Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          VilToWNGAigNJWZR/k4U+nQgvsXCwfTkyCOMwJgxE+0=
Subject key identifier:   8C:37:B1:AF:76:1F:F0:38:09:03:99:0E:24:F0:45:A3:54:0B:CE:17
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       43877FC61AD850FCA5C7BC90395EEB79EF9A0B38
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:51 +0000
ROA not before:           Thu 04 Apr 2024 16:58:51 +0000
ROA not after:            Thu 03 Apr 2025 17:03:51 +0000
asID:                     270340
IP address blocks:        2804:6a80:3007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:87:7f:c6:1a:d8:50:fc:a5:c7:bc:90:39:5e:eb:79:ef:9a:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:51 2024 GMT
            Not After : Apr  3 17:03:51 2025 GMT
        Subject: CN=8C37B1AF761FF0380903990E24F045A3540BCE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:99:d6:5c:fc:f0:a2:d8:03:95:43:32:0e:
                    54:b7:84:0a:e0:6a:11:39:9d:0b:35:43:8b:a0:f6:
                    bf:43:85:2e:a9:7e:2e:21:8a:03:8e:ec:38:7d:73:
                    d2:8a:d7:7a:39:61:af:46:bd:30:51:3b:32:8d:c3:
                    49:b2:cd:fb:d2:6b:69:b6:aa:49:d3:c2:79:ce:38:
                    33:f4:72:65:3f:9a:e4:6a:80:07:71:fe:fc:32:26:
                    3f:09:b4:e5:1c:e8:34:59:cd:f3:98:10:e9:59:33:
                    9e:1b:fb:23:69:b8:b8:9c:1d:51:e8:43:4a:ce:9b:
                    ad:66:54:bf:4d:3e:d8:c8:2f:52:58:4c:09:53:36:
                    cc:9c:45:a6:75:67:ab:fc:12:0d:17:6c:e4:85:19:
                    69:d1:71:be:39:93:79:73:fc:8f:5c:64:57:06:cd:
                    9f:50:61:dc:b2:98:a3:1f:0e:da:7b:fd:82:fb:22:
                    18:05:04:67:cb:57:2e:eb:d7:8d:d0:68:f6:8b:4b:
                    1a:e2:32:23:2a:63:9d:dc:a0:83:89:85:86:5d:b7:
                    26:53:d8:2a:ed:d2:0c:b7:ec:a4:1e:74:78:91:2c:
                    89:7a:ab:26:ee:5e:40:68:89:15:89:aa:19:13:f3:
                    ab:f5:9f:85:f1:c1:e2:27:f7:da:76:a0:23:8d:53:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:37:B1:AF:76:1F:F0:38:09:03:99:0E:24:F0:45:A3:54:0B:CE:17
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3007::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:46:fe:69:0c:cd:11:7c:f5:e4:91:65:60:51:6c:e6:8d:5a:
         1e:5c:ad:93:a4:38:dd:be:5d:05:68:b9:db:ed:7c:8f:dc:95:
         4f:4f:86:fe:0f:f1:aa:4d:a9:ce:f3:d2:ad:c3:8e:4c:93:8c:
         aa:be:7b:9c:13:34:ae:37:c5:5b:55:53:3e:c8:66:8b:45:53:
         14:60:c7:41:12:7f:35:28:1f:b0:a2:f0:84:ef:70:76:3d:2a:
         e8:90:d4:20:95:e9:55:ea:97:99:ad:60:33:cb:b7:ac:2e:65:
         73:2a:c9:0d:a4:e3:8a:c5:74:43:da:4b:53:2a:22:e2:d2:5f:
         39:75:76:be:87:1a:d9:3b:2a:16:2d:b5:8a:52:fb:a8:1a:89:
         81:c8:65:a4:e9:93:81:40:fc:37:4a:b2:a2:e7:8a:2a:a9:5b:
         ce:46:74:dd:73:a0:85:cb:27:9a:16:32:5b:95:13:fa:2a:d7:
         70:b5:68:03:b5:cf:7d:41:f2:37:fb:0d:bb:87:a0:29:67:e9:
         d0:82:d3:74:4b:7f:27:ca:8e:46:c3:35:d7:d1:72:bb:aa:1a:
         5e:08:4e:bb:4c:ce:31:28:e3:b9:48:29:cd:87:f3:fa:44:94:
         62:0a:0d:58:aa:6b:45:9d:fc:90:5e:da:99:80:81:8f:7d:f8:
         5c:0d:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org