Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          MeWzdPPSRBL9fuuAwq+Kw1PDN96S9qdvWeuYVbRkm/0=
Subject key identifier:   FD:37:1B:56:8D:2A:4A:F0:3C:83:9D:DC:2F:C0:59:A3:35:52:C9:DB
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       298EF64021163BE5EBC7AED51586CD467E1D17C6
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     272220
IP address blocks:        2804:1f54:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8e:f6:40:21:16:3b:e5:eb:c7:ae:d5:15:86:cd:46:7e:1d:17:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=FD371B568D2A4AF03C839DDC2FC059A33552C9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:d6:f2:32:b9:e0:5c:c4:2c:4f:8b:7c:9a:
                    6d:42:1f:22:f6:93:ae:8e:7d:ed:05:5f:8f:2b:8e:
                    a5:a6:0f:f5:71:fe:70:71:db:0b:14:de:eb:a0:af:
                    0e:90:49:a2:14:4a:16:bb:33:e7:42:3c:da:ff:b7:
                    8b:41:e2:a2:1c:61:a0:77:0a:9d:dd:3c:e0:4c:67:
                    3e:d4:d0:70:d4:5f:de:20:35:c7:78:32:b2:e3:37:
                    a1:6c:88:1b:19:6c:d1:2c:43:25:c2:f5:e8:14:88:
                    65:f2:87:dc:f3:19:b7:3b:cd:c2:a6:98:4c:08:da:
                    53:7e:97:98:4c:30:d7:48:70:b2:6d:9f:bc:ea:68:
                    d4:5d:f0:d4:60:b6:ad:fd:3f:25:11:86:55:38:8a:
                    bb:ce:96:cf:d5:10:16:26:73:42:95:d6:01:6e:88:
                    3b:91:6e:58:3c:54:a8:d0:96:98:1b:8b:9f:cd:d0:
                    c5:7e:ef:37:b5:83:30:70:2f:3e:b0:86:23:9f:bd:
                    44:74:70:24:48:b6:f4:1b:44:74:8c:d5:a4:1a:20:
                    65:50:59:4c:0e:da:0a:29:d3:42:7b:b4:f1:d8:37:
                    47:78:3d:3a:ec:58:d6:0e:03:6c:8a:ef:11:62:0e:
                    1f:ca:86:33:0c:c2:e8:f8:63:39:2f:8a:39:96:a1:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:37:1B:56:8D:2A:4A:F0:3C:83:9D:DC:2F:C0:59:A3:35:52:C9:DB
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:fc:54:88:5c:1c:a0:0d:b6:82:a3:dc:8d:57:37:71:2c:
         32:ee:15:96:81:91:7d:c5:fb:a9:7e:fd:7a:f8:db:54:26:bc:
         4b:25:2c:05:56:44:38:28:96:5c:a2:f9:43:03:b2:ab:aa:b0:
         65:b8:8f:cb:ba:92:bf:8c:b4:d5:8b:40:bd:1b:ba:ac:f5:17:
         43:5e:9c:99:2b:0a:a1:0d:3e:4b:09:29:1f:0e:97:fe:cb:33:
         a7:0d:49:01:6d:20:52:23:56:f7:eb:a2:af:08:3f:a5:1e:eb:
         17:dc:f6:cd:fa:50:26:4a:b9:96:b8:e1:e2:aa:11:fc:4b:f4:
         14:ef:92:26:1b:29:02:fb:e7:63:04:b2:d4:58:9a:ef:d2:de:
         b5:95:bf:f4:55:9c:25:c4:f6:93:f4:ab:b0:25:db:f7:78:25:
         46:3b:6e:9a:c5:c2:da:5a:22:ee:7f:89:50:4b:aa:ee:36:52:
         34:79:f0:4a:ea:2e:ce:19:00:25:97:b8:09:2e:cb:99:c6:84:
         cf:13:f5:85:bb:9b:82:b1:9c:6b:8c:87:b0:89:93:73:99:b4:
         19:c4:e0:13:ba:29:68:1b:62:46:bc:79:5b:0e:9f:87:90:24:
         f4:b3:cd:ee:e3:9c:69:71:22:58:c6:0b:69:92:48:bd:d6:b7:
         40:64:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org