Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          NNg5YX36GV7v2iPqLd2Amp48shiqiAok02uo2TWggmc=
Subject key identifier:   EE:10:A2:36:26:09:A1:99:6A:22:21:E3:7D:5C:DA:D4:66:7B:02:2D
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       3F09DA1E5BBBED7820B308522A90B3CE244E4161
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     61888
IP address blocks:        2804:e60:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:da:1e:5b:bb:ed:78:20:b3:08:52:2a:90:b3:ce:24:4e:41:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=EE10A2362609A1996A2221E37D5CDAD4667B022D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:90:fe:5b:b1:29:34:00:62:a4:dd:4b:08:
                    16:f6:7e:be:3c:af:b8:c5:fc:1e:e1:f6:9f:2f:24:
                    00:bc:32:c8:24:cd:6c:eb:76:46:07:b2:d8:cf:74:
                    07:85:dd:f2:5f:61:26:2f:0b:53:b6:20:d4:e0:0d:
                    59:80:76:5f:27:ff:6d:70:34:d4:14:d2:27:de:45:
                    84:a3:e2:77:4b:09:5a:84:0b:e2:83:27:9a:c5:4f:
                    8c:8d:ee:12:3a:05:f4:4d:14:8e:49:60:8b:49:7e:
                    b7:8b:82:9f:15:4c:ec:0b:e0:67:b6:51:da:7e:37:
                    16:45:f3:de:a1:2f:de:2a:eb:c7:7a:33:2c:35:bd:
                    82:59:72:dd:88:3b:06:3f:db:f0:8f:92:dd:f4:b1:
                    68:84:ea:49:2c:36:ab:68:11:0c:9b:dc:d2:f2:0b:
                    f5:62:e6:6c:1d:0c:81:e3:cf:4e:cc:4c:cc:b4:9a:
                    7d:be:a5:53:b7:a3:9e:77:fe:1d:96:da:dc:e0:0d:
                    73:d7:b1:9c:69:71:40:07:f1:c6:72:56:f4:52:4a:
                    5a:ec:7e:6a:66:f4:38:f6:9c:6a:2d:09:30:fc:d1:
                    45:36:be:9d:26:44:9e:3a:9f:d4:91:2d:7f:b6:8b:
                    3c:ab:72:21:ff:86:fd:14:2b:b8:d5:4d:70:f0:01:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:A2:36:26:09:A1:99:6A:22:21:E3:7D:5C:DA:D4:66:7B:02:2D
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:8c:ca:e0:da:d5:bb:c1:1c:20:68:41:be:6f:0a:b4:6d:
         4e:86:38:e5:3e:b0:45:52:03:db:f5:3f:d8:2e:1b:dc:e8:2e:
         80:de:88:bd:54:c5:b3:d4:e9:ef:b8:43:23:7b:e0:f6:5c:18:
         93:9e:74:33:e0:79:f5:df:a9:59:4d:1c:b8:2e:b3:1e:74:06:
         68:79:9b:fe:a5:94:a8:18:36:04:f1:ff:bb:4a:a5:fa:f9:c5:
         75:a3:2d:67:4f:1a:76:21:c4:93:d2:61:be:93:bc:87:53:9d:
         3d:08:08:5c:90:2c:bb:cb:cb:15:2a:17:82:9e:8f:18:83:87:
         12:5f:0c:d3:3b:81:71:4a:30:2a:d6:f9:df:24:2f:f2:05:ad:
         c9:ef:f3:bc:e8:1c:65:19:e8:14:cd:da:52:d9:46:dd:71:fe:
         16:fd:d7:2b:b7:70:c1:3e:c4:8f:b0:ad:c4:17:a8:10:e3:f2:
         56:8d:3e:09:3d:da:af:b4:2a:bf:db:18:2c:ce:84:13:2f:0b:
         f8:53:59:62:41:57:69:db:2f:06:73:46:20:2c:3e:bb:87:5a:
         29:cd:26:ad:fa:7f:15:93:df:d8:66:f7:9b:17:02:96:a2:e4:
         a9:ad:b0:56:9e:94:f9:6b:ed:54:a7:68:91:6c:c8:04:18:03:
         e9:dc:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:17:59 2024 by rpki-client on console-fra.rpki-client.org