Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          GfGeMvc9EiQCdBLlxOynBJULYIJ0kkRmTinpLrD8HX4=
Subject key identifier:   97:A6:8F:76:FA:6D:CC:A1:CF:C7:D7:61:09:57:DA:16:B0:05:69:D9
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       5D4B80A727089C8676DE01347AFB723ED7D84B78
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 04 Apr 2024 17:03:51 +0000
ROA not before:           Thu 04 Apr 2024 16:58:51 +0000
ROA not after:            Thu 03 Apr 2025 17:03:51 +0000
asID:                     270340
IP address blocks:        2804:6a80:3014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4b:80:a7:27:08:9c:86:76:de:01:34:7a:fb:72:3e:d7:d8:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr  4 16:58:51 2024 GMT
            Not After : Apr  3 17:03:51 2025 GMT
        Subject: CN=97A68F76FA6DCCA1CFC7D7610957DA16B00569D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:33:96:e7:2a:8c:7a:ef:7e:8f:a5:3b:d6:
                    bd:2e:a3:b9:90:a1:0c:c2:af:f9:a5:10:eb:83:63:
                    8b:92:1e:6f:b0:cf:d5:d5:2e:18:cc:aa:37:d1:bd:
                    bf:10:88:b8:d9:88:db:2a:ac:6b:3a:d3:cf:0f:0c:
                    f1:a5:9b:b0:44:78:91:36:e4:c7:43:17:c6:23:eb:
                    bf:88:0b:90:41:b6:cf:80:bf:48:a5:47:6a:1d:8e:
                    58:13:43:6a:d7:6b:82:1d:b9:f4:fe:9a:da:c8:d2:
                    50:6d:c4:c8:f2:da:e2:31:6c:8c:04:79:52:33:07:
                    8e:75:e6:53:ff:96:03:79:ba:e4:cc:4b:47:aa:b9:
                    77:ff:e3:50:87:4b:fa:f7:30:c4:11:12:cb:b1:51:
                    cb:3d:58:9f:31:fc:ed:89:e1:9b:0b:97:a7:48:cb:
                    2d:12:8d:8d:71:2b:7a:7f:28:3f:d5:96:7f:6a:2f:
                    43:d2:26:13:21:8e:4a:9f:57:97:38:db:de:c0:a9:
                    f8:82:e3:90:b0:a7:dd:f7:6b:e7:87:16:30:91:8b:
                    9c:25:49:0c:41:45:fd:65:6e:73:3a:4c:cc:81:52:
                    b2:80:2c:2d:b3:c0:8c:af:15:c1:69:d9:0e:5e:51:
                    57:e6:83:a3:a9:26:6d:61:b9:38:6a:a7:e4:6b:29:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:8F:76:FA:6D:CC:A1:CF:C7:D7:61:09:57:DA:16:B0:05:69:D9
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3014::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:4d:e4:fc:a0:5e:49:06:d2:85:30:bb:ef:2a:b5:2a:34:
         e3:a2:58:0e:27:a6:70:ee:43:94:b8:3e:45:f8:f0:a1:35:4b:
         60:ad:6e:bc:d7:33:39:de:9f:bc:db:9e:00:04:bc:25:72:0f:
         cd:11:fe:9f:12:37:3e:b0:66:fd:01:e7:ca:1c:ef:62:8c:02:
         f9:b3:b7:e5:65:95:8d:57:48:c7:e7:f6:05:d8:9c:1e:3d:e4:
         dd:91:c1:6d:7c:c7:64:b8:21:c0:82:73:06:ac:f5:9f:80:55:
         6c:ef:23:6e:c3:cd:f4:fc:0b:c7:6f:80:9d:f1:27:f0:c1:6c:
         90:d7:7d:01:23:34:a4:7c:10:ae:95:78:4d:4e:ae:9c:3a:79:
         fc:d1:b3:c4:5c:a0:37:72:e8:9c:33:3d:71:98:81:88:68:1b:
         34:8c:b5:13:15:68:d9:0a:50:7f:eb:3f:70:d4:4c:19:c6:6c:
         27:ab:d9:dc:1e:0d:84:94:d6:91:41:2d:13:13:b1:45:34:5e:
         7a:e0:23:a0:94:6d:1c:81:21:a2:eb:9b:b7:c4:72:ae:5f:48:
         7b:b0:db:33:21:d3:cc:1f:fc:74:df:8a:ad:33:11:4f:c6:f5:
         ae:73:e2:09:f0:b2:14:0c:9b:e7:8d:c2:b9:78:24:10:ad:af:
         bc:87:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org