Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          TrStuRI8tf6D7pJ701olCeb0YQELq0gHQuPH4Ji39gU=
Subject key identifier:   01:64:50:3C:C1:CB:AC:A9:2B:A5:EA:4F:E1:C4:AE:46:96:90:89:2D
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       56D5C7CBB87CDF191031F784EB1BDB154FDF202C
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 01:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:c7:cb:b8:7c:df:19:10:31:f7:84:eb:1b:db:15:4f:df:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=0164503CC1CBACA92BA5EA4FE1C4AE469690892D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:70:7e:fb:2a:85:1a:f3:e9:14:58:fa:87:c1:
                    6e:c1:c6:42:8d:a2:54:ca:a8:ff:e3:4f:e9:1c:9c:
                    92:5b:b3:78:06:f2:ee:56:a3:aa:12:67:1b:69:47:
                    51:a2:98:fd:4f:4e:18:3b:06:d5:c4:26:1f:95:07:
                    bb:6d:3b:67:c5:0f:da:e5:56:65:f1:98:26:58:6e:
                    40:df:9a:36:72:c1:9d:b8:5e:16:bd:d8:66:8b:df:
                    27:04:3a:4f:f9:bf:f7:3d:83:0e:13:00:38:b8:e1:
                    0b:fc:1e:4b:4c:da:c8:3a:35:78:c9:65:58:f2:19:
                    75:a5:7c:34:bf:62:5c:2d:42:fd:62:9c:8c:e6:93:
                    1d:c1:ed:0c:0b:1c:23:5d:96:68:51:a1:72:1b:66:
                    97:f6:6e:75:1f:40:89:8b:b0:0a:58:1a:04:d0:56:
                    99:2f:d8:a1:a5:c6:b6:6b:18:10:60:23:3a:87:e4:
                    ae:eb:f9:aa:1b:f6:9c:29:c2:64:93:a9:a1:f2:b2:
                    0e:c9:08:b2:98:1b:39:fb:ff:5e:87:c6:1b:ca:eb:
                    6b:33:7a:fc:31:58:96:42:ac:18:47:7b:f0:94:0a:
                    2e:20:05:d5:a6:5c:39:c6:4f:0a:2d:26:07:b9:b4:
                    70:c8:f7:ab:d5:19:90:e0:4a:ce:d0:d0:59:41:63:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:50:3C:C1:CB:AC:A9:2B:A5:EA:4F:E1:C4:AE:46:96:90:89:2D
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:7d:34:e1:ad:55:fd:6f:e6:56:e2:2b:a3:a3:86:4c:89:
         78:56:21:8d:9c:7a:f9:6d:8e:df:59:ca:ab:20:fd:ef:f9:b2:
         53:42:4f:99:a5:a9:6d:04:e0:0c:bf:27:89:68:27:58:7e:7b:
         0e:b3:bf:90:ec:51:a6:bf:e2:61:8e:7e:a4:1a:1e:d5:e0:e7:
         7a:a2:d6:16:c9:d3:d6:b2:f7:30:68:a7:d0:d0:d9:80:de:f7:
         91:fa:cb:88:ab:49:bc:20:35:c7:69:6a:81:74:1c:78:21:bb:
         74:54:34:90:d6:cc:ec:7e:09:be:a2:d0:da:50:e6:6e:e1:d5:
         e0:7f:79:45:d2:e8:1d:7f:4c:2c:e8:75:83:b6:85:db:cd:8e:
         61:d0:61:99:00:94:4c:1c:fc:05:99:db:04:0a:6f:e9:aa:e8:
         8d:d2:75:c5:f5:b6:ff:16:36:a3:58:f3:8b:14:c0:60:fc:c7:
         b5:7c:45:96:4d:fe:b6:f0:04:a3:bd:a0:e1:ef:ca:45:c2:2b:
         d0:df:3d:f0:b9:97:ad:ab:91:9b:10:f4:4c:44:9e:74:35:6d:
         a8:86:cd:cf:0e:b8:0f:40:5d:d3:25:ba:9f:e1:75:2a:1e:41:
         ac:7e:10:d5:6f:56:2a:65:fe:ab:c7:88:fc:a6:b0:a1:6b:c7:
         72:95:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:38 2025 by rpki-client