Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          P9FznJLZsV7K97PSf6NtO0wD7jhcL4AivPVRkWr67jo=
Subject key identifier:   51:E3:0B:57:D8:BE:7E:38:21:E0:EF:61:E6:57:97:0E:2B:AC:A0:EA
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       08132F208A7251D68A945294A4AA5B6E15F28AC7
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:02 +0000
ROA not before:           Tue 29 Oct 2024 12:26:02 +0000
ROA not after:            Tue 28 Oct 2025 12:31:02 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:2f:20:8a:72:51:d6:8a:94:52:94:a4:aa:5b:6e:15:f2:8a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:02 2024 GMT
            Not After : Oct 28 12:31:02 2025 GMT
        Subject: CN=51E30B57D8BE7E3821E0EF61E657970E2BACA0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:33:b6:05:a4:f6:fc:56:93:47:e8:71:56:
                    55:2c:59:53:3c:7f:91:91:b6:45:88:e4:1a:19:2f:
                    a3:f0:77:c6:e0:52:33:2d:9e:5c:2b:8e:59:5e:e6:
                    f0:bb:76:4c:7d:6e:fe:b4:dc:ff:52:32:25:e8:e1:
                    01:ab:6c:d2:8b:ff:71:9a:0f:e7:ef:f0:c6:d7:52:
                    71:5c:33:d8:04:88:49:5c:8a:99:ac:cf:f2:25:fc:
                    c6:6a:d6:bd:3d:a1:a9:b0:6b:75:62:e6:03:86:41:
                    88:9e:08:ae:bf:fe:8a:80:bb:f3:6e:64:e1:d3:de:
                    66:4a:59:74:8f:e6:87:b7:80:03:c7:7f:61:72:ce:
                    40:e2:42:3e:fa:05:da:99:53:5e:0a:70:f7:61:da:
                    29:97:ea:99:e4:17:71:ae:38:3f:ac:b3:e5:8c:0a:
                    a0:f6:9d:0c:94:45:cb:0f:0a:27:e1:b3:5d:40:13:
                    a2:4c:e8:e4:ba:05:07:76:a1:99:db:03:2c:6e:8e:
                    29:fa:e9:ab:1a:cb:4f:e5:d3:61:8a:c1:8d:13:e8:
                    c9:1a:52:73:af:28:7d:00:6e:d6:fd:bd:b3:cb:bd:
                    b7:6b:c6:06:0c:c3:05:cf:d3:9d:b1:13:ab:9b:a9:
                    f6:f8:bc:09:d3:27:55:8b:e2:56:08:af:e1:fc:0e:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:0B:57:D8:BE:7E:38:21:E0:EF:61:E6:57:97:0E:2B:AC:A0:EA
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:da:65:64:f8:ec:83:7e:1c:8a:d5:c1:f3:9e:8a:24:0c:41:
         0c:8f:e4:a9:17:99:d6:6f:f4:df:bb:18:73:48:b9:db:98:48:
         f8:12:01:a3:75:d5:60:54:66:93:23:cb:f3:1d:92:47:a9:60:
         bf:21:dc:d3:e3:ed:a1:0e:c4:fb:08:d8:b2:11:62:19:37:b9:
         ba:66:3d:01:2e:0c:25:63:d3:6b:d7:b7:87:1f:2c:13:9b:2c:
         14:6f:e8:e9:d4:43:ec:fd:32:3f:bb:4e:48:f1:0d:c6:25:51:
         aa:d2:29:5e:9f:ca:0e:05:5a:cd:27:ed:cb:79:5c:d4:3d:53:
         a4:9f:ad:3b:c4:12:aa:b2:2d:bf:bd:41:68:6f:2e:08:23:63:
         bb:4e:52:58:25:c9:33:6b:59:03:9f:82:d2:58:e0:86:29:b3:
         88:1e:1d:77:d5:cb:21:bb:75:28:77:8d:01:d0:81:42:9a:9b:
         84:38:1f:7b:a8:36:e8:af:2d:7e:1c:90:c0:c5:45:93:ef:5d:
         e8:98:32:2e:7c:7a:c6:c1:23:65:09:d9:f5:39:3c:20:ae:2b:
         34:d8:25:0e:8e:a6:c7:e8:80:3a:4b:0a:cf:a6:ea:d2:b9:b0:
         c9:aa:33:ed:5c:a6:a4:e9:21:c7:cb:90:49:be:f5:25:cd:64:
         9d:f8:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:40 2024 by rpki-client on console-ams.rpki-client.org