Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          83lsUd5EZGdz4YZ08CHNeWnBp5RDpzpj1pX2XeilFtQ=
Subject key identifier:   08:C8:82:6E:C3:1E:94:56:72:BC:FE:70:D7:14:21:8C:A3:C3:1C:7F
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       1BEB4F6A45CA8132794B71432698B81802F30DF3
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:51 +0000
ROA not before:           Thu 04 Apr 2024 16:58:51 +0000
ROA not after:            Thu 03 Apr 2025 17:03:51 +0000
asID:                     270340
IP address blocks:        2804:6a80:3006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:eb:4f:6a:45:ca:81:32:79:4b:71:43:26:98:b8:18:02:f3:0d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:51 2024 GMT
            Not After : Apr  3 17:03:51 2025 GMT
        Subject: CN=08C8826EC31E945672BCFE70D714218CA3C31C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:d5:db:cc:8d:21:cf:f7:4d:1e:00:cb:65:
                    93:50:73:df:48:76:36:98:f0:f2:d0:9f:59:3e:e0:
                    0f:9e:14:17:f7:ef:8a:10:0f:f8:2d:65:e8:a9:ea:
                    0d:bf:8a:fc:71:a8:ca:7a:7f:38:3b:92:9b:c4:05:
                    08:39:a7:42:6e:43:c4:6f:e9:48:c1:05:58:a3:c5:
                    83:9f:ad:29:21:7d:3c:78:f7:39:0e:fc:e3:82:bd:
                    b4:1c:c1:42:65:94:46:f5:a4:83:85:bd:a9:40:6f:
                    af:18:82:8f:4c:b7:8d:b7:73:07:19:c2:7b:0c:7f:
                    fb:e9:6c:33:8a:59:f6:ff:9c:de:38:63:02:dd:25:
                    1e:a9:ac:38:e7:b1:45:07:84:9c:4f:89:eb:f2:32:
                    a6:6b:14:c5:5a:f7:59:b2:35:60:3e:6d:26:e6:87:
                    a0:89:40:b8:a0:2d:be:8d:d8:ff:b3:59:b0:55:7a:
                    8e:d3:3a:0c:c8:89:32:79:19:eb:a0:fb:27:f8:2d:
                    53:a1:21:d7:81:e3:18:5e:d6:28:e8:b1:f8:57:78:
                    f8:fc:75:00:58:63:17:6b:1e:fa:34:5e:5f:49:40:
                    95:74:11:98:3f:3f:d9:a2:51:a1:32:f4:f3:cb:24:
                    8f:95:ab:6c:84:68:5f:75:6e:ec:c7:22:cc:13:ff:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:82:6E:C3:1E:94:56:72:BC:FE:70:D7:14:21:8C:A3:C3:1C:7F
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3006::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:13:6c:d0:e0:3d:ef:d7:63:17:0f:32:0a:d4:48:36:60:
         6a:ac:cd:ad:d3:78:a7:c7:d2:87:c2:64:58:5a:6a:49:bd:89:
         7c:10:b8:7d:08:ad:68:34:e4:70:6c:f4:bf:3d:50:8c:6c:c1:
         64:75:63:22:0b:69:29:a3:17:8a:0f:f7:33:78:e3:77:bc:99:
         9d:ff:8d:3b:75:c8:40:d0:cb:c0:f2:e1:b5:40:7a:15:f9:0f:
         e0:c2:fb:14:c4:02:44:9e:56:ef:a8:65:2b:98:d7:2e:e8:5b:
         13:96:e5:9d:6c:8e:09:61:9d:45:a9:77:11:52:fb:5b:f1:5d:
         e8:83:a5:31:1e:8e:7b:79:f7:21:84:9a:e9:15:0e:25:1f:d8:
         e6:14:c9:5c:4c:0e:b6:23:a1:9b:ad:1d:39:7f:23:a7:1b:91:
         fb:20:40:6e:b6:87:b0:60:bb:56:1d:2c:fe:8c:66:00:19:fe:
         d6:30:f6:ad:d9:bc:c9:e4:82:a5:45:fc:be:be:ee:8d:86:6c:
         61:e3:a0:0e:f6:8b:fd:ce:48:ef:77:58:ad:22:27:41:d7:c4:
         dd:9b:2f:aa:00:02:75:11:50:e9:3e:6c:5a:21:59:56:33:fb:
         00:9c:f1:2b:ba:0e:36:f2:88:d2:10:4a:32:f4:2b:9e:4a:9e:
         de:a5:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org