Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          ThcIzkdM4RWv+yhJ+AFhkzS0U8C6XW4K8QtpCqRo1xk=
Subject key identifier:   CB:A5:3D:2A:ED:77:36:45:FC:F5:43:E7:6B:E3:94:F7:B0:6A:E0:D7
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       78BF2A4EF613B8838047A560D9AF4B5E9FDE23CA
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:04 +0000
ROA not before:           Tue 29 Oct 2024 12:26:04 +0000
ROA not after:            Tue 28 Oct 2025 12:31:04 +0000
asID:                     265010
IP address blocks:        2804:3160:7004::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:2a:4e:f6:13:b8:83:80:47:a5:60:d9:af:4b:5e:9f:de:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:04 2024 GMT
            Not After : Oct 28 12:31:04 2025 GMT
        Subject: CN=CBA53D2AED773645FCF543E76BE394F7B06AE0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:fc:2d:1e:03:44:fc:c1:a8:ab:51:00:02:
                    7e:a7:ae:b3:27:76:05:a9:77:45:66:51:a4:62:26:
                    82:e8:41:08:50:c3:dd:4c:c1:ed:b4:bc:2c:ea:9f:
                    bb:0a:ea:d9:29:ba:bc:ac:2f:5c:64:66:db:f3:1f:
                    2e:ad:c5:8f:c7:40:a6:cb:e2:da:eb:31:58:32:f1:
                    38:65:fc:c6:17:fb:1d:35:df:ba:ff:16:9e:d7:a1:
                    11:7b:44:32:16:53:b0:a1:9c:99:e1:bd:a7:c6:68:
                    44:1f:10:c8:4b:51:e3:a3:ce:d7:ca:76:39:a3:72:
                    4b:c7:0a:77:ad:e1:f7:7d:31:a1:83:18:b5:c2:3f:
                    43:0d:92:95:46:1e:9f:45:eb:9c:8f:fa:37:59:30:
                    ea:bf:87:12:d7:51:12:9e:0c:5a:ca:d2:cf:2e:97:
                    49:8f:95:84:9e:71:6f:df:86:63:9a:9d:c7:02:9d:
                    6d:96:ff:10:0e:95:9f:c7:04:28:a3:1c:a9:d6:1a:
                    c5:5e:5e:31:89:33:d5:3a:bd:e9:ec:35:a3:53:cd:
                    9f:33:c8:fc:23:5a:7a:74:46:ea:7b:d2:8f:4c:5f:
                    6f:66:e0:3a:02:f9:74:29:d5:b8:e3:03:2a:2c:bd:
                    6e:fc:bd:14:66:e9:3a:a0:37:96:02:f2:7a:58:5b:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:3D:2A:ED:77:36:45:FC:F5:43:E7:6B:E3:94:F7:B0:6A:E0:D7
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7004::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:24:24:cd:d3:fb:f3:0b:e1:5e:ee:8c:44:c8:e2:08:cc:60:
         67:61:e8:f4:fb:4b:2e:93:ed:11:4d:4e:66:fe:df:28:00:f5:
         d6:cc:98:3c:f8:ee:e5:71:b3:aa:b0:d9:35:d7:c3:dd:5c:01:
         7f:be:0e:8f:04:64:68:18:5c:91:63:11:d6:7f:aa:16:bc:ae:
         c3:99:34:bc:10:f7:6c:67:d0:2e:28:ae:28:c1:b6:ff:59:5b:
         e8:32:f9:02:90:35:a1:1c:f3:51:6a:3f:59:43:9a:bc:47:cf:
         41:40:df:94:c2:76:86:28:c4:19:46:e2:1a:9d:af:35:fd:9e:
         18:23:40:b9:f5:5e:d7:98:db:8f:ab:9a:10:0a:37:15:d5:c1:
         40:7e:e7:b1:df:41:c0:6c:90:c2:cc:d0:22:51:0c:83:55:ba:
         3d:51:5f:9b:c8:ce:95:f4:89:14:70:3b:7a:66:42:1f:8f:23:
         7f:16:ef:40:d9:55:c2:b4:e5:38:c6:68:96:6f:d1:9c:e8:92:
         da:d5:76:82:cb:1c:d5:66:69:0e:2a:c5:4d:00:f1:f3:63:b2:
         cc:0a:4a:eb:e8:b5:72:4c:f9:60:18:a8:28:e9:d4:60:7b:6a:
         0b:98:ce:7f:46:bd:7b:c4:ac:9a:c0:52:a3:e5:e9:2a:a0:58:
         1a:5f:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org