Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          3WjRxMDln8FrPnjuBwt4XO51EfHJDwPPapDtq5PDOf0=
Subject key identifier:   67:76:EE:CB:52:93:21:E5:9C:72:8E:7B:40:74:07:C7:75:F6:B0:16
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       113C98368EB2CDF9984A95A4C221EF1D434D9D36
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:08 +0000
ROA not before:           Tue 29 Oct 2024 12:26:08 +0000
ROA not after:            Tue 28 Oct 2025 12:31:08 +0000
asID:                     265010
IP address blocks:        2804:3160::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3c:98:36:8e:b2:cd:f9:98:4a:95:a4:c2:21:ef:1d:43:4d:9d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:08 2024 GMT
            Not After : Oct 28 12:31:08 2025 GMT
        Subject: CN=6776EECB529321E59C728E7B407407C775F6B016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:3b:d5:77:27:f2:fc:68:fc:ff:eb:41:ae:
                    8d:0c:66:07:1f:b4:b7:d2:81:48:6f:15:d7:fa:15:
                    bc:03:d9:ca:eb:ec:53:57:fb:ec:ec:05:78:0d:83:
                    7c:0d:1c:8d:47:fb:ab:fb:a6:e5:3a:a9:ad:9f:39:
                    2b:7c:32:31:bb:2e:ac:9c:eb:07:d4:e1:2b:8e:ca:
                    d0:a9:c6:7e:cc:b2:a7:58:09:59:80:db:96:06:30:
                    9e:03:af:0c:cb:c6:d9:bc:33:e5:1f:86:2e:80:a6:
                    f3:07:e8:f4:e2:48:e2:ab:b1:c9:c1:2f:49:5f:4a:
                    81:f9:9a:d8:f3:60:2e:81:32:51:6e:fb:9c:30:9d:
                    a2:be:6b:0f:0b:3c:5f:44:03:19:7c:61:69:4f:90:
                    04:bd:5b:08:d2:0d:7f:68:7c:2f:0a:13:16:24:03:
                    19:e0:97:d0:64:1b:da:d1:dd:13:e6:8d:c4:5c:29:
                    2e:86:34:b5:83:85:d3:80:bd:40:51:95:ad:29:8f:
                    8e:32:9d:29:4c:38:7c:c2:20:38:e0:90:36:3f:43:
                    71:62:29:e7:3c:eb:6b:a0:41:8d:43:60:65:c7:f9:
                    b2:c4:e2:a7:db:ec:66:82:71:d9:24:91:87:31:31:
                    42:b2:e3:a7:df:17:76:d1:f2:6b:d1:bf:1e:ec:6a:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:EE:CB:52:93:21:E5:9C:72:8E:7B:40:74:07:C7:75:F6:B0:16
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:10:c2:30:6d:3b:89:47:bf:b8:a4:dd:ad:fc:08:f5:cb:c2:
         cb:ea:43:16:a4:7d:da:1a:d5:8c:90:ef:b0:92:78:df:70:10:
         b4:5d:40:c7:d9:a8:85:28:cf:ac:21:b7:26:8b:2d:5b:5a:62:
         b9:3c:d9:2d:85:ed:00:88:38:d5:62:84:ec:67:20:63:96:56:
         86:98:f8:31:35:c2:5e:9c:cc:fb:98:47:8a:4d:76:4f:66:64:
         37:b3:6f:02:8b:a2:3a:cb:51:82:e0:e9:c6:20:97:8d:20:4a:
         32:0a:d1:b1:e7:3a:ae:f7:32:8f:ac:c1:fb:84:ec:40:ae:be:
         59:51:b2:4f:94:95:e9:e7:87:4b:54:50:7c:d5:74:81:7c:b6:
         3c:69:fe:77:73:64:2d:d4:a9:b4:c2:f2:a0:c9:06:02:9e:6d:
         38:0f:bf:0c:36:63:5c:c1:21:59:10:d6:f1:f5:01:c3:dd:5e:
         13:47:b0:4e:d1:dd:34:8f:64:b3:0f:08:ba:84:36:09:15:81:
         d2:76:32:d0:d5:87:81:e2:eb:e1:6f:0e:e1:93:d4:3b:06:d1:
         c0:30:a2:1f:b5:94:5f:82:9e:a1:24:d8:7d:68:bb:3b:fd:4d:
         02:32:79:13:50:5b:72:df:ea:96:92:24:13:50:f8:66:29:14:
         6d:5d:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:08 2024 by rpki-client on console-fra.rpki-client.org