Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          T55MnXv0Lubpptl7DFzkIv9ZCA9CmUU8Rn2l3RhjdKE=
Subject key identifier:   CF:76:16:9C:42:83:C4:E7:29:FE:78:E6:C9:FB:18:04:07:4A:C6:EE
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       38AC2BAA007393F5F03920A6683D939D04C194C0
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa
Signing time:             Thu 15 May 2025 23:15:24 +0000
ROA not before:           Thu 15 May 2025 23:10:24 +0000
ROA not after:            Thu 14 May 2026 23:15:24 +0000
asID:                     61888
IP address blocks:        2804:e60:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ac:2b:aa:00:73:93:f5:f0:39:20:a6:68:3d:93:9d:04:c1:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: May 15 23:10:24 2025 GMT
            Not After : May 14 23:15:24 2026 GMT
        Subject: CN=CF76169C4283C4E729FE78E6C9FB1804074AC6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:d7:43:86:62:a3:f6:42:24:c7:53:30:9b:
                    74:d3:83:dc:1f:fc:8e:da:1a:80:0b:ab:a5:5b:20:
                    65:c8:53:16:54:3f:d6:34:91:93:44:85:c7:f1:68:
                    b6:54:e1:77:3b:ae:3e:29:52:ed:d9:d7:2b:cf:e7:
                    a2:a3:d9:47:a6:76:f5:e3:2a:a1:83:dd:e9:f9:1e:
                    d0:2f:54:94:79:55:75:2d:ac:c0:1a:cc:d3:ca:a4:
                    34:e5:83:90:6c:e5:be:5a:4d:1d:39:a5:3d:97:dd:
                    d2:0c:f5:81:9a:1b:02:13:34:d0:ec:06:57:9d:95:
                    99:2e:1a:6a:3a:a3:6d:f0:6e:f4:b3:1c:b2:4f:11:
                    1e:7a:2a:aa:01:1a:3c:0d:72:fe:99:be:2b:06:26:
                    a4:41:0e:8b:8d:bf:83:43:ed:93:21:e1:60:5b:89:
                    69:76:a6:08:90:36:1a:5f:87:a4:b2:10:75:ea:53:
                    35:79:55:a3:42:b0:43:ce:db:27:3a:96:2a:86:52:
                    07:a8:f9:61:d2:b8:ee:b7:bb:a7:a0:f3:c2:22:73:
                    c5:2d:e6:7b:43:b5:f0:af:95:2a:c6:ac:21:42:ff:
                    fe:a6:41:65:e2:8e:62:6c:eb:23:a4:29:6d:67:70:
                    d3:14:07:d8:54:e2:2d:85:8a:90:da:11:fe:59:52:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:76:16:9C:42:83:C4:E7:29:FE:78:E6:C9:FB:18:04:07:4A:C6:EE
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:71:8a:b3:47:5e:06:13:ee:60:a5:3e:b4:82:6d:06:75:9b:
         38:2e:3d:a9:97:f5:01:b6:2b:96:e5:a0:fe:3b:4d:a8:84:ab:
         5a:59:e5:0a:71:1f:e6:80:f5:bf:52:20:a4:cf:93:21:36:59:
         07:92:ca:f9:98:04:30:1d:47:b3:ed:b0:ff:dd:c1:95:02:4b:
         bb:59:75:91:98:a9:88:91:b2:3e:ee:1c:1e:91:bb:1e:5f:13:
         1f:32:40:f5:17:2c:a4:b6:41:8e:50:e7:33:58:3e:75:f2:cf:
         bc:fb:01:98:6a:0a:15:47:e9:22:b7:84:ca:76:39:a6:c1:59:
         66:3c:84:be:95:27:b1:f6:38:f7:a1:e4:b9:de:38:ae:6e:ab:
         11:29:c0:ca:0a:be:19:dc:06:4a:fe:7e:6b:1a:33:bb:32:eb:
         bf:d1:d1:73:c6:4f:b7:1b:4e:6d:03:9e:22:72:78:86:de:51:
         6b:90:55:cb:c3:4d:05:be:1b:fc:15:1c:59:1d:cd:af:6e:62:
         ca:66:b0:67:33:08:a1:35:20:6e:02:ba:19:d5:35:e5:22:62:
         08:4a:13:03:69:a1:e4:1b:fb:71:13:4b:61:94:a7:ab:c0:c8:
         8e:03:ad:2e:49:7c:bb:bc:63:ab:16:40:1b:19:6f:de:1a:3c:
         24:e3:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:43:43 2025 by rpki-client