Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a353030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a353030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          EKr6dcELox8HQ5kQT125RMQ/Kh+LNRjjPmG0f9Lw3JU=
Subject key identifier:   11:56:FD:C6:4F:86:0F:47:7B:32:F0:EE:B6:B4:04:E6:B8:E0:31:35
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       63D3302A42DCD824183F981C2C10ABE20637C58E
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a353030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:14 +0000
ROA not before:           Tue 29 Oct 2024 12:26:14 +0000
ROA not after:            Tue 28 Oct 2025 12:31:14 +0000
asID:                     265010
IP address blocks:        2804:3160:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d3:30:2a:42:dc:d8:24:18:3f:98:1c:2c:10:ab:e2:06:37:c5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:14 2024 GMT
            Not After : Oct 28 12:31:14 2025 GMT
        Subject: CN=1156FDC64F860F477B32F0EEB6B404E6B8E03135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:e6:a5:7c:35:52:e0:c7:0b:eb:90:1d:f5:
                    a0:e5:04:81:0f:5b:5c:d3:b6:e3:d4:50:ee:e9:f6:
                    5b:58:8b:5b:c7:80:13:b2:e0:f2:de:ad:cc:7c:b3:
                    41:e2:73:67:f0:4d:c1:1e:b0:63:00:50:d2:6d:4a:
                    65:3e:a7:85:ad:2b:45:69:24:0e:fe:6b:49:de:ae:
                    00:69:5d:02:b3:11:10:d0:ed:f5:51:9d:6b:e9:d4:
                    4f:3a:f0:65:9e:b7:d4:85:2d:d2:22:14:f6:df:39:
                    d4:46:48:a8:e0:6c:6e:82:52:02:f6:e6:ca:54:f8:
                    76:5e:06:d1:20:64:c9:03:d9:ed:c5:88:5a:d0:a2:
                    e5:19:73:85:65:89:f8:d5:f9:e8:36:aa:d9:f1:f1:
                    04:cc:18:16:a5:1e:e0:24:96:af:f0:20:bf:a8:39:
                    e0:b6:55:8e:0c:c1:55:3a:69:0f:1d:1d:e1:2e:a1:
                    f0:78:24:8d:90:7f:53:18:9d:94:00:73:fe:7e:c9:
                    6b:ff:39:f7:95:86:a2:c2:ac:e8:68:67:d4:50:f3:
                    8d:2c:65:f7:82:79:3f:78:f5:a3:c2:45:aa:1b:a8:
                    da:7a:eb:07:3f:6b:f3:9c:9e:97:5a:54:f3:6d:c0:
                    7b:b7:4b:d7:e6:42:92:3a:bb:89:00:56:ed:e4:91:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:FD:C6:4F:86:0F:47:7B:32:F0:EE:B6:B4:04:E6:B8:E0:31:35
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a353030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:7b:9d:79:79:29:0d:13:78:eb:6a:2b:f6:a0:7c:47:45:83:
         5f:49:17:13:c3:fa:a5:2d:2e:12:3f:df:b6:b3:f2:be:a5:32:
         d5:46:6b:4e:ee:6d:83:ca:07:b5:5c:52:f7:94:b7:db:94:ee:
         e6:59:39:ec:f4:39:7f:26:29:38:d8:1c:01:21:05:8d:d2:cb:
         5d:27:2b:53:4e:10:4b:75:87:fd:bc:0f:8e:f7:de:64:af:19:
         b2:aa:91:fa:57:86:50:bc:1b:fe:35:b9:31:f8:4e:c8:b4:a7:
         5a:bc:03:50:aa:66:b2:26:24:db:6a:6c:87:66:dc:ad:2b:02:
         78:4a:fc:2f:0f:6a:f0:5a:e4:be:f9:99:39:10:15:a9:45:c9:
         c4:f5:4d:cd:c5:83:9a:86:75:be:0b:88:ba:17:d0:8d:1b:14:
         95:73:f4:d2:a2:a0:f8:71:55:a4:66:37:54:a4:4c:f5:65:a9:
         3f:37:e3:5d:b4:70:63:bb:13:1e:11:64:53:bd:a7:98:69:14:
         40:0f:a5:58:02:2e:18:3b:a5:89:a0:76:44:ae:7a:be:6c:48:
         aa:b2:1e:e7:9a:c4:80:5c:d5:bd:0a:e3:d4:78:47:b6:68:ab:
         ee:e3:69:b7:97:9d:4d:66:3e:c9:f8:c6:2a:d4:04:78:98:05:
         dd:f8:f7:a9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUY9MwKkLc2CQYP5gcLBCr4gY3xY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFNDIwNDJCRTYyNzQ3RENERjJCREU3NkQzNjlFNzJE
QzExRDgzODAeFw0yNDEwMjkxMjI2MTRaFw0yNTEwMjgxMjMxMTRaMDMxMTAvBgNV
BAMTKDExNTZGREM2NEY4NjBGNDc3QjMyRjBFRUI2QjQwNEU2QjhFMDMxMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFualfDVS4McL65Ad9aDlBIEP
W1zTtuPUUO7p9ltYi1vHgBOy4PLercx8s0Hic2fwTcEesGMAUNJtSmU+p4WtK0Vp
JA7+a0nergBpXQKzERDQ7fVRnWvp1E868GWet9SFLdIiFPbfOdRGSKjgbG6CUgL2
5spU+HZeBtEgZMkD2e3FiFrQouUZc4VlifjV+eg2qtnx8QTMGBalHuAklq/wIL+o
OeC2VY4MwVU6aQ8dHeEuofB4JI2Qf1MYnZQAc/5+yWv/OfeVhqLCrOhoZ9RQ840s
ZfeCeT949aPCRaobqNp66wc/a/OcnpdaVPNtwHu3S9fmQpI6u4kAVu3kkTuHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEVb9xk+GD0d7MvDutrQE5rjgMTUwHwYDVR0j
BBgwFoAU7eQgQr5idH3N8r3nbTaectwR2DgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMC9FREU0MjA0MkJFNjI3NDdEQ0RGMkJERTc2RDM2OUU3MkRDMTFEODM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VERTQyMDQyQkU2Mjc0N0RD
REYyQkRFNzZEMzY5RTcyREMxMUQ4MzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzAv
MzIzODMwMzQzYTMzMzEzNjMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEMWBQMA0GCSqGSIb3DQEBCwUA
A4IBAQB5e515eSkNE3jraiv2oHxHRYNfSRcTw/qlLS4SP9+2s/K+pTLVRmtO7m2D
yge1XFL3lLfblO7mWTns9Dl/Jik42BwBIQWN0stdJytTThBLdYf9vA+O995krxmy
qpH6V4ZQvBv+Nbkx+E7ItKdavANQqmayJiTbamyHZtytKwJ4SvwvD2rwWuS++Zk5
EBWpRcnE9U3NxYOahnW+C4i6F9CNGxSVc/TSoqD4cVWkZjdUpEz1Zak/N+NdtHBj
uxMeEWRTvaeYaRRAD6VYAi4YO6WJoHZErnq+bEiqsh7nmsSAXNW9CuPUeEe2aKvu
42m3l51NZj7J+MYq1AR4mAXd+Pep
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:08 2024 by rpki-client on console-fra.rpki-client.org