Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          hSNTeqpAg6gH4JckizvRxn468Cxbd24/IVXmsvaoJYw=
Subject key identifier:   52:D9:C1:38:7E:13:7F:78:8D:3D:E2:42:95:67:D7:E1:00:70:A9:07
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       5CF9E3605AE3299008523B7F439AC33C8E14A350
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Thu 06 Mar 2025 21:59:18 +0000
ROA not before:           Thu 06 Mar 2025 21:54:18 +0000
ROA not after:            Thu 05 Mar 2026 21:59:18 +0000
asID:                     263897
IP address blocks:        2804:2760::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f9:e3:60:5a:e3:29:90:08:52:3b:7f:43:9a:c3:3c:8e:14:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Mar  6 21:54:18 2025 GMT
            Not After : Mar  5 21:59:18 2026 GMT
        Subject: CN=52D9C1387E137F788D3DE2429567D7E10070A907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:90:03:94:32:2a:15:70:95:5b:4a:31:46:
                    84:0a:f6:51:54:e5:90:03:2f:50:c0:67:0e:55:94:
                    61:b0:59:43:02:75:1f:70:91:06:e0:77:25:f9:ef:
                    d8:f1:58:2b:6d:19:3d:84:25:e8:a2:83:7a:ff:f7:
                    0a:52:de:5d:b7:05:9f:4a:a1:bc:d4:1d:4a:ad:78:
                    28:2e:ed:b1:4c:23:ed:7d:ee:7a:55:cc:54:6f:69:
                    da:ad:b9:d7:fb:2f:ab:8a:2e:59:0f:3b:e7:84:95:
                    31:dc:eb:7b:8f:dc:89:28:5e:93:9c:3e:2f:0a:1a:
                    59:e9:a3:70:54:59:b6:2e:4c:55:1d:a8:21:bd:42:
                    58:ec:85:3f:5f:5c:83:92:70:46:ff:5e:d9:e1:04:
                    05:c8:9b:1b:42:ec:51:0d:90:4d:ae:28:f5:16:34:
                    79:98:43:0a:a6:cb:71:b4:72:75:3c:cf:04:fc:20:
                    11:99:21:35:62:2b:77:b9:b2:13:af:f8:72:6d:ae:
                    d0:7d:b8:74:58:c1:07:3a:35:65:6c:27:30:8e:4c:
                    27:27:2e:57:43:75:d5:dd:bc:03:01:68:53:3e:86:
                    e9:c0:99:81:2a:56:15:a8:06:10:1c:4c:09:2e:c6:
                    3a:fc:6a:c2:16:b4:08:8a:92:67:8d:df:16:37:af:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:C1:38:7E:13:7F:78:8D:3D:E2:42:95:67:D7:E1:00:70:A9:07
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:19:9e:bf:b6:0b:56:fc:1d:7d:2c:71:80:48:e3:3b:48:94:
         72:cd:27:47:5b:08:c8:04:6a:d7:58:e8:8e:a6:5d:b6:75:86:
         2e:00:df:10:95:c8:11:ed:af:a2:81:59:56:51:0b:35:a7:9a:
         5f:71:3a:47:9e:90:ee:83:48:68:b8:79:bd:b8:bb:9e:b4:62:
         02:e9:da:31:0c:64:43:49:4f:c0:82:d5:5f:d2:e2:18:5e:48:
         aa:e7:ff:25:df:75:59:91:a0:e5:3a:0e:d1:6c:ae:52:d2:8c:
         67:ca:45:53:40:4d:1b:dc:03:d3:3c:d0:a9:1c:40:d0:59:75:
         6d:4b:0f:ff:67:13:ae:7b:e2:c2:c4:d2:9d:2f:ff:94:d8:e5:
         c1:35:b0:dd:be:91:72:11:f9:c5:a3:47:f1:0a:fe:1e:d9:2b:
         b6:0b:0c:81:57:c7:8f:e3:01:5f:ad:38:de:90:89:59:d6:9d:
         cb:4f:a8:d7:e0:21:f6:ae:d7:1c:bc:88:d8:0c:42:23:01:42:
         bb:19:b8:84:ee:20:d8:24:bf:93:5f:5c:8b:1c:36:60:bf:04:
         fd:25:d0:5c:03:3b:33:c0:f1:65:c2:a3:ff:ea:10:c7:73:e5:
         a8:56:fa:d0:0c:b4:c5:ab:0a:e3:41:8d:a0:83:d5:ab:2f:b6:
         fc:19:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:20 2025 by rpki-client on console.sobornost.net