Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
File:                     323830343a6364303a3a2f33332d3333203d3e203532353537.roa (raw, json)
Hash identifier:          MyK5s2e5d1ig/x7rtcCpLZCwmbBCmf8X+tj75XSXbfM=
Subject key identifier:   93:E6:ED:03:80:90:1C:8E:F2:7E:63:7B:CD:89:38:B7:7F:B5:62:23
Certificate issuer:       /CN=703A0CD811A69A5124FD18D0E69AB4829B388433
Certificate serial:       70B47D419D3D8BB7459B16E60E88080155D046B6
Authority key identifier: 70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
Signing time:             Tue 10 Dec 2024 23:52:28 +0000
ROA not before:           Tue 10 Dec 2024 23:47:28 +0000
ROA not after:            Tue 09 Dec 2025 23:52:28 +0000
asID:                     52557
IP address blocks:        2804:cd0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl
                          rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b4:7d:41:9d:3d:8b:b7:45:9b:16:e6:0e:88:08:01:55:d0:46:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703A0CD811A69A5124FD18D0E69AB4829B388433
        Validity
            Not Before: Dec 10 23:47:28 2024 GMT
            Not After : Dec  9 23:52:28 2025 GMT
        Subject: CN=93E6ED0380901C8EF27E637BCD8938B77FB56223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:c5:3a:a2:c4:5c:25:bf:25:01:57:b0:34:
                    45:97:5b:6e:77:c5:59:e0:8e:8a:79:ef:20:06:94:
                    f5:50:1a:25:06:f8:b8:9f:43:6e:35:ab:7a:ef:04:
                    76:f9:df:33:9a:e0:6f:46:af:3a:5e:e9:a3:71:4c:
                    d3:b0:9a:da:b0:1c:10:02:8b:47:b1:6d:34:f2:be:
                    4a:90:be:84:f9:05:77:7f:32:f4:a9:56:4f:fd:6f:
                    73:d7:a0:ae:1b:51:8b:60:26:f8:0a:d8:39:2f:63:
                    32:57:6c:05:5d:5c:c2:d3:ee:e9:fd:80:ad:fc:4c:
                    e3:25:0f:d5:f1:c2:f1:68:bf:15:c1:44:86:a6:f2:
                    df:0c:64:14:19:af:63:2e:bf:ff:9e:bf:66:73:97:
                    9d:ad:89:36:17:22:fa:bc:e3:a6:02:ef:40:4d:bf:
                    53:92:90:69:4d:11:36:20:d3:82:4c:2c:a3:8d:da:
                    e5:c3:49:bd:0c:e5:ed:11:57:28:de:d5:c0:cd:85:
                    4a:e5:a5:78:ba:8c:e5:92:47:67:b2:4d:63:bb:d1:
                    3f:e7:62:29:84:aa:fb:e8:25:e0:2c:06:10:c3:81:
                    18:cd:5a:2a:8e:97:3d:25:6a:8f:9e:6e:0e:26:4f:
                    47:81:f1:4e:68:22:b3:31:d0:2c:bc:3e:e5:92:98:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:ED:03:80:90:1C:8E:F2:7E:63:7B:CD:89:38:B7:7F:B5:62:23
            X509v3 Authority Key Identifier:
                keyid:70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:41:b1:19:41:90:34:a1:5b:9b:73:b5:a1:57:7c:77:f1:
         a5:c7:f9:ee:0e:fd:e8:17:a3:db:5f:dc:5b:17:d8:8b:fb:e7:
         86:f6:af:06:21:6e:47:41:57:da:aa:94:d5:f6:b9:e7:e6:b0:
         19:c3:8d:a6:d8:f1:88:ad:7e:9c:1e:17:61:dc:ad:17:86:e9:
         0b:d5:05:d1:ae:a8:43:e0:61:90:b4:44:bc:31:26:a4:e9:6f:
         12:5c:78:76:1a:4a:68:b8:b9:61:a7:b3:1b:29:31:c1:a0:d1:
         a7:6b:a6:10:97:2a:5a:50:6b:01:01:50:5a:d9:13:d7:d9:fb:
         22:32:08:e2:80:be:52:9d:35:3e:e6:25:70:7f:7e:2b:2f:42:
         35:84:ac:54:b9:05:6d:00:2f:92:0d:ea:74:a6:10:65:7f:77:
         0d:72:09:1f:e3:3a:c6:6f:21:81:f7:7b:2c:9c:ce:b6:8f:c0:
         f5:4c:a5:74:ac:7b:4e:91:88:3c:02:ba:ee:0f:2b:60:64:45:
         58:d9:c2:6c:3e:af:8c:6b:b1:19:fd:7a:b1:59:2f:70:b9:3d:
         1a:e5:cc:f2:75:b9:35:bf:7f:00:a0:af:57:06:f3:d9:ad:c3:
         d9:b6:17:7e:a9:b7:3b:ff:6b:aa:dd:2d:a8:2a:6c:6d:40:82:
         80:44:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:55 2025 by rpki-client on console.sobornost.net