Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa
File:                     323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (raw, json)
Hash identifier:          4U6KZVoLYQAtt4WKcHo3rIkL/F9oWZim6PEiq3H+Ad0=
Subject key identifier:   69:69:3A:93:76:E4:CD:E4:48:2F:2C:C5:50:5E:6B:A7:96:03:28:E5
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       3116BC96F613788F10DF935A67A8A83EA6B96DE6
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:37 +0000
ROA not before:           Wed 03 Apr 2024 18:26:37 +0000
ROA not after:            Wed 02 Apr 2025 18:31:37 +0000
asID:                     61888
IP address blocks:        2804:e60:320::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:bc:96:f6:13:78:8f:10:df:93:5a:67:a8:a8:3e:a6:b9:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:37 2024 GMT
            Not After : Apr  2 18:31:37 2025 GMT
        Subject: CN=69693A9376E4CDE4482F2CC5505E6BA7960328E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:a5:83:e3:71:4a:ed:57:e4:bf:b8:2d:14:
                    a4:c3:c8:6e:0a:e5:f6:df:de:7c:82:a6:69:75:f0:
                    3f:d5:42:8c:69:9e:38:97:e9:fe:de:fc:6b:a4:57:
                    9b:c7:97:e3:e0:eb:dd:c9:e3:c4:b8:ee:81:ec:43:
                    df:be:77:93:0b:b4:71:44:a1:6d:8d:d4:e8:fe:17:
                    c6:35:c9:4f:87:05:5f:e6:e9:37:d0:7e:93:1e:15:
                    4a:88:1c:5b:c3:0f:d7:e5:db:2c:f4:92:98:46:88:
                    18:57:6e:23:cb:b1:96:b7:96:f4:91:39:99:5c:6e:
                    98:4a:ae:3e:d6:c7:c6:2d:12:15:52:0a:55:85:0d:
                    60:54:0f:66:1f:39:27:68:80:01:88:58:a6:90:b4:
                    a6:8f:52:cd:c0:68:b5:33:71:66:a8:f9:fa:c8:33:
                    5b:83:b1:21:6b:10:98:8c:a5:ea:76:cd:24:e9:8c:
                    93:78:cd:5b:1e:44:75:2b:ec:d1:9b:37:22:d7:3e:
                    bb:69:2a:8a:e1:14:7f:eb:13:d3:5f:57:79:b0:50:
                    0c:c7:1f:94:9a:4e:6c:d7:20:44:22:d0:76:1a:76:
                    a2:48:ae:4b:ab:20:33:20:7b:ba:1b:06:ac:5f:ba:
                    57:cf:7f:09:66:81:d7:c8:03:21:a7:1d:94:c8:b9:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:3A:93:76:E4:CD:E4:48:2F:2C:C5:50:5E:6B:A7:96:03:28:E5
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:320::/44

    Signature Algorithm: sha256WithRSAEncryption
         dc:4c:45:2c:1d:c5:85:8c:ed:51:95:3e:69:47:99:72:e8:79:
         38:c0:da:6a:d6:93:f6:a9:8f:d2:f4:b1:6c:2e:19:8b:f4:42:
         17:fa:47:0b:5e:4b:55:5e:68:32:a9:09:1c:a4:39:fd:63:fa:
         70:2d:e0:fd:11:51:31:56:47:b6:8b:b7:b8:dd:c6:bc:31:a3:
         36:a1:d4:75:e3:ae:e3:32:a8:fe:7c:5b:76:1f:70:2b:de:95:
         aa:60:0b:67:d6:50:65:9f:90:4d:a7:49:2f:5c:68:e3:c0:e8:
         33:6a:dd:ec:9b:98:69:48:2f:ee:a8:c0:3c:c3:a0:8b:e1:a3:
         6e:f0:e3:0e:38:b9:9e:9a:d2:7a:4a:35:d2:74:37:13:1d:39:
         27:6e:11:cc:76:66:da:0a:8d:f1:d4:e6:dc:c1:e1:36:94:76:
         3e:bf:c8:b3:f3:be:e2:08:b4:17:41:97:33:46:1c:2d:b7:ca:
         1b:ce:92:e1:21:ab:22:8a:39:94:c2:54:a1:95:98:e6:b6:35:
         82:4b:b0:21:40:c5:5e:2a:2a:5c:56:26:e0:33:07:09:1c:0b:
         fc:35:a9:4d:bc:31:c9:33:f2:11:cf:b6:6c:ba:74:12:5a:03:
         68:e5:a8:2b:de:0f:bc:d7:5d:d5:da:1d:92:48:68:7b:ca:0e:
         08:d5:50:68
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMRa8lvYTeI8Q35NaZ6ioPqa5beYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNDA0MDMxODI2MzdaFw0yNTA0MDIxODMxMzdaMDMxMTAvBgNV
BAMTKDY5NjkzQTkzNzZFNENERTQ0ODJGMkNDNTUwNUU2QkE3OTYwMzI4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF6WD43FK7Vfkv7gtFKTDyG4K
5fbf3nyCpml18D/VQoxpnjiX6f7e/GukV5vHl+Pg693J48S47oHsQ9++d5MLtHFE
oW2N1Oj+F8Y1yU+HBV/m6TfQfpMeFUqIHFvDD9fl2yz0kphGiBhXbiPLsZa3lvSR
OZlcbphKrj7Wx8YtEhVSClWFDWBUD2YfOSdogAGIWKaQtKaPUs3AaLUzcWao+frI
M1uDsSFrEJiMpep2zSTpjJN4zVseRHUr7NGbNyLXPrtpKorhFH/rE9NfV3mwUAzH
H5SaTmzXIEQi0HYadqJIrkurIDMge7obBqxfulfPfwlmgdfIAyGnHZTIudvZAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUaWk6k3bkzeRILyzFUF5rp5YDKOUwHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv
MzIzODMwMzQzYTY1MzYzMDNhMzMzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzYzMTM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEDmADIDANBgkqhkiG9w0BAQsFAAOCAQEA
3ExFLB3FhYztUZU+aUeZcuh5OMDaataT9qmP0vSxbC4Zi/RCF/pHC15LVV5oMqkJ
HKQ5/WP6cC3g/RFRMVZHtou3uN3GvDGjNqHUdeOu4zKo/nxbdh9wK96VqmALZ9ZQ
ZZ+QTadJL1xo48DoM2rd7JuYaUgv7qjAPMOgi+GjbvDjDji5nprSeko10nQ3Ex05
J24RzHZm2gqN8dTm3MHhNpR2Pr/Is/O+4gi0F0GXM0YcLbfKG86S4SGrIoo5lMJU
oZWY5rY1gkuwIUDFXioqXFYm4DMHCRwL/DWpTbwxyTPyEc+2bLp0EloDaOWoK94P
vNdd1dodkkhoe8oOCNVQaA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:27 2024 by rpki-client on console-ams.rpki-client.org