Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
File:                     323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (raw, json)
Hash identifier:          Dg6QgxjLlU/z9V++ZNu5x+kx/dkHCPlSeP4IrvAXZEM=
Subject key identifier:   89:7E:FF:68:74:E6:0C:86:4E:28:AA:3F:81:3E:4C:8A:16:1F:4F:2A
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       4180F30DB3D437FCC1C33503E27FECD4FE133735
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:300::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:80:f3:0d:b3:d4:37:fc:c1:c3:35:03:e2:7f:ec:d4:fe:13:37:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=897EFF6874E60C864E28AA3F813E4C8A161F4F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:3d:d6:d9:db:65:a9:96:90:48:70:e5:39:
                    34:f9:bc:9e:cb:61:fc:12:45:e8:19:9b:e4:a2:00:
                    4a:d0:f7:e4:6f:cc:35:69:58:ab:ee:04:13:43:8c:
                    bc:47:83:7d:0d:3a:5e:f8:28:f2:05:18:ec:b8:9c:
                    f6:27:e8:1a:50:b4:66:7c:3b:ba:e4:9e:37:4e:33:
                    c6:be:e1:91:f1:b9:a8:5b:4f:23:f8:b4:01:25:74:
                    a1:17:c6:c9:93:37:90:cb:fe:0e:28:41:bc:70:45:
                    9e:5f:b9:28:11:9e:27:ca:15:2c:10:86:85:53:76:
                    48:da:b2:89:3a:01:30:bb:c1:52:0b:9f:45:b6:06:
                    28:e0:fb:b2:f1:13:c6:f9:ec:85:27:e6:25:e5:f5:
                    6e:9f:62:50:ca:cb:31:a1:df:05:46:41:c3:66:48:
                    81:27:09:58:d2:07:b1:f3:22:8b:0d:b2:35:b9:89:
                    7d:49:b6:95:58:fe:a0:e8:c1:3d:b9:7b:15:21:32:
                    98:88:22:23:73:d3:cd:c0:6e:01:47:f9:0e:3d:b6:
                    d7:4d:8d:2d:03:c1:cc:70:7a:73:ca:f0:03:1d:fc:
                    d7:ca:bc:1c:a5:1b:24:f0:b2:db:93:31:85:64:50:
                    1e:28:aa:8a:99:9f:54:41:b9:1e:8f:61:83:5b:5d:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7E:FF:68:74:E6:0C:86:4E:28:AA:3F:81:3E:4C:8A:16:1F:4F:2A
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:300::/43

    Signature Algorithm: sha256WithRSAEncryption
         20:08:c7:f5:75:3b:4b:2a:2c:ef:d9:2e:c8:c9:5d:63:bb:87:
         09:33:3b:b1:d5:69:64:cd:59:a1:26:18:f4:53:24:a6:d6:37:
         11:92:10:81:98:48:cf:bc:ac:1c:52:bd:14:0b:c2:8c:9e:ea:
         46:2f:69:24:94:00:8c:ef:a5:db:44:01:f7:c0:87:1d:93:20:
         ad:b0:d9:f2:26:33:4a:83:54:47:ed:d8:f8:6c:76:49:0e:bc:
         c5:f6:81:95:ba:47:2d:de:f1:22:82:34:63:e2:fc:9c:15:7c:
         71:e7:70:71:3f:c3:d2:81:c9:be:6d:1e:d0:5b:02:7b:6c:1a:
         a2:93:67:76:74:a7:0b:27:de:8a:d2:48:a8:54:31:b4:9e:a6:
         55:b2:f7:53:b7:e6:3f:5f:62:3e:4a:cb:e6:60:e2:0a:0e:bf:
         1e:0a:3c:9f:f7:27:65:1b:75:3c:53:5f:38:b7:24:70:54:18:
         14:09:01:dd:4c:4a:a0:80:49:25:d4:94:1e:23:cc:ad:a5:11:
         85:c8:70:3c:a3:1e:89:37:f7:88:d9:93:1d:be:f3:13:84:bb:
         25:28:06:5c:6f:7b:3c:9c:58:d9:c9:b5:78:a8:d2:ac:93:8d:
         89:e3:c6:8e:89:8a:af:3e:09:6f:5d:83:b2:07:68:40:7f:89:
         4b:47:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:59 2025 by rpki-client