Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          1VsHxTd7xqBADVtMwol/6Fcv6jJTtNgX0XTYnznKRbU=
Subject key identifier:   E0:58:0C:FB:4A:3B:DC:32:2D:4F:B4:0C:A6:5F:6B:7D:5D:ED:C4:61
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       4A04EB1AAF9F116F5359150DFB0C9350299538DA
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:15 +0000
ROA not before:           Tue 29 Oct 2024 12:26:15 +0000
ROA not after:            Tue 28 Oct 2025 12:31:15 +0000
asID:                     265010
IP address blocks:        2804:3160:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:04:eb:1a:af:9f:11:6f:53:59:15:0d:fb:0c:93:50:29:95:38:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:15 2024 GMT
            Not After : Oct 28 12:31:15 2025 GMT
        Subject: CN=E0580CFB4A3BDC322D4FB40CA65F6B7D5DEDC461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:88:f9:48:d1:26:25:d4:7f:f6:f7:e7:77:
                    db:4a:12:46:19:bd:f8:06:22:62:76:2a:5e:43:2f:
                    dc:a1:c8:54:24:3f:c5:91:af:bc:19:50:44:eb:61:
                    23:1c:ec:a1:62:ca:a2:1d:97:88:58:1d:4a:9c:08:
                    cb:1d:32:a5:3b:ae:bd:15:79:25:b6:e0:95:01:5f:
                    69:e8:57:13:9c:93:07:f9:37:3b:fc:48:a0:1d:f8:
                    68:ca:03:c5:4d:ab:52:46:32:16:91:ad:3a:df:49:
                    9c:0c:72:f0:f3:29:94:44:94:9d:90:8d:4a:17:87:
                    5d:1d:f0:79:13:5f:0f:97:ca:7b:99:20:03:f9:c3:
                    06:9f:da:bf:c4:c3:94:7e:d6:38:03:20:d3:d2:05:
                    3d:1e:5a:56:76:59:3a:0f:1f:ee:2d:8d:e2:d9:2e:
                    e0:72:bc:cb:cf:2e:03:e7:65:6f:9b:1d:f2:c8:a2:
                    5d:e1:b0:82:2f:4b:f8:69:bd:22:97:bf:a3:72:41:
                    0b:d6:19:b7:3e:6d:29:35:69:fe:f3:95:ae:93:4f:
                    22:44:18:78:b1:ac:64:76:a1:cd:c3:0a:2a:f7:54:
                    6c:71:0c:3e:76:d8:0a:6b:26:09:e0:11:a6:bc:e8:
                    5d:23:b4:e7:3d:fe:c6:14:7e:27:02:64:e3:8a:01:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:0C:FB:4A:3B:DC:32:2D:4F:B4:0C:A6:5F:6B:7D:5D:ED:C4:61
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:22:9d:a2:03:c0:45:8a:a4:a6:b2:93:04:aa:b0:14:4c:
         ea:d4:57:9e:65:7d:78:35:87:b8:bb:10:90:c4:0e:56:63:dd:
         ed:fc:44:59:d8:83:6e:5b:af:87:8d:65:2e:c6:b3:3d:fd:3e:
         5f:18:2a:d2:7f:eb:e6:47:ab:20:2e:85:ee:3e:01:cf:e1:e5:
         04:2f:37:8c:d4:66:16:d9:c0:cf:ea:85:9f:69:82:76:e5:71:
         b8:9f:59:45:54:b8:f7:e1:54:19:4e:50:54:ae:62:e6:1a:79:
         a5:07:37:e1:3e:5b:40:e1:ee:a6:b0:df:a5:b1:97:c8:1b:4d:
         6f:5f:99:10:be:72:03:a3:b0:21:81:9c:b3:71:13:2b:52:2d:
         13:bb:3d:3a:f4:b6:63:26:4a:d3:27:0d:6b:17:29:62:78:4b:
         84:ed:f6:40:ae:dd:c6:35:82:3d:0f:93:92:97:64:0d:df:79:
         f2:a5:e9:a9:ac:cf:dd:d2:1c:bf:c2:0b:32:38:cc:5c:87:0d:
         ea:0c:39:d0:c7:9e:20:24:d8:3f:45:b9:5a:7f:36:2e:eb:b5:
         1e:5a:64:e2:de:6f:34:bc:71:89:6b:99:aa:92:41:a7:57:94:
         bf:37:17:d6:19:1e:29:51:10:e4:13:2e:38:56:af:10:cd:94:
         6a:50:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org