Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          EHO3eCNgESIPP1EqMQMux8exVKok4Dj6ZPJ9UyPzwoo=
Subject key identifier:   42:86:10:38:74:66:C1:E8:E0:0B:B1:AD:8F:08:A7:77:E4:97:E2:F1
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       07C47D0546A02C6E9AB49847E1B0BA4C767648BA
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     61888
IP address blocks:        2804:e60:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c4:7d:05:46:a0:2c:6e:9a:b4:98:47:e1:b0:ba:4c:76:76:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=428610387466C1E8E00BB1AD8F08A777E497E2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:b4:c0:28:a4:55:0f:07:4c:40:4e:bb:42:
                    6b:3f:ec:62:e1:b9:ea:e3:1d:49:5c:fe:02:21:42:
                    07:0c:40:12:95:69:1b:2c:77:94:ff:0d:67:28:76:
                    b6:68:f5:3d:fa:eb:17:da:bb:29:b2:92:d4:0e:1e:
                    0b:cf:b9:42:af:ee:71:3a:cd:df:ba:b6:45:b8:6a:
                    6f:0c:19:96:b4:69:e0:66:1d:a8:a1:1b:7f:15:0f:
                    ed:3b:fa:ec:07:a7:1b:d3:36:25:65:81:82:eb:d1:
                    c5:47:fc:ad:c7:de:c8:e9:e2:e6:cf:83:9f:b0:ed:
                    46:77:d4:51:93:56:0e:cb:b5:60:a2:0d:6d:d5:d9:
                    13:52:84:e9:c0:eb:c9:1f:58:97:7e:c2:65:2a:d1:
                    47:90:32:4d:2c:f4:7a:f8:ef:0b:66:4a:3a:63:2f:
                    31:10:d8:8e:fd:13:cc:9e:c8:d3:f8:45:0d:80:12:
                    4b:d1:f3:e7:54:8e:04:a0:d0:95:25:bf:ed:d9:ab:
                    08:3a:1c:20:8b:44:b2:63:c5:5d:38:a0:bf:cd:8b:
                    4f:bd:fe:ce:8c:7f:39:69:95:ab:b0:a7:31:37:03:
                    60:03:79:64:d8:66:df:93:66:32:93:00:d5:ca:a0:
                    25:e6:02:6c:55:d4:d8:5a:84:cd:10:48:99:dc:98:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:86:10:38:74:66:C1:E8:E0:0B:B1:AD:8F:08:A7:77:E4:97:E2:F1
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:34:07:8d:20:08:8f:6c:08:6c:8e:ac:aa:66:e8:ce:5a:8f:
         d7:6a:d5:e3:8e:cf:e0:4c:81:57:be:a0:ef:18:87:b1:5c:72:
         0b:38:cf:27:cf:e8:41:0b:69:23:71:45:f8:66:01:29:88:23:
         7b:28:2d:71:57:fe:52:73:14:b9:75:17:31:9d:11:0f:86:e0:
         b6:6e:73:80:90:30:4f:07:92:93:22:b1:74:3a:a5:68:2c:dc:
         62:b1:fb:16:84:2a:09:4b:10:ae:18:09:f9:3d:2c:05:5f:5e:
         2b:c6:b9:11:2a:b9:ac:92:a4:61:d7:f6:f2:60:73:02:b0:61:
         9c:b8:f3:2a:d3:35:77:5d:1d:cc:f8:53:02:eb:af:03:96:cb:
         6b:55:74:30:be:00:df:da:47:6f:f6:fb:39:85:d0:cd:40:29:
         7e:d4:92:61:41:bf:8b:16:f0:08:0b:87:50:61:b9:4c:08:f7:
         b2:d8:c4:0f:4f:92:fd:2d:1f:62:5c:77:5c:5a:c1:a0:7e:f7:
         43:96:9e:19:55:bf:cb:4a:f8:0d:7d:00:f4:ac:2d:33:50:18:
         03:ee:b3:e5:d8:48:64:2b:a5:8c:95:90:de:49:83:36:d0:30:
         fa:04:d1:c3:20:0d:de:0c:22:11:1b:ee:f3:cb:4a:1f:db:49:
         01:8c:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:25 2024 by rpki-client on console-fra.rpki-client.org