Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          xTzlxTmn8Q2w5H3HpCVVPVMAiTm0RoF3xCkGCfL6ztk=
Subject key identifier:   17:F5:08:77:C2:1B:B2:0B:E0:86:BD:2C:54:3B:B3:F5:48:05:B6:9F
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       6DA5087D8445120ABC8CCF4261277969A8632D75
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:51 +0000
ROA not before:           Thu 04 Apr 2024 16:58:51 +0000
ROA not after:            Thu 03 Apr 2025 17:03:51 +0000
asID:                     270340
IP address blocks:        2804:6a80:3012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:08:7d:84:45:12:0a:bc:8c:cf:42:61:27:79:69:a8:63:2d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:51 2024 GMT
            Not After : Apr  3 17:03:51 2025 GMT
        Subject: CN=17F50877C21BB20BE086BD2C543BB3F54805B69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:3d:23:8e:0f:f6:0d:54:8e:56:08:a8:6b:
                    32:82:07:65:79:e7:a4:2a:a7:de:87:73:73:26:8a:
                    2a:c3:f8:70:df:ec:4e:4b:bf:2e:76:8f:9a:44:be:
                    47:fe:8b:3b:88:a5:c4:e0:48:b4:55:ef:d4:dc:3d:
                    d9:58:ee:a9:0a:7b:74:b9:9a:7e:2e:f4:a0:2a:79:
                    ba:35:89:e2:2f:5a:a1:4b:50:a8:00:bf:50:8f:ac:
                    5e:e6:ed:4d:d7:e4:91:8d:b0:bb:5e:02:b8:d3:41:
                    4f:19:aa:99:d1:a0:75:e2:a8:aa:1f:34:f8:8b:3c:
                    b9:c3:4b:85:44:92:17:65:e0:b8:ac:96:87:36:aa:
                    c2:52:0f:51:dd:a3:65:46:3f:52:12:f3:1f:17:89:
                    d5:f9:7c:e6:e9:5f:02:8f:6d:6c:41:83:1f:60:79:
                    e8:99:8c:02:10:7b:1d:24:8d:32:97:f3:d2:9a:6a:
                    96:35:fe:d8:f0:66:e7:24:05:7d:3d:1a:55:7c:f9:
                    66:88:8f:20:ed:61:37:8f:72:28:a6:7d:22:ea:2f:
                    6d:9d:df:1c:9a:f9:68:33:47:28:66:4f:ed:bd:01:
                    b4:08:3b:b3:bb:16:b6:ca:35:fb:cf:d1:dc:9d:ba:
                    ba:1f:b9:cc:d3:92:7a:7a:31:d1:08:cd:f3:0a:9b:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:08:77:C2:1B:B2:0B:E0:86:BD:2C:54:3B:B3:F5:48:05:B6:9F
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3012::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:f2:f4:e1:3b:8d:8f:a4:9b:6d:bc:30:ac:a0:b3:bc:62:
         cc:23:62:73:e8:3b:4c:9a:a6:f6:97:0a:99:e4:eb:26:78:cf:
         0b:26:36:2e:f9:d7:71:4f:a7:2c:96:9a:b4:2b:3b:78:bf:76:
         ea:4b:d7:ae:12:93:5d:fd:e6:7c:bd:b2:d9:4c:af:3f:ec:b6:
         be:11:fd:ac:30:cd:40:b9:1e:99:86:b3:f7:a2:e3:0f:97:4e:
         ea:1a:56:d1:65:fc:a9:11:c2:3c:2e:fd:40:51:c0:cb:c0:0a:
         57:03:28:42:ab:50:54:0e:7c:2f:64:10:2b:68:95:cc:07:4b:
         b3:25:61:64:47:d1:1f:31:48:34:92:6b:da:ad:61:6e:6a:aa:
         e1:aa:50:01:79:45:b5:b7:b1:c7:5a:6c:4a:40:8c:b2:62:9c:
         10:2c:0f:68:cd:22:cd:03:cb:b5:a4:7f:6a:b9:24:b7:9d:63:
         ea:8d:e8:7c:ed:f3:68:a2:f3:fc:fb:c2:c9:26:c1:f0:83:c5:
         40:a2:bb:b7:74:0c:1b:2c:26:e4:c0:61:37:9d:71:97:20:e7:
         59:9c:48:db:b4:da:4a:4e:b2:01:32:ed:a7:7d:b8:46:da:33:
         2e:7b:b5:45:b2:dc:95:19:e4:5f:fb:15:9f:89:f1:c8:e3:1e:
         ae:71:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org