Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa
File:                     323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (raw, json)
Hash identifier:          BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=
Subject key identifier:   FB:94:97:97:86:E7:5D:AF:58:25:FA:9E:AF:72:D2:6B:4A:CE:DD:68
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       471A8964E815461F207E9E4502DFBCFE87E45073
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa
Signing time:             Thu 06 Mar 2025 17:33:26 +0000
ROA not before:           Thu 06 Mar 2025 17:28:26 +0000
ROA not after:            Thu 05 Mar 2026 17:33:26 +0000
asID:                     270340
IP address blocks:        2804:6a80:3007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 03:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1a:89:64:e8:15:46:1f:20:7e:9e:45:02:df:bc:fe:87:e4:50:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Mar  6 17:28:26 2025 GMT
            Not After : Mar  5 17:33:26 2026 GMT
        Subject: CN=FB94979786E75DAF5825FA9EAF72D26B4ACEDD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:88:00:20:95:e1:38:56:1d:13:ac:56:0c:
                    90:ef:b0:9d:9d:bf:f5:e9:9d:75:6f:7f:30:4e:58:
                    ad:f7:f8:0f:b1:3c:3d:2a:83:73:8a:08:ee:47:3c:
                    6d:03:6d:4c:53:d3:4d:44:b5:04:39:6a:ed:61:1d:
                    53:4b:ac:48:a5:e1:df:19:4c:ac:dd:df:32:c6:29:
                    6f:a7:5d:49:9e:18:2e:33:71:32:d4:70:c5:71:cb:
                    6c:96:8b:f4:ea:75:f0:5f:64:50:12:1f:7a:38:35:
                    ba:f6:3a:f6:9d:a2:66:da:29:ca:e5:ad:09:ad:93:
                    44:49:8b:c1:66:59:c4:50:cd:52:69:13:a1:e6:08:
                    70:7e:9d:b8:5f:1c:40:74:e5:bf:90:b3:49:01:ad:
                    60:c0:82:bc:2b:0b:c9:1a:76:16:f4:3c:31:01:15:
                    aa:77:78:7c:16:f6:6e:e7:9b:66:dd:84:a3:4d:94:
                    ad:99:8c:be:5e:ce:9e:ad:b7:4d:c1:15:40:56:08:
                    f5:f1:0a:4a:e4:7c:9e:c9:28:dc:81:d4:5e:79:e6:
                    3e:ea:f9:52:3c:b4:df:13:bd:5b:53:ad:d9:00:e1:
                    c6:a3:5f:80:03:53:df:5e:67:9c:be:c5:9e:bd:45:
                    9b:74:17:d5:90:65:d3:7b:86:b7:c6:9a:d0:ff:11:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:97:97:86:E7:5D:AF:58:25:FA:9E:AF:72:D2:6B:4A:CE:DD:68
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a80:3007::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:29:d0:1d:2b:25:91:b9:84:8d:6e:70:23:a4:16:f3:70:ba:
         51:f6:34:73:93:ab:83:bc:af:c6:48:d2:b7:87:75:d0:f1:40:
         22:1b:ea:13:2d:d8:3f:82:3b:89:bf:e4:9a:61:56:46:92:20:
         de:50:ac:66:bc:5f:5e:ad:3e:d6:b7:02:af:b5:cb:46:89:01:
         6f:de:c7:c9:6d:2f:a4:80:d4:9d:38:ac:e2:54:45:3d:cb:e1:
         df:14:b8:fd:a7:25:8b:91:c5:cc:0f:a9:3d:0d:11:76:88:40:
         a8:76:43:9b:4b:3a:44:cb:ae:50:7b:4a:9c:47:a4:72:5c:bd:
         ca:05:74:c5:e7:fc:b7:17:89:35:5b:51:b2:a0:2f:bd:28:f5:
         3d:aa:b5:a3:17:43:74:14:8d:c3:e1:a9:98:88:f8:c1:bb:45:
         ae:50:d2:48:d6:be:9e:b2:2d:34:00:99:13:e6:e8:a6:39:99:
         ae:82:01:9c:a4:05:52:71:2b:74:ca:35:1d:ff:54:e5:02:9e:
         48:32:c8:f8:b0:b4:5b:a5:e9:6c:fb:84:9d:4b:9f:fc:5d:97:
         cd:57:e4:44:eb:ba:af:f9:66:ce:a8:0f:73:4d:c3:d3:9e:90:
         85:d1:6d:93:63:63:fa:e5:e5:65:e4:61:90:92:f2:da:18:a0:
         04:3f:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:20:56 2025 by rpki-client