Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          XnXYekvsY2RVngEnSHnLLlNcex+uYy/z6OB/ZumJLMg=
Subject key identifier:   7E:EB:8A:99:64:EC:83:2D:FC:CB:23:F2:D7:70:76:0E:4F:35:FE:3C
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       02EB0EA4BC6D263FE9E2B553E3B52843FBC4C91F
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     61888
IP address blocks:        2804:e60:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:eb:0e:a4:bc:6d:26:3f:e9:e2:b5:53:e3:b5:28:43:fb:c4:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=7EEB8A9964EC832DFCCB23F2D770760E4F35FE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:f0:a3:1e:86:f4:40:e5:f6:3d:fd:bd:3e:
                    7c:c6:e9:bb:02:9b:d5:a2:79:03:e8:61:83:6d:dd:
                    28:6c:e3:68:1f:20:bb:93:11:b9:d1:9d:5f:aa:c3:
                    66:40:19:d7:fa:1c:32:89:ed:99:dc:71:0b:e4:41:
                    5e:76:ac:c3:32:29:22:ed:15:69:eb:cd:b7:d7:e9:
                    1c:1f:62:98:fb:84:48:85:dc:4b:c2:b3:87:6e:4d:
                    65:67:a4:bb:42:6a:2c:19:c9:51:2b:d6:36:8f:10:
                    40:d8:f3:cb:95:c3:3f:08:84:86:44:60:28:87:ee:
                    04:0d:f7:e8:12:53:5e:40:20:21:25:d5:d3:00:ed:
                    15:9f:b4:da:fe:2a:db:b8:71:8a:a9:c8:0d:0b:23:
                    e1:b5:d8:28:fe:6b:8f:0d:0e:33:8c:8a:40:b1:cc:
                    c2:21:cc:85:24:a5:46:de:0f:c8:7c:4a:0b:a9:96:
                    be:f2:33:cc:90:84:bc:5b:59:d7:9a:bf:43:33:42:
                    be:f4:56:00:e4:d3:4e:57:58:27:20:d4:35:79:11:
                    0e:0b:d3:02:4c:50:bb:84:8f:12:98:6a:2d:2e:39:
                    32:a8:89:0f:d3:e7:29:e9:2e:25:11:50:37:2f:26:
                    90:70:81:bb:a9:6d:3b:d9:68:45:5e:41:02:07:9c:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EB:8A:99:64:EC:83:2D:FC:CB:23:F2:D7:70:76:0E:4F:35:FE:3C
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:c5:8a:61:23:8e:ae:da:a6:61:1d:d5:7c:29:3b:14:70:
         0b:11:bf:f2:77:98:2c:3b:09:d0:02:5c:9f:c4:ec:7d:d1:ca:
         e7:58:5f:1c:c4:0c:9f:1b:3c:54:fe:93:80:3a:91:19:0e:d8:
         a5:bc:80:bb:8c:fc:ca:63:13:8d:f8:f1:6c:06:e8:e6:50:fd:
         7d:c5:e3:bc:3b:db:8d:54:0e:0d:bc:5d:19:1a:b6:8c:c0:11:
         f8:1c:d5:e2:32:13:d0:10:f8:31:f4:a0:b8:ed:ad:df:47:2f:
         e0:65:2a:1c:3c:33:98:a8:06:9d:f7:84:f7:5d:a5:56:e5:71:
         5b:d1:5c:3f:4a:40:ff:df:7c:2e:29:65:66:37:ae:1f:34:90:
         79:43:8f:e6:91:0a:41:c6:00:c9:a2:c3:fa:f7:db:1c:b4:15:
         be:b4:f7:11:bc:20:2e:02:45:ac:e4:bc:80:0a:d5:db:97:3d:
         ff:23:66:d0:46:e7:46:58:9b:91:30:1e:2c:a0:f1:b4:00:6f:
         f6:73:89:8f:c4:91:c4:fd:cc:15:eb:51:29:7e:3c:eb:c8:c4:
         11:23:2d:1b:06:38:66:b4:6d:5b:16:09:6d:67:1b:c1:66:01:
         f3:06:45:ab:b9:55:3c:73:96:40:4b:ef:02:ac:71:93:9a:51:
         7a:48:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:32 2025 by rpki-client on console.sobornost.net