Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31373a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31373a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          jacaeBYXnH4I9e913shIu8l8OKCuovCiBceX5eJihcs=
Subject key identifier:   B7:B0:2C:9A:04:59:43:4B:4A:83:B2:6B:A6:77:65:23:99:C3:78:E7
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       4C4B57AE3D628D23BDB5F00714A61512F13607C5
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31373a3a2f34382d3438203d3e203631383838.roa
Signing time:             Thu 15 May 2025 23:15:44 +0000
ROA not before:           Thu 15 May 2025 23:10:44 +0000
ROA not after:            Thu 14 May 2026 23:15:44 +0000
asID:                     61888
IP address blocks:        2804:e60:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4b:57:ae:3d:62:8d:23:bd:b5:f0:07:14:a6:15:12:f1:36:07:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: May 15 23:10:44 2025 GMT
            Not After : May 14 23:15:44 2026 GMT
        Subject: CN=B7B02C9A0459434B4A83B26BA677652399C378E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:ff:83:4c:bc:66:84:0b:4d:c1:8e:eb:34:
                    58:55:03:4a:59:d2:1c:c6:54:7a:4e:c0:89:26:68:
                    f2:a5:0c:95:04:97:fa:8a:da:d2:a6:77:cb:8b:25:
                    79:61:8f:a7:5f:c0:9f:8d:8a:f1:0e:7b:64:ea:d2:
                    0c:96:25:96:0e:ed:c7:58:ce:e4:7a:85:ce:49:96:
                    35:5e:1c:e1:31:ae:7b:4a:81:2f:de:63:09:e1:d5:
                    a0:df:cb:e9:f8:06:05:79:95:7e:64:07:ca:1f:e9:
                    b8:b4:fb:49:ae:a0:7f:56:ab:b7:83:86:ba:35:b3:
                    5f:86:d9:6f:7f:2c:c4:58:c0:57:20:4b:6f:3d:27:
                    89:7d:65:a3:62:d8:e8:7d:29:0f:1a:19:2d:fa:0a:
                    67:26:5c:d1:7a:78:3e:63:82:06:b0:cd:d2:9f:b5:
                    cd:1a:af:0f:2f:03:e0:19:aa:a3:01:8d:f4:84:89:
                    29:74:e2:33:8d:43:6b:1d:c4:d8:17:d3:fc:9c:4a:
                    4f:30:ce:a3:4b:b6:aa:d7:84:79:5b:36:25:a2:26:
                    4f:8a:7c:51:0d:9a:9e:3b:d6:5e:65:44:c9:75:43:
                    59:f8:95:ab:b7:af:5d:fd:c3:af:41:2d:82:f0:90:
                    76:ba:f7:48:20:58:be:1b:26:ff:2a:0f:2c:78:5e:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:2C:9A:04:59:43:4B:4A:83:B2:6B:A6:77:65:23:99:C3:78:E7
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31373a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:72:ce:4a:4e:4f:fe:0c:94:d2:cb:89:1f:0a:0b:f2:d9:
         aa:73:d9:28:8d:ca:f2:41:cb:7a:1b:20:00:f6:7b:8d:9d:1d:
         fa:5d:06:ec:cb:f0:01:ac:10:98:71:31:f0:c7:8b:7b:2a:d7:
         89:0b:e9:90:46:72:e5:45:77:23:84:a8:a1:fa:bb:44:29:1c:
         e2:99:1c:7d:fc:39:e0:77:36:cc:43:e0:13:37:46:69:4f:36:
         6f:73:08:94:e7:f0:88:e7:f0:59:71:0a:59:1e:75:ef:43:4e:
         4c:ea:7a:e9:5b:a3:74:98:72:ce:13:bc:00:f9:57:bf:1d:28:
         91:f8:19:cb:b7:f1:82:a5:5e:b1:cc:3a:0d:38:39:82:47:e4:
         ec:f7:5c:3e:58:65:68:df:8a:3b:3c:d8:27:df:de:cd:bd:27:
         ec:26:01:e6:b0:f9:3c:62:f8:b3:9a:2b:f4:75:21:cb:6c:53:
         18:dd:12:1c:ed:50:d0:de:91:c9:1c:8c:76:61:e5:92:03:e6:
         3d:4c:51:c9:53:7e:89:28:fa:a8:ee:f8:1c:cc:ce:bf:0c:48:
         d5:b0:43:5d:93:96:68:48:d5:77:ea:e4:4f:8a:bf:cb:3a:96:
         01:0f:0d:c2:ea:ec:0a:b4:83:ff:fd:89:39:cc:0c:25:4a:0f:
         7d:e4:c0:de
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUTEtXrj1ijSO9tfAHFKYVEvE2B8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNTA1MTUyMzEwNDRaFw0yNjA1MTQyMzE1NDRaMDMxMTAvBgNV
BAMTKEI3QjAyQzlBMDQ1OTQzNEI0QTgzQjI2QkE2Nzc2NTIzOTlDMzc4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgv+DTLxmhAtNwY7rNFhVA0pZ
0hzGVHpOwIkmaPKlDJUEl/qK2tKmd8uLJXlhj6dfwJ+NivEOe2Tq0gyWJZYO7cdY
zuR6hc5JljVeHOExrntKgS/eYwnh1aDfy+n4BgV5lX5kB8of6bi0+0muoH9Wq7eD
hro1s1+G2W9/LMRYwFcgS289J4l9ZaNi2Oh9KQ8aGS36CmcmXNF6eD5jggawzdKf
tc0arw8vA+AZqqMBjfSEiSl04jONQ2sdxNgX0/ycSk8wzqNLtqrXhHlbNiWiJk+K
fFENmp471l5lRMl1Q1n4lau3r139w69BLYLwkHa690ggWL4bJv8qDyx4XpDbAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUt7AsmgRZQ0tKg7JrpndlI5nDeOcwHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv
MzIzODMwMzQzYTY1MzYzMDNhMzEzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2
MzEzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBA5gABcwDQYJKoZIhvcNAQELBQADggEBAJin
cs5KTk/+DJTSy4kfCgvy2apz2SiNyvJBy3obIAD2e42dHfpdBuzL8AGsEJhxMfDH
i3sq14kL6ZBGcuVFdyOEqKH6u0QpHOKZHH38OeB3NsxD4BM3RmlPNm9zCJTn8Ijn
8FlxClkede9DTkzqeulbo3SYcs4TvAD5V78dKJH4Gcu38YKlXrHMOg04OYJH5Oz3
XD5YZWjfijs82Cff3s29J+wmAeaw+Txi+LOaK/R1IctsUxjdEhztUNDekckcjHZh
5ZID5j1MUclTfoko+qju+BzMzr8MSNWwQ12TlmhI1Xfq5E+Kv8s6lgEPDcLq7Aq0
g//9iTnMDCVKD33kwN4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:32:56 2025 by rpki-client