Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          PaDPyP5LayriBhgRf/LNvgxizlu9oI2VuzFaY6lqsOI=
Subject key identifier:   01:71:D9:1A:DD:96:C7:39:27:59:6A:7B:6E:6C:26:7D:56:98:7B:0D
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       21BFDC36B6500DA216AD24458DAB53D1EC6623C8
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61888
IP address blocks:        2804:e60:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bf:dc:36:b6:50:0d:a2:16:ad:24:45:8d:ab:53:d1:ec:66:23:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=0171D91ADD96C73927596A7B6E6C267D56987B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:d3:e5:0c:ab:04:15:d0:49:a2:b5:ce:f4:
                    4c:5f:e6:af:76:87:6b:54:a0:d5:71:40:83:9c:a7:
                    33:af:25:62:63:c2:2e:22:08:bc:78:b8:b9:0b:c1:
                    6b:cc:bb:18:bb:87:07:f2:af:53:71:58:60:00:6c:
                    7e:0a:fb:8a:d3:b7:86:f7:7e:cd:db:ac:df:1d:87:
                    e4:95:b0:6f:cf:74:9f:10:3f:2b:1b:4a:1e:9a:55:
                    6a:c6:a4:61:d1:9c:de:4f:01:1b:e6:8d:10:2f:aa:
                    15:d6:b9:87:33:a5:63:01:0d:35:10:01:5a:bc:d0:
                    a8:91:be:56:93:cf:15:33:df:65:8a:6a:20:0f:5b:
                    82:6e:c4:04:59:2a:7c:22:05:ff:22:1a:a6:28:84:
                    8c:65:8a:a6:69:97:87:ac:37:40:ca:a9:67:06:f7:
                    14:9c:61:1c:c9:e8:53:36:9e:05:83:42:dc:33:49:
                    d4:41:ce:45:b3:91:75:9a:36:7b:a8:d1:22:3f:fd:
                    e7:74:61:6f:3d:a1:dd:fa:e5:fd:50:0b:45:c2:66:
                    1b:da:98:f8:c8:38:8b:3e:d6:2b:c9:48:a9:71:77:
                    47:cd:54:cd:af:1e:51:0c:2c:43:6f:ff:b4:1b:b3:
                    91:df:dd:e5:68:8c:c8:16:62:44:00:fb:75:20:c9:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:71:D9:1A:DD:96:C7:39:27:59:6A:7B:6E:6C:26:7D:56:98:7B:0D
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:d8:00:ca:d0:40:68:1f:3a:db:89:ec:8e:77:3f:13:69:
         6f:a1:b8:79:1a:ee:36:05:41:08:f6:96:06:de:b3:f4:29:ab:
         91:8d:10:2c:56:95:4d:6c:e4:ea:89:17:3f:d8:dc:21:7b:d1:
         29:c3:29:23:84:18:06:84:6d:68:96:87:63:45:90:6c:95:27:
         24:8d:bf:94:2b:3c:9a:6f:52:24:60:00:fa:87:ea:55:b0:10:
         b7:e0:3f:5a:c0:5d:08:4c:3f:e3:d5:ee:d2:d8:46:03:60:0a:
         ce:50:18:49:05:fd:96:5b:26:0c:3b:8d:6d:01:fe:2d:6c:6c:
         46:97:fb:31:c7:4f:c6:7c:74:c8:d0:cb:1e:19:71:fd:ac:3e:
         95:ef:7f:86:c9:b8:e2:c7:95:11:a1:b8:61:83:7c:38:24:95:
         5c:ca:a1:cc:8d:57:86:e4:92:a0:ed:44:e9:54:42:9c:76:6d:
         68:d3:55:66:ef:22:4d:bf:db:86:c8:bf:17:39:b0:32:f4:42:
         62:e3:a2:a8:85:ff:aa:2b:70:0c:9b:ba:26:a2:82:9b:7e:23:
         63:4e:a4:1e:5d:b6:90:7b:60:3e:4b:b7:60:8d:dc:2e:46:79:
         b2:c7:ea:04:d0:73:e9:15:59:98:31:31:79:11:79:9c:de:a2:
         96:82:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:03:20 2025 by rpki-client