Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa
File:                     323830343a6364303a3a2f33322d3332203d3e203532353537.roa (raw, json)
Hash identifier:          lXQHijOE5uRFvuKLsGMtyRpcnEx9DBSatOkyGYzmfRo=
Subject key identifier:   F8:60:8B:A4:95:CD:EC:F5:49:21:A8:C9:2C:7B:54:61:33:BB:CD:6C
Certificate issuer:       /CN=703A0CD811A69A5124FD18D0E69AB4829B388433
Certificate serial:       46DAB1663307657F057C58C88C6F3A35E64EDD1E
Authority key identifier: 70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa
Signing time:             Tue 10 Dec 2024 23:52:25 +0000
ROA not before:           Tue 10 Dec 2024 23:47:25 +0000
ROA not after:            Tue 09 Dec 2025 23:52:25 +0000
asID:                     52557
IP address blocks:        2804:cd0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl
                          rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:b1:66:33:07:65:7f:05:7c:58:c8:8c:6f:3a:35:e6:4e:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703A0CD811A69A5124FD18D0E69AB4829B388433
        Validity
            Not Before: Dec 10 23:47:25 2024 GMT
            Not After : Dec  9 23:52:25 2025 GMT
        Subject: CN=F8608BA495CDECF54921A8C92C7B546133BBCD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:e6:be:15:ab:52:0a:cf:fd:82:17:56:57:
                    5c:35:eb:08:ab:8a:9b:70:63:73:0f:08:a3:a0:90:
                    92:ca:c9:8d:92:19:03:73:1a:b5:4c:53:39:4e:71:
                    72:90:1d:7a:b8:60:76:f5:34:06:ff:5e:a0:e6:e8:
                    ec:6a:e9:89:66:09:e9:a4:52:9b:77:50:b4:92:0d:
                    07:3d:9e:94:f3:41:27:ad:57:df:d4:62:82:df:37:
                    59:d5:57:28:b9:78:94:e9:86:93:e8:7b:a1:a0:12:
                    af:2e:d0:8e:43:31:ad:f8:74:25:2a:2c:ea:d6:cb:
                    c5:29:80:2c:6f:95:b7:74:d9:ad:dd:c3:a2:24:cd:
                    42:3d:3b:1a:ff:21:c2:e4:4e:f6:22:4f:eb:ea:84:
                    1b:20:44:d3:35:bc:ba:73:77:34:7c:43:ab:e0:8c:
                    2c:55:93:a6:4d:98:49:e6:85:17:ff:a5:eb:5d:90:
                    39:a3:de:23:dc:69:01:cf:71:70:c7:a3:16:9c:7d:
                    92:b7:d5:ff:ac:81:27:14:ae:3e:a4:00:75:cb:e0:
                    aa:43:36:3c:50:ba:17:16:c2:1c:4c:3b:69:47:0d:
                    40:ec:e5:bb:da:5b:cb:d6:4d:03:cf:69:88:2e:79:
                    57:27:e8:57:77:14:e4:54:b8:2f:a4:a6:5b:36:c0:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:8B:A4:95:CD:EC:F5:49:21:A8:C9:2C:7B:54:61:33:BB:CD:6C
            X509v3 Authority Key Identifier:
                keyid:70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:bf:5d:9f:70:eb:78:43:db:5e:77:69:ad:f1:33:35:6b:
         89:a9:84:a2:3f:88:5a:56:7d:4c:03:81:f1:55:63:87:dd:66:
         63:3c:44:dd:0b:2d:96:f8:2b:3f:53:3c:79:3d:24:0b:b2:58:
         72:8a:93:75:8f:74:57:b7:22:2a:cc:f2:9b:70:64:75:be:4c:
         cc:df:21:f6:44:46:b2:97:78:2c:96:dd:50:c2:19:a6:20:a8:
         b1:dc:19:1e:65:8a:aa:16:02:87:0a:ef:75:4b:e3:bc:47:4b:
         d8:f9:70:bc:48:bf:53:7a:8c:99:7c:9b:e7:68:ec:71:15:2a:
         b1:db:e6:11:0a:4e:78:fb:31:1a:63:18:0e:0e:a7:1c:c1:e3:
         87:dc:2c:dd:74:a9:d3:2f:ce:82:99:a8:cf:e4:0e:89:5f:b7:
         72:25:ef:4f:04:ca:7b:9b:74:96:65:b2:9e:cb:00:2d:4a:48:
         df:0e:c2:e9:aa:d8:5e:6a:db:18:50:0f:72:4d:ad:28:d0:87:
         19:32:9c:73:63:a5:bd:f2:37:5a:d2:00:21:81:47:37:e5:eb:
         92:bf:27:91:79:38:8d:a5:f6:88:4b:87:5b:b4:c0:04:c7:7a:
         26:27:fd:58:ad:2a:0b:64:a6:f9:bd:3a:1a:5f:fe:10:fd:10:
         9e:a2:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:00 2025 by rpki-client on console.sobornost.net