Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/323830343a313339303a3a2f33322d3334203d3e20323633353338.roa
File:                     323830343a313339303a3a2f33322d3334203d3e20323633353338.roa (raw, json)
Hash identifier:          vwaokbW1+2q8l76Wb6T/gpoQ/1VIpzpwlRShjSPyxqc=
Subject key identifier:   DF:1E:29:F2:A6:8C:8C:CB:46:37:F9:8B:75:B8:0B:7E:4B:63:F1:D6
Certificate issuer:       /CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
Certificate serial:       2BEFEC1F6906947ACAE97AFC7B79224DB496C34D
Authority key identifier: CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/323830343a313339303a3a2f33322d3334203d3e20323633353338.roa
Signing time:             Thu 06 Mar 2025 02:45:36 +0000
ROA not before:           Thu 06 Mar 2025 02:40:36 +0000
ROA not after:            Thu 05 Mar 2026 02:45:36 +0000
asID:                     263538
IP address blocks:        2804:1390::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl
                          rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:ec:1f:69:06:94:7a:ca:e9:7a:fc:7b:79:22:4d:b4:96:c3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
        Validity
            Not Before: Mar  6 02:40:36 2025 GMT
            Not After : Mar  5 02:45:36 2026 GMT
        Subject: CN=DF1E29F2A68C8CCB4637F98B75B80B7E4B63F1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:58:f1:fc:e6:90:fc:3c:36:99:3a:2e:39:
                    7e:55:d8:7c:14:9d:eb:98:4d:e5:6e:bc:8f:e6:a7:
                    ff:28:e7:30:95:84:54:d1:ba:a2:0e:96:e2:89:79:
                    f7:69:8e:00:f3:1b:e1:13:5a:ee:ff:33:26:30:8a:
                    33:5c:e9:37:27:a9:f2:d7:91:69:12:f8:83:fd:2f:
                    a2:7c:b6:42:c1:4c:2e:c0:bd:64:dc:11:10:4e:f1:
                    e5:ef:cd:17:a6:db:28:88:e3:e9:b0:90:73:87:65:
                    65:5a:2b:35:bf:fd:f7:3d:03:e7:c4:16:7c:c6:ca:
                    cb:0e:85:cb:d9:4f:d3:48:c1:07:58:56:5f:9f:29:
                    5c:79:d3:1f:90:48:54:34:f9:73:6e:51:4f:53:a3:
                    f9:3a:4b:33:a6:83:46:11:9f:a0:67:95:ad:90:65:
                    62:09:20:5d:06:97:93:5e:81:49:b1:8f:09:ec:d8:
                    e3:3d:34:c7:ad:27:89:24:ee:cf:c7:2c:81:0f:c9:
                    3a:bf:2d:da:9d:89:cb:f4:41:fa:77:28:d4:3e:72:
                    e3:ef:6e:58:fd:8d:81:2a:e7:2b:37:10:c1:dd:1d:
                    45:39:c2:79:33:bb:db:15:fa:73:1f:5a:54:7f:82:
                    b7:12:4e:a3:aa:0a:10:b7:6c:45:f6:9b:ae:ec:f3:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:29:F2:A6:8C:8C:CB:46:37:F9:8B:75:B8:0B:7E:4B:63:F1:D6
            X509v3 Authority Key Identifier:
