Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=
Subject key identifier:   E0:70:6E:39:3B:F5:FE:25:9A:EB:A3:46:81:FD:93:4D:E2:18:E1:80
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       16E3940DDC1A35A805A9FA7FA25427F89AA6157E
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 06 Mar 2025 17:33:25 +0000
ROA not before:           Thu 06 Mar 2025 17:28:25 +0000
ROA not after:            Thu 05 Mar 2026 17:33:25 +0000
asID:                     270340
IP address blocks:        2804:6a80:3012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:94:0d:dc:1a:35:a8:05:a9:fa:7f:a2:54:27:f8:9a:a6:15:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Mar  6 17:28:25 2025 GMT
            Not After : Mar  5 17:33:25 2026 GMT
        Subject: CN=E0706E393BF5FE259AEBA34681FD934DE218E180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:45:7a:80:d5:06:99:e7:18:98:0f:72:7a:
                    a5:fa:6e:b3:3b:57:ed:9f:63:e2:da:32:1e:0f:f2:
                    83:5c:0b:74:a8:57:f7:a1:3b:19:44:b5:5d:92:ed:
                    c9:68:8d:40:c7:25:8b:0a:4e:05:ef:b9:75:78:04:
                    a7:49:1b:37:ed:13:0b:05:a7:03:ce:18:d4:cd:73:
                    b4:4b:28:b7:e2:91:d2:93:fb:b9:9d:76:ff:c1:42:
                    cf:3b:94:89:51:f7:82:08:0a:1e:c2:f7:3f:a4:9a:
                    17:10:f2:47:95:42:55:9f:56:d7:b9:03:83:5e:ac:
                    be:4f:ee:57:5f:2c:7a:41:ec:cc:a5:f9:eb:08:f8:
                    d9:5c:91:b1:ca:f1:bb:87:07:9c:fb:19:11:39:64:
                    49:7c:f7:db:b8:50:6f:d4:c8:4b:2c:8c:cf:81:f0:
                    fa:13:29:39:95:2a:0c:73:9d:a6:13:59:8e:c6:85:
                    82:ee:04:b5:48:92:dc:0e:e2:83:ef:05:6b:90:fb:
                    2b:ed:9e:2f:d5:03:d5:7a:6b:97:31:54:67:bd:41:
                    a6:0a:3b:2d:c0:93:c6:31:95:86:38:65:15:1a:50:
                    bd:e2:52:bf:45:40:18:f9:aa:cc:f1:39:9e:91:e0:
                    75:29:97:88:3a:ec:9f:f3:42:7f:a9:94:3e:51:61:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:70:6E:39:3B:F5:FE:25:9A:EB:A3:46:81:FD:93:4D:E2:18:E1:80
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3012::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:45:b9:ca:3b:74:7b:7d:87:14:10:1c:93:81:b6:42:88:41:
         9a:df:7c:55:be:13:fa:ca:b6:bd:08:fe:dd:f8:13:55:d5:db:
         a7:5f:e7:c8:c5:d4:33:97:73:dc:85:a7:93:c9:67:77:a8:9e:
         9e:78:22:b3:06:25:54:c1:b5:e2:cf:e4:80:1b:38:58:56:ac:
         fb:3d:1b:13:06:47:b8:f3:d2:48:ee:58:b4:d6:31:24:38:6a:
         d1:46:6e:c3:95:29:21:f5:22:94:7d:d7:19:27:3f:61:5a:59:
         4c:8d:a7:4d:52:8a:f0:a6:b4:bd:0c:2c:af:97:72:ac:ba:95:
         0b:2a:00:bf:ca:37:c7:cf:98:99:20:4c:79:8c:2b:42:64:57:
         7a:ec:a6:02:aa:0b:d0:34:a9:d4:12:09:c5:47:bc:43:3d:84:
         79:a8:3d:e2:f4:af:41:7b:d7:d6:bc:b3:cf:e2:50:b0:83:10:
         09:41:c8:3c:33:d2:13:b1:ce:94:55:b2:47:e1:46:fb:c5:c6:
         5a:53:07:da:64:60:b2:06:41:57:5b:2b:6c:e2:7d:69:e9:62:
         09:5b:bd:7b:72:d8:6a:c7:59:83:34:aa:43:7b:93:f4:7b:de:
         e4:d2:4c:af:79:48:f5:45:6d:6b:53:a4:b5:6e:0f:33:c9:e7:
         1b:8e:1d:d1
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFuOUDdwaNagFqfp/olQn+JqmFX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBMzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEz
MTE5QThBRjAeFw0yNTAzMDYxNzI4MjVaFw0yNjAzMDUxNzMzMjVaMDMxMTAvBgNV
BAMTKEUwNzA2RTM5M0JGNUZFMjU5QUVCQTM0NjgxRkQ5MzRERTIxOEUxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdT0V6gNUGmecYmA9yeqX6brM7
V+2fY+LaMh4P8oNcC3SoV/ehOxlEtV2S7clojUDHJYsKTgXvuXV4BKdJGzftEwsF
pwPOGNTNc7RLKLfikdKT+7mddv/BQs87lIlR94IICh7C9z+kmhcQ8keVQlWfVte5
A4NerL5P7ldfLHpB7Myl+esI+NlckbHK8buHB5z7GRE5ZEl899u4UG/UyEssjM+B
8PoTKTmVKgxznaYTWY7GhYLuBLVIktwO4oPvBWuQ+yvtni/VA9V6a5cxVGe9QaYK
Oy3Ak8YxlYY4ZRUaUL3iUr9FQBj5qszxOZ6R4HUpl4g67J/zQn+plD5RYf47AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU4HBuOTv1/iWa66NGgf2TTeIY4YAwHwYDVR0j
BBgwFoAUcaNOjfAJZcohwapOPDesKjEZqK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMS83MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQTM0RThERjAwOTY1Q0Ey
MUMxQUE0RTNDMzdBQzJBMzExOUE4QUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNITENTMUU0UHgxR3YzUFQxcFFrcjNydUVDRVFxUlBDUTNaYzRncENvYmNjLzEv
MzIzODMwMzQzYTM2NjEzODMwM2EzMzMwMzEzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEaoAwEjANBgkqhkiG9w0BAQsF
AAOCAQEAcEW5yjt0e32HFBAck4G2QohBmt98Vb4T+sq2vQj+3fgTVdXbp1/nyMXU
M5dz3IWnk8lnd6ienngiswYlVMG14s/kgBs4WFas+z0bEwZHuPPSSO5YtNYxJDhq
0UZuw5UpIfUilH3XGSc/YVpZTI2nTVKK8Ka0vQwsr5dyrLqVCyoAv8o3x8+YmSBM
eYwrQmRXeuymAqoL0DSp1BIJxUe8Qz2Eeag94vSvQXvX1ryzz+JQsIMQCUHIPDPS
E7HOlFWyR+FG+8XGWlMH2mRgsgZBV1srbOJ9aeliCVu9e3LYasdZgzSqQ3uT9Hve
5NJMr3lI9UVta1OktW4PM8nnG44d0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:40 2025 by rpki-client on console.sobornost.net