Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          jc4H+FoPx0IzlG94ZRD+KT1MTW5Luh7EWab/QVjceBk=
Subject key identifier:   57:5D:CC:E2:1F:DD:71:EB:A8:CF:9E:FE:68:25:78:44:E4:EB:1D:B3
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       5FE6F2B6CA5F287B79C487C946956D839689AF19
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:50 +0000
ROA not before:           Thu 04 Apr 2024 16:58:50 +0000
ROA not after:            Thu 03 Apr 2025 17:03:50 +0000
asID:                     270340
IP address blocks:        2804:6a80:3009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:f2:b6:ca:5f:28:7b:79:c4:87:c9:46:95:6d:83:96:89:af:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:50 2024 GMT
            Not After : Apr  3 17:03:50 2025 GMT
        Subject: CN=575DCCE21FDD71EBA8CF9EFE68257844E4EB1DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:40:5f:a6:bf:7d:2d:9a:35:d4:02:1f:f8:
                    e2:fa:ae:d9:9e:7e:1f:b0:bc:a6:41:c7:9c:66:d3:
                    cb:4f:33:6f:71:55:7b:54:da:54:32:2a:62:18:a9:
                    83:a6:f3:ec:84:1b:b8:40:07:1d:b9:af:ff:ec:53:
                    0b:67:5c:ee:42:d6:ff:b2:eb:6b:5b:91:db:a0:bc:
                    62:18:38:3d:e5:8c:74:83:d4:1d:e8:df:19:a0:12:
                    a8:1e:46:d4:47:4b:c7:92:d7:6a:e6:e3:74:4d:68:
                    ad:26:13:88:17:21:ee:3f:b6:e3:69:38:22:ad:d7:
                    9f:eb:dc:44:86:ec:e9:02:ae:d5:ca:50:50:f0:74:
                    06:ff:0b:04:99:69:59:4a:80:99:2a:16:d5:87:17:
                    69:f8:60:01:e1:45:90:81:94:9e:a4:fe:98:5c:23:
                    b9:68:01:12:c9:43:92:e9:8b:a1:01:21:15:87:87:
                    8f:27:91:13:53:5c:10:0a:f0:37:a0:ff:dd:d5:84:
                    e8:6e:97:e1:91:17:40:70:b0:4f:67:f3:e8:52:ab:
                    94:62:48:de:b2:10:ee:8a:19:1d:81:c8:b8:11:3b:
                    a1:69:3a:1a:af:04:e1:a7:5a:b1:5c:66:5a:da:fb:
                    21:b2:2b:06:8f:8b:fe:2a:48:fb:97:cd:b4:f4:ad:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5D:CC:E2:1F:DD:71:EB:A8:CF:9E:FE:68:25:78:44:E4:EB:1D:B3
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3009::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:48:e9:76:69:a2:cf:a2:ba:be:40:ff:ea:29:fe:65:04:d1:
         f6:87:f1:57:c8:53:03:af:5f:cf:22:76:dc:e4:92:fa:9b:ad:
         b6:57:6c:1b:f8:66:9e:90:a5:d7:26:5c:d8:26:39:fe:3a:95:
         15:90:b9:37:94:c4:65:01:a3:ba:62:cc:54:04:23:26:d8:0e:
         95:20:a8:65:e7:7d:3c:0d:8d:ba:83:a3:28:33:9c:44:96:92:
         e6:60:81:cb:5e:da:89:9f:d2:ea:13:94:dc:51:de:24:01:a9:
         1f:93:b1:62:78:a5:da:d2:70:c3:13:5f:77:d3:f0:e9:62:ed:
         77:0d:78:df:81:72:a9:10:86:ea:88:54:46:b0:35:68:e1:09:
         5c:1a:3b:b3:af:16:ca:9f:c5:f6:c8:1f:f4:c6:69:7f:7c:e1:
         83:a9:49:a3:ef:4f:70:00:1e:90:d9:f2:35:13:97:48:5b:44:
         ab:ae:a0:14:bd:bf:55:93:53:33:3d:9c:4c:68:a2:e2:20:e4:
         3b:ae:5f:f8:2d:8a:58:bb:07:d5:12:6e:cf:65:45:7d:ef:97:
         c9:4d:aa:a7:95:3d:d0:49:61:c7:4f:51:d9:d6:a6:0c:25:b1:
         17:5f:4a:ff:a0:5f:1d:2c:be:6d:56:92:f0:e7:ad:3a:69:3f:
         ab:2a:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org