Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          srTwqXRG3ywZmiDL4Egi75pjTqHSjmNwhdxb21Q605c=
Subject key identifier:   33:60:01:7E:48:57:FA:2B:15:3D:22:C2:1E:B3:DD:F1:DD:CC:0E:7A
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       170AB061CABEB7341530EB25D5AF57D6FB3E4A16
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     61888
IP address blocks:        2804:e60:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0a:b0:61:ca:be:b7:34:15:30:eb:25:d5:af:57:d6:fb:3e:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=3360017E4857FA2B153D22C21EB3DDF1DDCC0E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:bf:a7:bb:22:0b:e0:26:fd:ec:06:cf:5e:
                    b2:26:b5:23:13:32:ea:fe:ec:6b:78:8e:98:75:25:
                    41:db:4e:98:a7:e1:0f:4a:d4:79:06:b3:f2:31:96:
                    b1:31:ae:05:34:48:60:87:42:0c:d8:2b:f5:d6:a8:
                    8a:09:f2:df:a6:6d:12:af:8b:ea:bb:5b:d7:27:a9:
                    81:73:ab:58:04:73:3b:8d:de:56:10:4a:35:2c:ec:
                    8f:49:17:48:0b:a0:ba:3a:34:3d:a4:ff:a2:e1:1f:
                    b8:92:74:09:80:39:d1:c8:3e:67:1d:7b:8f:5d:89:
                    f3:97:2e:83:1a:f2:01:38:36:fc:b5:fb:97:8e:bd:
                    97:af:8c:bd:0f:fc:52:c9:77:44:69:43:c0:b6:21:
                    e3:2d:2b:39:9a:ba:ab:2c:1c:93:53:f3:86:25:6e:
                    53:f3:d1:c0:df:8d:20:98:db:72:70:76:02:1d:3e:
                    3b:70:3a:4e:25:45:00:fa:7f:81:4a:12:bd:fa:d4:
                    1e:44:75:36:36:ff:0d:bb:2c:03:a9:c3:b1:e9:8b:
                    70:e1:7a:4f:c0:a5:07:07:a6:01:97:b6:b0:39:e7:
                    79:8f:f0:8c:7b:3c:cd:d9:bc:f4:48:06:a6:1e:f5:
                    53:4a:e4:a1:ad:cc:02:00:1a:2f:60:a5:48:31:11:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:01:7E:48:57:FA:2B:15:3D:22:C2:1E:B3:DD:F1:DD:CC:0E:7A
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:02:be:24:3c:12:be:e6:31:51:36:76:94:64:46:d3:09:08:
         8b:82:a8:86:9e:0d:7e:3d:3e:c6:f5:50:7f:bd:b2:cc:86:58:
         71:06:76:1f:f7:08:e9:ad:cc:5a:39:51:12:4f:cc:db:e0:40:
         e0:3e:23:bc:6d:32:09:f3:a0:25:ae:8e:32:17:bd:0c:f6:21:
         f2:25:8f:a1:f5:7a:e9:e2:40:97:2b:5a:3e:e9:f5:9e:b8:93:
         f1:dd:c2:3a:96:09:ad:c7:f0:7e:ad:bc:3a:49:23:d3:4c:d8:
         d7:7e:f8:b0:07:12:f2:a6:6d:2a:e0:a7:7f:4d:08:2a:2a:13:
         e8:2a:91:33:8f:3b:50:4b:45:b1:3d:c3:7a:1d:61:c9:b5:b7:
         e9:f7:e7:57:9a:d4:48:d3:f2:5f:84:96:43:30:ca:c6:dc:7c:
         9e:1e:f9:66:5b:29:15:e1:2c:07:ab:2a:d3:73:fb:00:d7:b6:
         22:d6:c5:19:b0:42:f6:ad:76:a4:ca:be:80:f2:51:29:0c:b1:
         df:95:1c:84:4c:7d:66:25:e1:b5:1b:a2:d8:2c:a7:38:2b:fb:
         19:35:4d:38:09:ab:67:0f:32:0e:0f:a8:9e:bd:bd:65:8f:7f:
         77:7b:89:53:df:a7:90:bc:e9:27:60:49:5f:99:f5:98:4f:fa:
         73:ce:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:25 2024 by rpki-client on console-fra.rpki-client.org