Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          dY0Z/bFvoWs/uhNWfbyIlaFqtvQZaZkd8UdfGU7zjjg=
Subject key identifier:   B7:5D:AA:B4:4E:D9:1B:68:36:5B:2F:A0:C4:CC:77:D8:05:74:87:80
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       5018CCB30DF98F9098E77CCE02CE5972188AD991
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:10 +0000
ROA not before:           Tue 29 Oct 2024 12:26:10 +0000
ROA not after:            Tue 28 Oct 2025 12:31:10 +0000
asID:                     265010
IP address blocks:        2804:3160:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:cc:b3:0d:f9:8f:90:98:e7:7c:ce:02:ce:59:72:18:8a:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:10 2024 GMT
            Not After : Oct 28 12:31:10 2025 GMT
        Subject: CN=B75DAAB44ED91B68365B2FA0C4CC77D805748780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:d2:5b:c7:21:2f:d5:44:0c:88:55:a9:92:
                    31:3d:9b:12:39:60:4d:10:5b:35:f9:74:07:79:d7:
                    3c:10:6c:28:db:cd:f1:90:eb:54:7e:8e:76:33:7d:
                    44:ae:b4:7e:f9:e5:b5:67:98:77:e7:73:9f:6b:c9:
                    7f:05:77:24:5a:ff:c3:b3:df:af:aa:0f:df:a4:72:
                    5c:e6:f1:7a:78:37:d6:1e:ae:5a:d2:2e:ea:88:11:
                    4c:0a:7a:48:c8:eb:56:ab:4a:b7:94:c1:6b:89:51:
                    ca:ad:3c:e2:1f:e5:f2:f7:a3:57:65:cf:73:0a:17:
                    f2:30:70:b7:92:7d:38:b3:88:17:3d:cb:08:a2:d7:
                    6b:85:d3:ef:19:a0:b6:2b:14:04:32:37:c8:05:d0:
                    49:d5:0d:b4:b6:69:21:00:6b:c5:26:34:bd:e9:8c:
                    72:2a:72:df:5a:32:6f:de:bf:23:59:6b:3a:e7:f3:
                    fe:c9:74:a0:8f:e9:6a:04:b7:ad:6e:74:be:74:e1:
                    6a:38:c6:a9:c5:f7:09:46:06:40:48:a2:cb:93:91:
                    eb:23:f9:28:ab:38:3b:0d:06:88:cf:61:11:b7:02:
                    6e:dc:69:dd:06:54:94:0d:61:35:12:1d:5d:2f:92:
                    1c:98:7a:8e:c8:62:21:4b:9b:07:94:85:1d:aa:d9:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5D:AA:B4:4E:D9:1B:68:36:5B:2F:A0:C4:CC:77:D8:05:74:87:80
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:a1:29:40:3a:f7:76:5b:8b:6f:b2:f8:b7:33:89:4d:1b:
         61:02:d6:1f:b2:9d:e3:ee:37:af:23:cb:74:4c:cb:96:63:2e:
         af:b4:bf:31:66:b6:fd:fb:e7:69:43:48:b6:b7:81:d4:ea:31:
         88:9b:13:80:7a:99:d0:4c:3d:f7:aa:71:b5:cb:10:1a:c6:e2:
         78:f4:bb:76:a0:79:65:81:96:96:53:e4:74:db:c0:3c:c0:c9:
         9b:9c:dc:8b:22:15:29:7b:d6:6a:24:16:c9:7b:76:bd:cd:2d:
         54:77:3b:63:55:90:cd:7f:f2:cb:4d:bf:5c:ab:c7:ce:e3:6d:
         1c:29:64:7d:82:42:6b:02:50:89:de:af:37:79:aa:46:d2:31:
         ae:c6:18:5a:7c:5c:05:aa:1c:b1:d4:fe:8c:ce:75:54:62:16:
         58:e6:c5:43:53:c7:32:8b:32:e5:f2:86:d5:a6:12:58:49:e6:
         7d:30:28:50:48:a4:f7:c7:3e:c2:c9:5c:76:f3:17:eb:2f:e2:
         64:72:21:f4:db:6b:2e:92:5b:30:1d:58:0f:e8:73:f6:14:63:
         1b:e5:f2:03:d0:26:4f:63:db:05:66:51:5d:74:57:90:3b:ee:
         d5:9b:cf:95:91:bc:9a:a9:40:e9:85:2f:09:0b:c4:d9:2c:31:
         55:9c:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org