Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          4cmkx/trNHs3YSjRbL0TTFvXnjF5Uq0qY0WLlKUGh68=
Subject key identifier:   B5:FA:9A:82:D0:D9:A7:33:90:78:56:58:54:DE:C9:D4:D1:FA:67:21
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       0A37D5D19269C25F21DDA1F03E620D9463CF546F
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:34 +0000
ROA not before:           Wed 03 Apr 2024 18:26:34 +0000
ROA not after:            Wed 02 Apr 2025 18:31:34 +0000
asID:                     61888
IP address blocks:        2804:e60:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:d5:d1:92:69:c2:5f:21:dd:a1:f0:3e:62:0d:94:63:cf:54:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:34 2024 GMT
            Not After : Apr  2 18:31:34 2025 GMT
        Subject: CN=B5FA9A82D0D9A7339078565854DEC9D4D1FA6721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:c5:ae:c9:db:c2:5e:32:8d:9d:d8:12:14:
                    06:a0:ab:6b:77:1d:20:0f:c3:7a:38:e9:50:33:3e:
                    e1:d4:c6:6f:de:93:b2:e3:1f:7f:29:49:c8:4d:80:
                    b6:c0:32:a9:29:76:2a:be:e5:a9:48:62:7a:f0:91:
                    4c:8f:6d:aa:b8:51:94:a5:14:58:12:f0:6f:2d:4f:
                    65:15:f2:b0:10:0a:67:33:62:90:2a:a6:8a:5c:39:
                    e2:9e:80:92:b8:13:8c:49:7b:f3:11:dc:93:e0:df:
                    d8:26:74:c0:b8:96:d8:a1:b3:7a:3d:20:f1:a2:96:
                    86:27:42:2c:b2:35:98:b5:8c:76:83:44:12:13:f9:
                    53:30:d1:62:5b:1b:92:60:88:92:d4:ff:d5:2c:29:
                    39:3a:97:08:6a:e2:66:59:b5:ef:d3:be:07:cf:b6:
                    17:fe:a1:87:38:a8:c5:10:fb:4b:5e:6e:a9:59:6f:
                    09:44:00:c1:ee:bc:c0:61:7b:34:90:90:22:f3:14:
                    f5:32:57:b7:05:0d:25:e3:66:d4:0f:94:fb:d4:4b:
                    9a:e6:89:eb:72:7f:79:cb:bd:21:12:9e:62:95:76:
                    28:9c:19:bd:a0:f9:a1:78:11:c6:f8:4e:54:c4:d7:
                    58:a0:62:3f:8b:87:68:30:aa:9f:29:f1:24:9f:9b:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:9A:82:D0:D9:A7:33:90:78:56:58:54:DE:C9:D4:D1:FA:67:21
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:13:7e:a0:fe:1a:6a:dc:94:7f:f6:8c:82:7b:c4:c8:66:41:
         e8:c3:a8:1d:d7:36:0d:ae:2b:6c:75:75:3f:99:04:22:74:44:
         38:4e:54:37:cd:e5:fd:a6:da:ae:15:47:71:3a:bb:3c:0a:c3:
         aa:f1:a7:53:a0:54:72:49:01:7a:56:5a:b8:d6:c7:d1:55:77:
         ae:a1:33:54:de:aa:ca:3c:c9:99:44:ae:04:8f:dd:50:80:b3:
         e6:2e:f9:74:ba:11:e0:ca:4a:38:23:1e:c2:ad:93:aa:44:fe:
         ad:78:dd:64:cf:67:d9:49:13:f1:8f:44:30:00:22:63:ac:f8:
         9b:79:30:e5:1c:00:71:20:37:89:be:3b:16:79:ab:e4:e9:68:
         84:db:6c:38:35:26:87:95:33:a4:01:4d:34:f4:7b:5d:62:16:
         cf:51:1c:7d:8f:f3:3b:dc:68:63:10:f5:f2:a0:95:8b:63:54:
         a3:ac:83:e1:21:8d:a0:dc:33:8d:fb:f4:50:27:c0:2b:2d:3e:
         1f:46:94:4e:d9:73:15:61:69:a8:83:d5:f6:ab:a5:fe:51:f4:
         7a:7f:5e:3c:9f:43:90:cf:af:a3:b0:d6:fb:6d:10:f2:e5:de:
         34:da:67:31:f1:12:c7:59:d6:c9:8e:fb:ca:73:7c:6d:0e:21:
         60:a5:5e:d7
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUCjfV0ZJpwl8h3aHwPmINlGPPVG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNDA0MDMxODI2MzRaFw0yNTA0MDIxODMxMzRaMDMxMTAvBgNV
BAMTKEI1RkE5QTgyRDBEOUE3MzM5MDc4NTY1ODU0REVDOUQ0RDFGQTY3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83cWuydvCXjKNndgSFAagq2t3
HSAPw3o46VAzPuHUxm/ek7LjH38pSchNgLbAMqkpdiq+5alIYnrwkUyPbaq4UZSl
FFgS8G8tT2UV8rAQCmczYpAqpopcOeKegJK4E4xJe/MR3JPg39gmdMC4ltihs3o9
IPGiloYnQiyyNZi1jHaDRBIT+VMw0WJbG5JgiJLU/9UsKTk6lwhq4mZZte/TvgfP
thf+oYc4qMUQ+0tebqlZbwlEAMHuvMBhezSQkCLzFPUyV7cFDSXjZtQPlPvUS5rm
ietyf3nLvSESnmKVdiicGb2g+aF4Ecb4TlTE11igYj+Lh2gwqp8p8SSfmwkRAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUtfqagtDZpzOQeFZYVN7J1NH6ZyEwHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv
MzIzODMwMzQzYTY1MzYzMDNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzYzMTM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEDmABMA0GCSqGSIb3DQEBCwUAA4IBAQCm
E36g/hpq3JR/9oyCe8TIZkHow6gd1zYNritsdXU/mQQidEQ4TlQ3zeX9ptquFUdx
Ors8CsOq8adToFRySQF6Vlq41sfRVXeuoTNU3qrKPMmZRK4Ej91QgLPmLvl0uhHg
yko4Ix7CrZOqRP6teN1kz2fZSRPxj0QwACJjrPibeTDlHABxIDeJvjsWeavk6WiE
22w4NSaHlTOkAU009HtdYhbPURx9j/M73GhjEPXyoJWLY1SjrIPhIY2g3DON+/RQ
J8ArLT4fRpRO2XMVYWmog9X2q6X+UfR6f148n0OQz6+jsNb7bRDy5d402mcx8RLH
WdbJjvvKc3xtDiFgpV7X
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:45 2024 by rpki-client on console-fra.rpki-client.org