Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=
Subject key identifier:   E3:1D:0F:9C:17:29:91:78:71:FF:BE:98:02:F7:0A:6F:3F:87:EA:E3
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       7BA7C1B1C548B7F0DA0C194B0094AD18CA86DAA0
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 06 Mar 2025 17:33:26 +0000
ROA not before:           Thu 06 Mar 2025 17:28:26 +0000
ROA not after:            Thu 05 Mar 2026 17:33:26 +0000
asID:                     270340
IP address blocks:        2804:6a80:3010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a7:c1:b1:c5:48:b7:f0:da:0c:19:4b:00:94:ad:18:ca:86:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Mar  6 17:28:26 2025 GMT
            Not After : Mar  5 17:33:26 2026 GMT
        Subject: CN=E31D0F9C1729917871FFBE9802F70A6F3F87EAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:cf:3c:95:f5:0f:65:74:b2:d9:89:e8:df:
                    4e:08:f5:20:6a:01:81:17:cc:c2:c0:c6:ce:65:5e:
                    b2:ae:33:e9:81:fa:a0:af:f7:b4:c4:6f:97:3b:47:
                    d8:3a:ce:0f:93:bd:3c:6d:15:e6:ed:fb:d6:2e:d3:
                    49:a8:65:e9:98:76:5b:a1:2d:7d:b0:61:24:95:c4:
                    1b:61:f6:84:1c:c6:56:15:16:bd:3f:e0:49:21:97:
                    81:db:16:3b:30:4e:47:1e:b5:e1:28:ac:6a:95:05:
                    3d:00:e3:50:e4:da:5f:8f:16:cd:6d:63:70:36:65:
                    d6:bd:c0:2a:77:dd:1f:05:96:8a:f2:09:73:a5:62:
                    5c:24:c2:d0:b4:75:a5:a1:42:95:16:ec:4b:4e:c5:
                    d4:9e:99:df:82:c5:9f:10:f5:3b:74:a2:36:e7:21:
                    c1:7a:d7:fd:7a:c6:33:b8:47:bd:ac:1e:2d:56:20:
                    c7:e5:e2:40:00:e0:fd:a9:46:02:a0:6b:b8:68:1b:
                    6a:76:e8:78:66:5f:0b:7b:63:b2:6b:9f:5c:7d:29:
                    93:7c:15:ed:fe:5d:02:92:44:7c:82:09:61:6b:4f:
                    3f:2b:0d:35:0a:a2:a6:b5:23:a3:9e:57:71:f4:8e:
                    7d:b9:ca:4f:dd:ce:82:6b:ad:e0:56:3f:10:62:27:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:0F:9C:17:29:91:78:71:FF:BE:98:02:F7:0A:6F:3F:87:EA:E3
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3010::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:f7:dc:58:d6:3c:89:aa:fb:4f:4a:b0:68:ce:0a:fd:2c:
         b1:7c:91:a2:56:51:b0:54:29:4f:d9:5c:cf:c2:dd:15:1f:52:
         8c:7d:9b:35:27:e0:8e:64:fe:c0:e3:de:cd:28:c2:3d:04:bd:
         7c:b5:1c:f9:45:88:ca:65:05:95:6f:44:c9:c0:8a:88:7e:80:
         37:97:22:3f:72:cd:98:3c:46:42:26:26:b0:2d:e4:1b:85:72:
         8b:52:b7:09:61:85:9d:82:09:7f:fc:a2:0b:53:58:e8:8a:cc:
         1b:0b:52:48:14:f4:58:8b:68:2f:48:82:9f:d6:86:cb:52:95:
         3f:ff:60:be:94:5b:eb:96:07:7b:fd:16:80:9d:31:fb:d5:a1:
         c8:58:4f:d5:75:b8:0f:2f:a1:af:b7:d8:bd:67:bd:5e:96:66:
         b1:96:c2:17:21:0b:85:c3:91:cb:64:69:12:e8:e9:a9:b7:6f:
         5b:8c:4e:b5:3c:a1:bb:44:b6:bc:e5:cc:29:ff:3c:87:6e:b6:
         51:e7:ee:90:3b:ac:ff:11:a9:0a:ce:48:9e:ca:f4:e9:df:61:
         3d:ea:28:63:59:53:f9:0c:bb:b9:22:72:9c:84:c1:43:66:a0:
         6d:29:75:b5:42:17:31:7e:6e:08:bc:27:aa:4c:de:47:20:b8:
         81:52:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:17 2025 by rpki-client on console.sobornost.net