Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          M3wJeDKs4Xe0k1RJm8uE6DHR0pQ1I0zt6WykDABEJLQ=
Subject key identifier:   92:A4:88:B4:31:31:1C:79:CE:08:87:75:0B:5E:7C:04:4A:18:DD:7F
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       4F64A305E52658006DF85BB7F532C3A8B254D294
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     272220
IP address blocks:        2804:1f54:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:64:a3:05:e5:26:58:00:6d:f8:5b:b7:f5:32:c3:a8:b2:54:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=92A488B431311C79CE0887750B5E7C044A18DD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:29:91:1b:ec:3e:32:04:24:68:58:b6:db:
                    1d:0e:28:1a:01:f6:49:c9:09:b7:8c:46:a4:d5:82:
                    45:69:f6:5a:b5:36:fb:7a:7b:e2:87:44:fb:7b:1d:
                    ff:5b:c7:bb:5c:74:4b:c6:9a:7b:78:ed:79:34:e6:
                    58:7c:01:0f:bc:1a:e5:71:fc:1d:8b:65:b4:92:57:
                    81:ae:91:57:ff:7d:9b:13:92:c0:cb:07:fa:77:9f:
                    df:2a:5f:b5:6e:a4:c1:82:7b:9b:29:ae:d9:4a:d0:
                    3d:f3:f4:16:13:21:d2:f7:30:93:8d:70:4a:56:f0:
                    0a:56:7c:3d:ed:98:c5:9e:bb:06:ac:0c:22:79:84:
                    20:a7:d8:9b:91:69:8d:00:bb:a4:7b:14:29:25:db:
                    ab:ef:18:fe:34:ea:fe:96:b5:4e:96:88:d9:6b:14:
                    1e:9d:2b:82:0f:95:c2:7b:2f:c7:fc:66:3a:05:34:
                    39:36:4b:0b:52:64:c3:74:aa:61:ec:4e:d3:2e:6c:
                    44:e2:98:7e:43:ce:a0:11:c1:9e:6d:5a:8e:1f:d6:
                    b6:2c:f4:a7:00:91:a4:bd:74:0b:a6:19:06:e8:72:
                    fd:df:52:0e:e3:e0:e2:ae:02:bc:bb:cf:e1:03:04:
                    93:5a:ab:0f:b8:e4:ff:35:4c:92:2f:7e:70:fe:45:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:88:B4:31:31:1C:79:CE:08:87:75:0B:5E:7C:04:4A:18:DD:7F
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         aa:c7:a8:af:c9:14:f0:7f:37:ac:a4:37:91:19:f1:fd:af:fc:
         1d:d2:1b:ed:ea:aa:a1:fd:0b:fc:bd:23:c7:8c:db:86:37:cb:
         a9:42:11:a0:d1:17:83:24:41:ed:2a:89:27:6c:e9:12:91:8a:
         01:6e:7f:5d:69:15:ab:f1:97:c0:d7:d6:ed:3f:3b:13:09:fa:
         42:04:3d:a3:04:05:d9:5d:64:93:03:d5:cf:9f:de:9b:69:95:
         e9:ce:f5:60:f4:5c:e2:83:3e:32:b1:8e:be:81:a1:b0:ce:ab:
         0a:9c:53:9d:cf:fa:ca:61:ab:95:f7:58:b4:37:a1:1d:05:ea:
         e7:8a:44:97:2f:f7:44:33:81:dc:5e:4d:66:30:ca:72:52:40:
         e2:0c:3a:96:68:9d:2f:c9:53:3b:24:d3:a5:7f:2e:8b:47:f1:
         7e:dc:a2:f1:0a:ba:fb:63:f6:53:04:1c:19:eb:f6:ba:54:20:
         1d:42:6d:66:38:20:9c:cd:0e:65:c1:af:47:29:48:1b:7f:0f:
         dd:7f:62:3d:84:d5:e5:a3:8d:cf:3a:75:2d:40:6a:4c:4f:49:
         6f:3c:00:7c:c3:09:e8:5a:15:31:da:81:7d:1e:ba:e5:a9:0a:
         6a:aa:8f:9e:70:0e:f5:75:93:b8:0c:b5:91:06:74:6a:25:eb:
         d0:dc:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org