Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          VIG3AjaN/UKaCy8EUEpn1lOXY29YgLqpStDYRPXtLpc=
Subject key identifier:   22:45:67:36:74:D9:AB:E6:06:8B:6A:C2:14:3E:1B:28:3D:7A:35:A1
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       1F9EAF67B27D729CDA2362DCE69BBBB310C5E078
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:03 +0000
ROA not before:           Tue 29 Oct 2024 12:26:03 +0000
ROA not after:            Tue 28 Oct 2025 12:31:03 +0000
asID:                     265010
IP address blocks:        2804:3160:7001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:af:67:b2:7d:72:9c:da:23:62:dc:e6:9b:bb:b3:10:c5:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:03 2024 GMT
            Not After : Oct 28 12:31:03 2025 GMT
        Subject: CN=2245673674D9ABE6068B6AC2143E1B283D7A35A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:ba:66:37:84:a0:25:3a:70:83:12:4f:b9:
                    3b:1b:c8:bd:ae:5f:bb:22:84:bf:ca:e6:89:bf:45:
                    85:7d:c0:75:92:8b:66:ef:7d:bf:c0:f3:69:fc:65:
                    91:1b:2a:5b:f0:58:76:66:0d:fb:1c:99:af:81:5c:
                    2c:54:e1:f0:78:5e:0d:d4:97:5f:7a:a4:fb:73:8d:
                    3a:2e:f9:39:10:c7:32:07:df:f7:3e:12:ec:09:c2:
                    51:cb:f7:c1:42:95:45:65:7e:44:38:7d:64:b9:0e:
                    c0:e6:55:92:5b:f7:f4:e8:ec:c5:27:70:9b:e1:7f:
                    63:e8:19:ba:f9:c4:49:d9:b2:90:ae:45:8c:53:fd:
                    73:08:44:4c:ef:29:47:b7:2b:3b:d3:f8:a6:21:d4:
                    78:3e:ad:dc:f3:7e:c7:fe:e3:4b:1c:54:f4:cf:4e:
                    82:dd:dc:0d:42:0e:b4:5a:17:c7:06:d0:6b:5d:5a:
                    94:47:08:9b:fd:a7:4d:65:24:41:c8:a0:91:10:fb:
                    fa:5d:37:c2:b5:a8:5a:67:f7:35:15:a0:e9:0b:52:
                    bb:f2:18:0c:e7:14:b9:ee:61:f9:25:99:49:41:c2:
                    2b:6f:64:26:15:89:ff:48:aa:96:5a:89:f7:97:a2:
                    dd:fd:d9:aa:e9:f2:16:43:77:05:84:5f:ac:bc:f5:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:67:36:74:D9:AB:E6:06:8B:6A:C2:14:3E:1B:28:3D:7A:35:A1
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:92:a1:9f:41:a7:e8:42:7c:69:0c:37:dc:d4:2e:92:23:
         15:8e:8b:51:37:20:c8:a6:e6:50:9d:af:29:56:50:2f:19:ef:
         2d:03:cc:03:84:49:71:40:05:27:b7:c7:a1:10:1e:65:3f:33:
         b4:d9:12:20:dd:2f:ac:4e:20:b3:f4:05:4a:32:be:11:10:53:
         51:68:ac:b1:99:bf:c4:48:21:a7:a9:99:5f:4f:09:7d:f6:33:
         b1:5c:78:69:c9:62:f2:0a:f8:30:b1:44:e5:f4:b6:44:ce:b8:
         af:67:6f:b4:03:82:07:bb:de:62:ca:17:04:09:8f:2d:53:c2:
         1d:08:73:83:67:68:a9:cc:66:7f:7b:8c:c6:f8:6d:42:83:fc:
         b0:d4:05:4a:8f:73:5b:93:13:79:8e:4d:fe:2b:16:38:f3:94:
         b6:cc:d5:47:e7:68:54:3d:2f:08:47:70:31:33:92:56:51:be:
         eb:e1:9d:3d:58:fe:ff:d0:f2:ff:5a:c4:04:c8:ef:f9:1b:77:
         ba:61:f5:f2:ad:36:a9:e8:3e:18:4c:86:87:40:83:82:10:b7:
         39:bc:53:b9:82:84:f9:70:f9:03:5b:ac:93:bc:c0:e7:82:1c:
         9e:1f:0d:5d:89:66:b4:24:32:22:43:44:ab:dc:54:33:c8:7c:
         86:06:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:40 2024 by rpki-client on console-ams.rpki-client.org