                keyid:CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/323830343a313339303a3a2f33322d3334203d3e20323633353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1390::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:58:c3:a6:c9:88:6a:ab:11:4e:1e:bc:c1:fc:27:82:58:55:
         16:e8:d5:2c:79:9a:07:3c:d1:c8:69:d5:08:1b:63:0e:a7:7e:
         ec:f9:bf:5a:30:53:8f:13:9d:85:eb:bb:47:c8:e4:a7:2f:e4:
         90:dc:ce:14:3e:68:84:d0:86:95:7a:fb:b6:b3:41:58:7e:62:
         fc:44:4d:c8:5c:60:2a:bf:cf:cd:2e:1a:84:eb:5d:4c:ec:d4:
         03:a2:25:d5:c0:1c:ca:02:a8:49:07:f6:ad:95:8b:0f:f0:10:
         5d:c7:43:05:f3:ba:09:fb:9b:57:ed:52:34:1b:6d:c7:c1:83:
         59:32:e8:20:c9:de:eb:63:ab:08:00:01:a0:2d:52:ee:19:8b:
         97:c0:d2:8a:67:a1:cc:51:ea:59:7d:71:8b:7f:ec:21:52:1f:
         dc:18:64:4c:2e:17:ad:d4:58:18:76:f3:5c:ed:41:2a:0d:b5:
         0f:26:a9:82:84:3d:31:42:b1:03:9b:20:b2:50:51:e3:06:88:
         8a:8c:d6:07:6f:72:de:61:7a:45:70:60:61:53:1e:d6:9c:76:
         24:d7:2a:52:63:47:f8:a0:92:49:be:1e:a4:e7:39:23:2a:c8:
         70:67:ea:47:bb:86:4e:d2:39:84:f0:ec:97:b9:0a:23:77:ca:
         51:34:08:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK+/sH2kGlHrK6Xr8e3kiTbSWw00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M2MERBMUVGNUZBQkQyN0VBMkQ3NUE1QUI1MDM2OEVD
M0NDNUM0RDAeFw0yNTAzMDYwMjQwMzZaFw0yNjAzMDUwMjQ1MzZaMDMxMTAvBgNV
BAMTKERGMUUyOUYyQTY4QzhDQ0I0NjM3Rjk4Qjc1QjgwQjdFNEI2M0YxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENljx/OaQ/Dw2mTouOX5V2HwU
neuYTeVuvI/mp/8o5zCVhFTRuqIOluKJefdpjgDzG+ETWu7/MyYwijNc6TcnqfLX
kWkS+IP9L6J8tkLBTC7AvWTcERBO8eXvzRem2yiI4+mwkHOHZWVaKzW//fc9A+fE
FnzGyssOhcvZT9NIwQdYVl+fKVx50x+QSFQ0+XNuUU9To/k6SzOmg0YRn6Bnla2Q
ZWIJIF0Gl5NegUmxjwns2OM9NMetJ4kk7s/HLIEPyTq/Ldqdicv0Qfp3KNQ+cuPv
blj9jYEq5ys3EMHdHUU5wnkzu9sV+nMfWlR/grcSTqOqChC3bEX2m67s87N7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3x4p8qaMjMtGN/mLdbgLfktj8dYwHwYDVR0j
BBgwFoAUzGDaHvX6vSfqLXWlq1A2jsPMXE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtqQU4xa29kWnk3cVVhU0RrRUZ1OWdHWlBhRFNrNjVQNVZuckw5MXRt
VTMvMS9DQzYwREExRUY1RkFCRDI3RUEyRDc1QTVBQjUwMzY4RUMzQ0M1QzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNjBEQTFFRjVGQUJEMjdF
QTJENzVBNUFCNTAzNjhFQzNDQzVDNEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrakFOMWtvZFp5N3FVYVNEa0VGdTlnR1pQYURTazY1UDVWbnJMOTF0bVUzLzEv
MzIzODMwMzQzYTMxMzMzOTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTkDANBgkqhkiG9w0BAQsFAAOCAQEAlFjDpsmI
aqsRTh68wfwnglhVFujVLHmaBzzRyGnVCBtjDqd+7Pm/WjBTjxOdheu7R8jkpy/k
kNzOFD5ohNCGlXr7trNBWH5i/ERNyFxgKr/PzS4ahOtdTOzUA6Il1cAcygKoSQf2
rZWLD/AQXcdDBfO6CfubV+1SNBttx8GDWTLoIMne62OrCAABoC1S7hmLl8DSimeh
zFHqWX1xi3/sIVIf3BhkTC4XrdRYGHbzXO1BKg21DyapgoQ9MUKxA5sgslBR4waI
iozWB29y3mF6RXBgYVMe1px2JNcqUmNH+KCSSb4epOc5IyrIcGfqR7uGTtI5hPDs
l7kKI3fKUTQIhw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:57:42 2025 by rpki-client