Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31353a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31353a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          GN/QpLB2RxzSkmhTxXkNb5cxEyseBDE2FTr+jWehgzc=
Subject key identifier:   E9:70:D1:26:EF:AB:FC:78:66:BA:3F:E0:6B:CA:97:C2:4C:F3:14:CC
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       43677D8A6D60A6E42C981865239331044D710E14
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31353a3a2f34382d3438203d3e203631383838.roa
Signing time:             Thu 15 May 2025 23:15:30 +0000
ROA not before:           Thu 15 May 2025 23:10:30 +0000
ROA not after:            Thu 14 May 2026 23:15:30 +0000
asID:                     61888
IP address blocks:        2804:e60:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:67:7d:8a:6d:60:a6:e4:2c:98:18:65:23:93:31:04:4d:71:0e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: May 15 23:10:30 2025 GMT
            Not After : May 14 23:15:30 2026 GMT
        Subject: CN=E970D126EFABFC7866BA3FE06BCA97C24CF314CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:e3:71:e1:2f:4c:a8:df:08:5e:4b:0f:8a:
                    4c:c7:56:00:58:21:8d:60:96:63:8e:ba:3b:2d:1b:
                    3f:54:43:12:20:f3:33:cb:8f:fa:b1:31:a5:02:8c:
                    0b:1a:1b:37:6f:10:f9:75:91:e2:5b:30:70:71:21:
                    e6:8e:af:c7:0c:8a:2a:de:e5:69:d0:33:81:3f:ce:
                    00:cd:63:ec:99:d8:3a:b9:73:1e:ef:12:3b:82:cd:
                    11:92:66:70:8a:fc:bf:57:55:e6:8d:32:d3:ce:2a:
                    75:19:41:3c:b0:8e:fc:60:74:98:92:69:a5:a6:7e:
                    90:ee:f8:33:56:aa:22:59:24:93:15:e4:3e:94:3d:
                    c9:1e:df:18:93:35:6e:72:89:f0:97:f8:98:ef:7c:
                    96:a1:e2:2e:7e:59:29:9b:6b:01:a4:d7:9d:42:e8:
                    8a:d6:73:10:b6:82:4b:10:43:3d:f2:cf:fa:75:c3:
                    9b:11:ed:6a:d2:20:6d:da:b7:5d:cc:f6:96:ea:37:
                    9d:93:6c:34:65:6e:17:e4:89:6c:98:67:43:a1:44:
                    38:45:6e:16:ff:dc:b5:b7:5b:21:97:63:15:0b:56:
                    02:02:18:24:b5:d1:7f:69:70:26:a1:6c:ed:77:6d:
                    78:97:f9:fb:5d:25:93:e3:5c:8b:08:5d:97:00:78:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:70:D1:26:EF:AB:FC:78:66:BA:3F:E0:6B:CA:97:C2:4C:F3:14:CC
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31353a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:97:12:2e:2f:04:d8:06:9a:09:82:16:d8:e9:27:70:a1:
         96:28:dd:c0:3c:79:04:35:8a:50:fa:e8:f5:d2:f0:04:32:af:
         8c:07:fd:ec:8c:47:63:19:28:e9:c2:95:11:72:b7:3d:23:bc:
         e7:a4:82:af:8d:6e:e5:a9:fb:73:8e:66:95:26:63:0f:a5:07:
         bd:ad:81:66:59:95:d4:f5:e3:0a:1f:3b:bc:76:8a:3b:e5:f2:
         5f:6b:42:5f:de:ee:8e:21:44:65:72:9b:da:40:77:78:a6:aa:
         5a:b0:73:61:cb:7e:14:02:52:91:4b:b4:2a:4f:cb:51:09:45:
         7a:aa:b0:ac:0d:66:94:fe:86:11:7f:2d:23:53:51:29:e6:88:
         46:3b:f9:e5:0b:80:7b:1f:2a:95:7d:4a:4a:7e:46:0e:c6:cc:
         10:ae:1b:a5:15:f5:7b:91:d8:28:db:ed:8a:16:00:49:5b:e0:
         78:b0:b8:69:66:96:80:92:db:e5:4f:d3:59:5d:f0:91:9b:8f:
         e6:00:a5:f3:15:56:88:0a:a1:05:be:52:cf:75:42:cd:36:8f:
         08:8f:e8:e8:18:60:2f:8f:44:dd:b8:f3:6b:af:08:90:b0:f8:
         67:de:6f:dc:6b:fb:1b:75:b4:d6:04:f7:96:c0:1f:07:08:51:
         69:a6:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:53:09 2025 by rpki-client