Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          Wk/V4fq1Taq/tZL/JRCb7EZyS/gApeAvZGh1GEdUiIw=
Subject key identifier:   AF:42:2C:E4:34:6F:55:04:5E:F3:E2:86:99:F6:3D:11:42:C9:AC:04
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       5A56D158D4FB014FD86AC04C23D67A73C69315C4
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     61888
IP address blocks:        2804:e60:fa00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:56:d1:58:d4:fb:01:4f:d8:6a:c0:4c:23:d6:7a:73:c6:93:15:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject: CN=AF422CE4346F55045EF3E28699F63D1142C9AC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:6e:1c:92:1a:9b:05:3c:96:ca:34:60:52:
                    68:b0:e5:b0:63:13:ad:37:58:db:6a:ba:7a:23:7c:
                    f5:8a:a8:8c:09:98:78:78:ac:3b:84:af:05:a1:95:
                    73:53:ed:02:0c:c6:23:db:f4:38:19:37:da:43:10:
                    87:6a:07:ff:03:98:bd:d8:b8:19:96:b6:fb:8a:1f:
                    ac:97:b2:87:54:50:15:45:1b:95:d3:13:66:b4:c9:
                    4b:37:0c:d9:92:5d:b3:ab:36:c4:4c:6e:a6:9d:3d:
                    9c:08:e7:d0:fd:a5:73:00:9d:af:ca:4f:56:b2:95:
                    40:0d:aa:30:b1:3f:0f:36:1a:d3:9b:8b:e3:4c:8c:
                    00:ab:2f:5e:ba:21:85:47:b5:45:3c:c0:a7:91:ab:
                    62:ed:25:e0:9d:4f:67:93:39:68:14:9b:fa:33:b9:
                    da:4b:02:46:6d:de:bd:95:f8:df:67:07:c6:ec:ae:
                    1c:c4:9c:b3:e7:02:64:51:ba:3c:d5:06:f4:6d:b2:
                    22:bf:30:14:74:c6:c7:59:00:0b:d3:7d:ba:10:d9:
                    4e:e6:82:20:d5:68:d3:f5:43:50:99:00:fe:21:6e:
                    d5:a3:96:45:dc:b6:ad:e3:36:d5:0a:dc:39:24:e3:
                    64:31:be:3b:7a:cd:4b:cf:c1:0a:b6:a2:be:b9:14:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:2C:E4:34:6F:55:04:5E:F3:E2:86:99:F6:3D:11:42:C9:AC:04
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:c3:4b:ac:9f:35:04:01:84:18:23:83:51:ef:8b:b0:65:
         ad:f6:de:4f:6d:1a:2b:4e:9c:42:e8:3e:e6:19:f2:46:59:79:
         6b:1d:c4:36:82:1c:fa:e7:be:c9:0b:94:30:fa:12:c1:f5:32:
         ea:fd:64:c9:da:48:c9:e2:a5:96:94:a6:6a:4e:2a:6d:89:d6:
         b0:57:cc:50:92:7b:24:0f:83:46:97:b8:ac:15:05:e4:b4:67:
         15:33:e9:db:b8:21:8b:22:15:3b:9b:77:cc:5e:be:2e:0b:ee:
         d1:b4:21:09:aa:d0:4d:26:a6:c7:db:f9:fb:21:49:67:05:1a:
         6d:39:3c:d2:f5:3e:37:4c:63:ac:6c:35:d0:30:58:d6:40:22:
         03:6a:63:c1:85:87:3a:3c:32:cb:19:03:79:85:f6:82:1e:dd:
         1a:51:8b:69:dd:ac:a9:84:dc:bd:44:46:8d:e4:9f:3e:7d:8e:
         0c:aa:0a:d0:34:77:0a:01:8b:bd:63:37:f0:03:a5:5e:87:c9:
         e1:3c:22:0a:30:3b:31:04:5d:e6:81:fa:6d:e0:81:b2:35:1b:
         bd:ff:0a:39:57:15:7f:8c:e5:71:37:11:fa:64:4a:c7:ac:73:
         8d:76:26:77:15:e9:a0:f6:6f:07:a7:ce:34:14:d0:3e:09:c3:
         fe:fd:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org