Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          a11twepnJ/4egmKPr62kFadNcPT5I4wGdT0r9NcAIUo=
Subject key identifier:   F4:67:F2:36:9D:C9:A2:B9:60:AA:DD:84:DD:02:EA:FC:5E:DF:53:8B
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       45C48B8BE48BB99E8731CF5D162D72FF3B672454
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:50 +0000
ROA not before:           Thu 04 Apr 2024 16:58:50 +0000
ROA not after:            Thu 03 Apr 2025 17:03:50 +0000
asID:                     270340
IP address blocks:        2804:6a80:3008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:8b:8b:e4:8b:b9:9e:87:31:cf:5d:16:2d:72:ff:3b:67:24:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:50 2024 GMT
            Not After : Apr  3 17:03:50 2025 GMT
        Subject: CN=F467F2369DC9A2B960AADD84DD02EAFC5EDF538B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:4d:34:17:d7:6d:64:48:c7:ef:f9:ec:0e:
                    54:3f:a1:2e:d7:48:19:7d:95:43:24:65:2a:89:38:
                    c4:77:14:03:37:e4:5d:e5:8c:54:42:5c:a1:cf:87:
                    e3:ef:23:5c:b1:ba:69:e0:9b:e5:e2:90:a4:d7:70:
                    41:fc:ed:71:dd:7b:ae:a7:54:8f:06:f7:93:e9:60:
                    0e:d8:24:8b:f0:8a:e4:2d:5d:3c:9e:cc:2d:5e:f8:
                    06:95:c3:33:14:5d:be:ff:3a:6e:0d:a7:be:53:e1:
                    cf:ff:2e:27:4a:e9:6e:55:06:41:a6:5e:05:ac:ce:
                    d1:7e:18:22:43:ca:1d:c5:4c:af:07:27:46:ac:7a:
                    0a:ef:91:c5:00:56:e8:c8:a9:0d:d3:19:13:6a:1e:
                    6e:e2:1c:52:0f:ea:56:a3:d7:51:cc:39:52:8b:19:
                    1a:a9:f9:02:99:4a:a3:27:bd:77:25:75:4a:82:da:
                    b0:c0:7b:9d:41:3c:94:3c:a5:90:9c:9c:ad:0d:5a:
                    92:3f:b0:f7:a8:9b:6b:34:31:4c:57:f7:ab:7a:76:
                    f9:e2:5c:3c:88:ff:7b:c9:85:43:59:6c:5d:38:e1:
                    e8:1a:ac:b6:66:f1:18:36:2f:2a:42:bc:8d:5e:bc:
                    f2:87:99:a0:50:4d:99:d4:ae:7b:67:05:5b:3b:e4:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:F2:36:9D:C9:A2:B9:60:AA:DD:84:DD:02:EA:FC:5E:DF:53:8B
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3008::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:d2:c0:02:df:21:7e:e1:bd:c3:78:c8:20:47:8e:51:25:
         eb:5a:74:c8:1e:30:d4:66:bc:44:41:3e:06:ae:94:1a:58:95:
         17:db:24:9a:7c:05:22:a8:f6:61:65:ae:d4:8b:3b:e0:80:0c:
         83:91:c2:31:9e:b2:5f:ad:1e:bf:d5:4a:f5:46:72:c8:88:75:
         ae:9a:fb:43:36:71:a0:44:d3:1e:ae:a4:f2:bc:eb:ab:6a:66:
         d7:8b:2d:62:af:bf:fb:04:a1:8d:a7:8a:60:e9:a4:01:25:fd:
         0e:bc:22:38:be:bb:6e:2b:57:ef:5b:3a:4f:28:5d:4e:44:46:
         c0:91:a9:bf:29:ab:5c:04:7d:2c:bb:ae:5d:8b:66:e9:6a:89:
         00:74:ba:b4:85:24:97:4c:4f:86:4c:55:62:5c:05:eb:b9:24:
         bb:9b:5a:f1:ab:02:9b:1f:52:1f:67:b7:31:a7:59:9a:6b:17:
         d3:49:35:8a:b5:2c:71:41:bf:b7:4e:72:72:c9:98:a1:02:38:
         b1:8b:46:f7:64:56:e9:8b:08:8e:c2:c1:49:a7:37:c4:22:08:
         7f:fd:c7:1c:0d:0b:bf:04:37:c4:94:bc:ec:91:5d:3c:22:40:
         6b:d0:01:07:b6:4d:66:8b:88:28:e1:76:32:b4:be:5a:88:3e:
         e3:4a:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org