Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa
File:                     323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (raw, json)
Hash identifier:          TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=
Subject key identifier:   39:A2:CB:08:75:D9:E5:C4:4A:7C:05:35:1E:E1:D2:48:D5:C3:8E:96
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       120607BC0A66349E1AB69B0123626BF523671E32
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa
Signing time:             Thu 06 Mar 2025 17:33:25 +0000
ROA not before:           Thu 06 Mar 2025 17:28:25 +0000
ROA not after:            Thu 05 Mar 2026 17:33:25 +0000
asID:                     270340
IP address blocks:        2804:6a80::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:07:bc:0a:66:34:9e:1a:b6:9b:01:23:62:6b:f5:23:67:1e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Mar  6 17:28:25 2025 GMT
            Not After : Mar  5 17:33:25 2026 GMT
        Subject: CN=39A2CB0875D9E5C44A7C05351EE1D248D5C38E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:23:ac:4b:b5:ea:62:8d:51:c1:9a:31:03:
                    40:6a:0d:93:90:54:0c:cd:d9:7d:9e:6e:60:26:ea:
                    33:9d:d5:84:e9:98:ee:1a:ff:ad:00:37:52:d0:53:
                    63:a5:9f:bc:c1:d5:15:cb:63:75:55:a0:80:d5:97:
                    d7:e6:0b:62:6b:fa:4e:94:6f:bc:04:48:d1:27:ea:
                    42:ca:08:c9:52:1e:23:4a:d6:58:b2:0d:9b:62:e7:
                    95:67:6a:47:5e:57:cd:3d:af:cc:32:1e:63:16:8c:
                    89:53:81:af:44:9f:77:0d:de:ba:71:a0:ff:06:d9:
                    34:e4:42:02:54:04:ce:d7:05:81:c0:98:b1:83:c5:
                    0d:86:4e:06:c3:82:06:c1:8f:50:29:8f:35:57:ea:
                    2a:af:e1:e0:0f:c1:b0:89:55:1f:2d:9c:cb:3d:27:
                    19:f7:39:e5:49:bd:b4:b9:b1:95:cc:6e:e9:7a:23:
                    b5:35:b8:75:a9:dd:50:4a:49:fa:50:92:09:2e:ea:
                    4a:58:d3:65:35:37:69:fc:7b:d3:6c:0f:92:e1:9e:
                    35:a0:5e:a8:68:8c:c2:3c:73:f1:78:47:6d:59:2e:
                    98:0f:b8:1d:ff:80:98:2c:05:94:af:83:ee:04:cc:
                    af:a7:e2:12:13:e8:d5:33:d6:18:c2:d7:62:e1:67:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:CB:08:75:D9:E5:C4:4A:7C:05:35:1E:E1:D2:48:D5:C3:8E:96
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a3a2f33322d3430203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:45:4e:f3:68:e5:23:92:d4:fb:65:25:13:ce:f8:c6:af:b2:
         c9:64:f0:ff:3c:fc:3c:1d:31:18:d0:e5:95:c1:a4:ed:18:5e:
         99:45:fc:61:03:fe:5f:2d:10:96:36:33:3d:88:18:04:3f:84:
         04:5a:ad:69:b0:f6:47:d0:cf:49:24:e4:e8:3f:f2:75:e1:43:
         cf:d1:54:14:98:f3:a3:b4:47:86:42:c6:54:81:17:ce:41:43:
         42:18:d2:13:cb:f0:9a:a7:2f:0c:15:af:65:dd:f6:76:fa:b0:
         ce:98:5b:a3:f7:79:82:7e:2e:1d:6f:4b:d2:9e:8e:3e:8a:3d:
         1a:20:66:75:fd:78:d9:67:fb:c9:53:96:e4:59:c1:38:4a:2c:
         ea:3e:e0:b8:81:98:6a:cf:b4:14:78:35:46:9e:88:9e:85:95:
         83:e7:3f:ca:fc:b9:50:b4:fe:a3:17:78:1d:10:a6:93:00:0a:
         b8:20:b6:e0:6f:ab:11:6d:27:f0:bb:2a:b3:b1:13:f1:48:53:
         fe:41:37:a3:6e:3f:1d:03:d5:4c:4a:93:bf:50:b7:4f:54:94:
         57:17:61:c4:81:cc:dc:d2:46:14:e4:94:2c:50:45:03:66:b5:
         d2:f6:ed:16:64:29:fb:18:3b:68:74:32:b8:8e:cc:1c:b6:ea:
         6c:eb:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:17 2025 by rpki-client on console.sobornost.net