Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31393a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31393a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          R0lFge0UQEOX76V0jQdstbKHI3QrbkXJjegBi9173mU=
Subject key identifier:   B2:80:81:8B:D4:44:0F:BB:4E:31:AB:EB:0A:39:47:0E:1E:2F:7D:00
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       2F2993B6AD6D653D7368880160A93FE21BB766A1
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31393a3a2f34382d3438203d3e203631383838.roa
Signing time:             Tue 04 Nov 2025 19:37:37 +0000
ROA not before:           Tue 04 Nov 2025 19:32:37 +0000
ROA not after:            Tue 03 Nov 2026 19:37:37 +0000
asID:                     61888
IP address blocks:        2804:e60:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:29:93:b6:ad:6d:65:3d:73:68:88:01:60:a9:3f:e2:1b:b7:66:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Nov  4 19:32:37 2025 GMT
            Not After : Nov  3 19:37:37 2026 GMT
        Subject: CN=B280818BD4440FBB4E31ABEB0A39470E1E2F7D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:34:bb:b7:61:6f:f5:1a:a7:f7:37:47:60:19:
                    dc:81:09:8b:8f:8c:4d:d0:eb:94:15:98:af:73:72:
                    b5:c1:29:4c:94:6b:d4:dd:e8:34:65:a8:ea:73:27:
                    99:79:04:0b:da:3d:a6:a7:cd:ac:4a:13:5e:42:43:
                    9f:56:a7:a7:f2:92:50:04:6e:cb:d5:c3:96:af:77:
                    b6:d8:40:93:36:bb:ff:3e:2a:ca:85:73:c2:7b:ae:
                    fd:ef:f1:6c:9e:11:25:b1:d6:5e:38:90:cc:4f:db:
                    a4:da:a5:2d:f1:d6:7b:9f:84:f4:3c:73:2a:f0:ce:
                    04:9a:85:6d:12:43:51:08:14:e9:39:dc:b1:38:e6:
                    9f:0c:e8:d8:f7:51:a9:5b:e9:05:89:0d:a7:8e:ce:
                    4f:05:84:21:87:84:4c:47:b1:10:3d:e1:c2:bd:79:
                    87:55:e2:7c:4d:28:2c:f4:f2:af:e2:7b:85:e0:09:
                    14:22:da:28:a2:7c:e9:ab:67:bc:53:80:9b:2d:88:
                    46:b6:1f:23:af:da:38:0c:c9:a3:00:9b:1a:0b:7c:
                    97:e5:74:e6:ec:84:6f:73:a5:27:02:68:6e:03:0f:
                    0c:c9:6e:eb:aa:0e:a5:5a:80:0b:3b:e9:4f:83:d4:
                    72:02:0c:61:64:e0:83:aa:ce:3d:a4:93:d0:a3:9b:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:80:81:8B:D4:44:0F:BB:4E:31:AB:EB:0A:39:47:0E:1E:2F:7D:00
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31393a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:92:3e:64:6a:96:df:53:61:b8:1d:2e:77:58:27:3a:9b:
         16:7a:d7:75:a4:33:6a:2a:b6:cd:0b:dc:56:9c:35:eb:75:b7:
         20:f2:0e:dc:53:4d:f1:d0:18:50:1e:5f:63:34:99:c5:96:62:
         8f:67:f9:64:72:e4:bc:b3:aa:0f:61:56:68:db:d7:58:3f:2a:
         12:a4:e5:e4:cb:62:ee:69:64:06:d6:cd:ae:20:a3:00:82:be:
         36:83:b9:b0:a0:38:3c:96:11:2c:a7:01:3b:0c:48:9d:71:ce:
         8f:6a:04:79:ac:ca:71:04:06:8e:be:88:a1:d2:da:7e:17:a5:
         02:54:69:ad:7b:6a:64:cc:64:b0:f1:21:2a:13:d6:79:b8:4a:
         8d:44:b3:37:5c:23:0d:af:fe:48:33:df:18:7b:b5:74:f5:10:
         7e:47:9a:b7:51:f4:8d:bf:e5:9a:6d:f5:9f:f5:59:52:bd:24:
         6e:b4:0e:c8:dd:48:31:29:fb:86:59:be:03:79:7a:91:81:8e:
         27:c5:01:b6:d7:f2:87:c4:54:ce:ba:d1:12:0e:70:cb:02:a1:
         3c:25:8c:77:57:b3:de:1e:02:9c:8c:9f:fa:55:69:a0:b4:e8:
         b2:67:c3:25:c6:bf:3c:6c:48:f2:51:c9:81:19:03:83:6e:19:
         53:f8:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:12:40 2025 by rpki-client