:4e:c6:c0:
         b8:56:f4:0a:1c:0c:d6:70:c3:b3:34:30:14:29:31:41:b2:98:
         01:81:17:54:45:2b:4b:d6:85:67:ac:08:02:08:70:42:6e:e3:
         90:ae:ca:4e:76:71:fd:6f:b5:55:bd:3d:3a:cd:6a:5a:6b:f8:
         b2:25:23:8d:eb:7d:cb:6e:52:8b:df:5e:28:df:e2:4b:1a:54:
         68:06:26:f7:70:9c:f7:d1:22:be:b1:fa:2e:50:c4:f6:92:63:
         7c:06:d6:94:97:4d:33:ab:46:04:d5:91:21:6f:da:37:63:3d:
         25:52:36:91:4a:50:6b:6f:89:e7:26:6c:d6:d8:b0:16:e0:f1:
         4d:89:74:d6:be:81:61:16:37:16:ca:09:3b:36:d8:65:da:79:
         e5:ff:55:af:14:be:df:92:08:7d:f1:ba:ca:db:c5:85:c3:22:
         97:8c:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:48 2025 by rpki-client