Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=
Subject key identifier:   1C:AA:46:8D:B6:D5:48:9C:9E:B1:53:1C:84:54:62:27:A8:DB:C5:53
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       0C248F2C8FA2C59592332869FCBC228E248970E8
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 06 Mar 2025 17:33:26 +0000
ROA not before:           Thu 06 Mar 2025 17:28:26 +0000
ROA not after:            Thu 05 Mar 2026 17:33:26 +0000
asID:                     270340
IP address blocks:        2804:6a80:3008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:24:8f:2c:8f:a2:c5:95:92:33:28:69:fc:bc:22:8e:24:89:70:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Mar  6 17:28:26 2025 GMT
            Not After : Mar  5 17:33:26 2026 GMT
        Subject: CN=1CAA468DB6D5489C9EB1531C84546227A8DBC553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:ca:c9:0f:dd:30:64:e0:d0:bb:bf:6d:22:
                    4a:8a:f7:3c:32:e7:60:ff:fe:c1:8d:ce:c8:40:95:
                    02:9c:ae:a9:10:f2:5e:ec:a7:94:a6:7b:97:a6:17:
                    2e:e2:92:79:a3:83:46:1a:6d:c1:fc:71:72:da:65:
                    ae:0a:22:41:cb:ba:25:2a:17:42:f7:1e:5c:c9:40:
                    6e:27:4f:42:e2:63:89:45:09:c4:34:4c:4f:12:aa:
                    fb:bf:03:9f:26:ef:2d:16:0d:d0:bb:03:2d:67:9a:
                    37:b9:68:23:c4:f7:2e:e0:aa:82:eb:f7:7e:33:f7:
                    6e:51:7e:50:ca:3a:1d:eb:5f:f4:d1:c3:6b:9f:ae:
                    eb:1c:80:8a:f2:96:31:6f:1e:ba:7c:9c:7d:c5:28:
                    59:9a:a4:44:20:27:24:09:5c:e0:12:bb:b2:1b:6c:
                    9b:25:e3:a5:8a:fb:48:b5:ec:c3:82:01:58:54:b6:
                    db:b9:1e:2e:03:32:05:2f:c6:8c:dc:5c:40:2e:e5:
                    9b:8f:4b:c3:11:f5:c9:d3:8d:c8:7f:78:62:66:cb:
                    2c:34:d9:10:ab:a7:ff:67:7d:8b:17:3d:6d:92:9d:
                    97:04:eb:3b:ce:d8:15:b0:09:e9:9e:f1:74:df:c7:
                    f8:fb:5b:ec:a6:cf:8b:87:64:48:85:b2:e7:f7:c9:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:46:8D:B6:D5:48:9C:9E:B1:53:1C:84:54:62:27:A8:DB:C5:53
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3008::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:4b:a0:fc:6b:99:ca:e4:d2:bf:66:a0:9e:b2:6c:d4:59:
         9a:fe:af:83:91:5b:d6:63:49:61:4b:c3:ab:ca:b9:5e:77:12:
         ce:4f:90:90:aa:93:f3:c4:51:52:88:b2:84:0b:25:15:8f:25:
         8b:9d:20:48:de:87:ea:38:47:7a:46:49:87:34:f4:bf:09:8d:
         0e:b8:38:20:c7:c5:55:2d:06:56:a9:b6:e6:07:51:60:4c:75:
         90:cc:5b:38:9b:c5:f1:73:10:b1:7c:75:d3:4a:b7:a1:af:90:
         b9:c5:8d:88:43:86:db:af:88:62:e8:09:25:fe:45:ca:a5:6e:
         15:3f:94:a1:7d:33:4a:77:be:b8:7c:2e:d3:7d:da:52:87:6f:
         f2:0d:51:a6:e6:99:e4:6f:c8:f5:2d:2f:f4:76:46:8a:83:cf:
         75:76:1a:47:40:0e:2c:56:f2:4a:33:e9:a3:aa:fc:7b:ef:b1:
         8f:02:44:7e:d5:53:67:d6:39:3d:9a:6d:15:1c:0a:1d:27:5c:
         cf:86:02:1b:e5:04:b7:2b:d7:be:30:7e:05:97:68:14:cf:74:
         0b:4c:4b:48:f3:d4:99:3c:3a:09:7a:60:4c:70:b8:c3:4a:0c:
         37:a2:98:2a:98:d0:ec:e5:87:8d:25:e9:ad:48:3a:2a:b3:60:
         24:27:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:17 2025 by rpki-client on console.sobornost.net