Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          X9mVzKmc88nGtO4t3WdNZUAf+mTuHCovulEgIZGpB04=
Subject key identifier:   67:2E:1B:56:18:DA:3E:90:10:DC:8E:C5:C6:11:5D:3A:5A:DA:25:C6
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       2B385FF6E01103EE14B983EA469DB093C2B7B6D6
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:11 +0000
ROA not before:           Tue 29 Oct 2024 12:26:11 +0000
ROA not after:            Tue 28 Oct 2025 12:31:11 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:5f:f6:e0:11:03:ee:14:b9:83:ea:46:9d:b0:93:c2:b7:b6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:11 2024 GMT
            Not After : Oct 28 12:31:11 2025 GMT
        Subject: CN=672E1B5618DA3E9010DC8EC5C6115D3A5ADA25C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:23:22:ed:4a:87:50:76:0d:d8:21:9a:4c:
                    7c:2f:96:ac:9c:e4:9c:a2:67:83:b0:cd:47:2a:7b:
                    c2:55:b2:cb:56:51:54:7b:fe:41:99:c6:1a:19:d2:
                    59:03:23:ed:6f:7e:2b:b7:b1:80:fe:e3:39:53:b3:
                    f9:ea:40:d5:6d:9f:f8:ba:df:1c:41:23:e0:05:01:
                    ef:2b:d2:d9:06:4f:37:42:7a:ee:92:fb:d9:14:dc:
                    0f:c9:5a:7c:b5:6a:13:68:c1:29:08:45:00:53:e6:
                    57:2e:47:6d:f4:40:34:82:0b:76:58:87:79:48:25:
                    d0:d2:0a:83:c5:be:4f:37:7f:27:64:84:1a:cb:cb:
                    1b:1e:ce:66:d8:f0:8f:3e:ae:46:c8:68:b5:44:fe:
                    76:6e:c9:ce:66:19:43:12:c4:c7:75:49:b6:22:d6:
                    89:20:5c:f3:78:01:59:2d:66:30:61:51:b3:2f:69:
                    5c:81:01:9f:43:90:ca:59:2d:3d:da:01:75:76:38:
                    45:12:45:4c:e2:00:90:7a:d8:77:9f:29:fb:87:f4:
                    f7:8f:16:4c:9d:13:48:ff:37:d5:23:c9:4b:fd:3a:
                    db:60:5e:e5:53:ca:71:cd:d1:4d:c5:fa:1d:47:7f:
                    83:8d:37:2c:60:1c:75:3c:22:9c:3c:7a:a3:04:2b:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2E:1B:56:18:DA:3E:90:10:DC:8E:C5:C6:11:5D:3A:5A:DA:25:C6
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:49:86:f2:fd:39:00:83:2e:b8:e4:c8:22:82:25:65:a4:
         07:1c:2f:be:3a:9f:43:8e:e7:d0:f7:1c:f6:cb:a0:92:ae:ed:
         f5:5f:df:2d:72:58:87:bd:26:a9:76:da:1e:f5:c9:f9:d9:29:
         bd:d7:7e:50:d9:da:60:0d:18:e7:d2:e3:63:b4:a7:9c:e8:c0:
         40:2e:da:b1:f0:52:37:84:69:b6:d8:a4:3a:f5:61:b6:d1:6c:
         1f:3b:bd:d0:32:38:f9:15:69:4a:ef:cc:2d:3c:64:a6:e1:21:
         1d:fb:b7:86:87:ae:26:a3:14:be:ef:6a:cb:9c:ac:a0:eb:fe:
         1c:b3:12:69:ff:a8:48:1b:0a:d0:33:eb:0d:79:a0:38:74:31:
         c7:98:f9:9f:e3:fa:07:97:90:15:73:0d:44:5d:d0:46:b4:8d:
         fb:39:7e:54:bf:8b:d7:57:f7:e3:d2:45:72:74:7b:fc:33:56:
         cf:eb:e3:9b:7e:dd:dd:12:8d:d9:ac:d3:88:c2:65:a3:30:5a:
         79:cf:fe:06:e2:99:4c:30:c5:b7:8a:f5:ab:7c:54:d0:98:4a:
         60:82:cd:d4:07:cb:f8:f1:b4:4c:c0:81:5e:ff:fa:e0:7f:42:
         6a:b2:24:29:74:96:88:74:ca:48:a1:ed:78:c9:9b:6c:03:bb:
         9f:00:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:17 2025 by rpki-client