Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          cO1ar55DkfzGrV3trWAV2Ulnxn4i1yM05uw8Vq/dms8=
Subject key identifier:   AB:CF:AD:CC:8C:47:9D:73:18:B2:73:DF:11:11:EC:92:79:47:F8:2E
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       66CD329C987BBF50F89665ECC0C54ACAA73E7C5A
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     61888
IP address blocks:        2804:e60:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cd:32:9c:98:7b:bf:50:f8:96:65:ec:c0:c5:4a:ca:a7:3e:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject: CN=ABCFADCC8C479D7318B273DF1111EC927947F82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:96:d9:f5:dd:87:e1:c8:48:92:5d:c2:a3:
                    3e:96:9b:dc:42:47:3a:e4:c8:6d:3b:cd:52:21:5e:
                    25:cc:19:6c:ee:23:d2:d2:33:1b:aa:b4:39:ff:52:
                    8e:c4:ca:f6:96:93:80:c5:1e:81:01:3f:8f:f6:74:
                    c8:4d:73:ab:1f:5b:c1:a2:54:a0:e9:48:5d:94:d7:
                    58:f2:90:13:76:fb:a5:fd:0f:2b:61:9e:a5:eb:c8:
                    eb:ae:3c:e1:b0:26:69:90:b3:05:a3:72:17:7f:e0:
                    49:98:cc:14:ba:0b:20:c1:7f:23:c4:2b:6d:47:94:
                    d6:a2:29:5c:15:4f:e4:d6:85:8a:c2:c1:54:58:d8:
                    50:e4:e8:43:7b:ff:b1:9a:53:35:12:d6:e9:af:69:
                    70:6b:3c:64:fa:0b:6f:f7:fc:4b:33:fd:ea:31:63:
                    76:28:d0:fc:b8:8b:7f:6e:0e:f7:d0:19:81:3f:c4:
                    e7:b6:5e:d5:59:25:bd:8a:48:6e:19:7b:e0:5c:8d:
                    58:c2:40:cc:e9:d9:7c:22:e4:46:49:dc:46:38:1d:
                    c5:dc:b1:33:b5:47:f5:b0:2b:3c:7d:99:64:06:e5:
                    dd:35:a9:12:4a:c8:8e:38:74:17:35:b4:93:ef:78:
                    5e:9d:58:4c:19:b8:5d:70:e8:13:d3:b1:26:11:80:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:AD:CC:8C:47:9D:73:18:B2:73:DF:11:11:EC:92:79:47:F8:2E
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:a4:ed:c7:fb:5c:ad:fa:71:1c:c3:8b:4a:a8:8c:fd:88:
         21:4e:b2:39:4f:03:08:43:66:79:a7:37:0e:e2:a5:8f:3b:82:
         4b:86:5f:37:06:ad:4b:5b:21:cf:4e:40:34:ac:a3:9b:ab:a4:
         eb:44:e2:ca:c7:a6:9f:83:35:e1:d0:86:4e:39:43:cd:91:66:
         b9:93:8d:20:c6:1f:90:91:02:1c:66:41:0c:5e:aa:4f:18:1f:
         f7:8c:77:8e:34:38:b0:18:b0:21:68:23:a8:31:f9:36:3d:17:
         00:b8:08:67:33:28:fd:04:44:64:be:81:56:57:05:15:62:d9:
         1b:23:70:a8:4d:10:32:67:3e:08:0b:47:2c:b0:61:54:b1:0b:
         8f:9a:c4:a2:9d:82:32:81:c4:7e:59:7f:a4:cd:81:30:db:15:
         3d:9b:db:b2:39:86:c8:60:ab:43:d7:a2:af:1a:f1:49:ed:3d:
         84:c0:66:6e:36:65:0b:fc:63:4b:66:af:81:b6:8b:88:9a:79:
         44:43:3a:93:ce:3d:5d:af:2d:cd:0f:54:a1:37:3f:08:6c:b3:
         f9:53:30:30:e3:f4:77:c7:bb:d9:77:e5:8d:d7:4d:50:a2:90:
         65:73:38:bd:b9:b1:39:b4:38:b3:12:ba:5c:14:06:fb:f8:64:
         5c:e8:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:27 2024 by rpki-client on console-ams.rpki-client.org