Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
File:                     323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier:          7+iETrQ/kpk5w2Xdmy5XpePUO2Xq4juE3sEpHDYnaQk=
Subject key identifier:   0E:71:D7:DD:11:04:9F:91:9B:37:18:7B:87:83:E7:60:86:2A:C5:2A
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       759597C549E6B5F315E043F234D45DD4BBC4BC01
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     272220
IP address blocks:        2804:1f54:fe00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:95:97:c5:49:e6:b5:f3:15:e0:43:f2:34:d4:5d:d4:bb:c4:bc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=0E71D7DD11049F919B37187B8783E760862AC52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:91:7e:2a:6c:35:ea:b3:01:2b:3f:43:8b:
                    4a:9f:cc:d9:3b:4d:f0:75:28:6b:92:d2:a6:43:e0:
                    4d:8e:54:bb:b3:0c:6d:35:50:6f:c3:94:86:19:14:
                    20:5d:b1:41:46:fb:b7:1f:95:57:9f:6b:68:ca:8f:
                    34:df:47:7f:3f:09:65:63:8d:66:90:6d:b8:8e:d0:
                    b0:44:96:77:15:5d:42:4e:5a:af:ba:66:ed:b8:db:
                    20:80:4b:92:a1:ce:e6:7d:e9:5f:d6:82:0f:9c:4b:
                    06:9d:df:87:42:6e:7b:f8:df:ff:8b:b1:cd:5c:8c:
                    7b:9b:00:a2:e8:04:42:9e:fb:48:a2:a3:3a:5b:1b:
                    d7:e5:5e:e0:0e:8b:32:cc:ae:0f:61:f2:e3:a1:e3:
                    3a:a3:e7:6c:76:ae:3d:62:18:c3:e3:86:a8:1c:7a:
                    3f:cd:5f:93:4f:a7:bc:a6:1c:09:e0:b4:38:d2:ba:
                    6d:54:5d:f3:b4:f3:46:a4:2c:45:19:fa:94:83:19:
                    56:d2:77:a1:ca:21:9c:b0:a6:d8:f5:79:c6:89:42:
                    3c:3c:b6:4e:c2:b3:16:e0:aa:10:44:d8:cb:fa:ca:
                    01:55:40:43:85:c1:ba:4a:8b:c7:6b:c8:b6:49:c9:
                    10:55:5c:c9:02:20:16:14:fa:1f:3d:c4:47:80:bb:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:D7:DD:11:04:9F:91:9B:37:18:7B:87:83:E7:60:86:2A:C5:2A
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:a5:8e:dc:3e:a1:20:e4:f4:34:66:08:0b:33:ff:6a:e2:
         96:02:9b:f2:ec:06:8b:18:ab:89:5e:2a:24:b2:63:b9:5a:3c:
         38:2a:21:3c:e5:24:19:2d:ce:ce:4b:5c:6b:e8:6d:34:04:18:
         40:ad:d2:a0:2e:f1:97:c2:64:91:6c:71:ca:4c:d5:8e:bd:ec:
         1c:84:af:df:b4:3b:33:e5:86:6e:bc:dc:f5:02:7c:d0:bd:28:
         89:1d:e5:66:ac:08:52:bc:3a:22:6a:fd:48:1d:4a:5c:4c:15:
         c1:f9:6d:e6:cf:ed:f4:ce:13:84:b1:b2:5f:69:95:8d:fe:67:
         7b:2e:4a:1f:43:b9:73:29:a1:e9:dd:9b:0d:60:02:6e:2a:68:
         db:56:94:c3:3d:6a:15:ec:01:2a:66:83:55:76:46:7a:8e:5c:
         cb:2b:b7:aa:58:85:31:d3:c4:a9:fc:18:db:e6:ce:8f:04:41:
         f7:85:c5:8c:cf:ec:9c:0d:42:e1:c2:0f:ef:d6:e5:1e:be:40:
         ce:f1:7c:97:08:ea:71:14:1e:73:2f:b1:0a:54:21:a7:2d:1c:
         87:21:07:f8:e5:89:4c:e2:be:15:e0:bd:a8:ea:0a:b4:73:e4:
         ca:c2:8c:47:ff:5c:66:b2:d8:83:af:47:bd:7b:ab:19:3c:af:
         a3:cf:62:bc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdZWXxUnmtfMV4EPyNNRd1LvEvAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzNzhGM0ZDM0FDNUFGRkQyQUVGNTg5Mzk4OTU2N0Uy
REM0MERCODAeFw0yNDA0MDMxODI1MTdaFw0yNTA0MDIxODMwMTdaMDMxMTAvBgNV
BAMTKDBFNzFEN0REMTEwNDlGOTE5QjM3MTg3Qjg3ODNFNzYwODYyQUM1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUZF+Kmw16rMBKz9Di0qfzNk7
TfB1KGuS0qZD4E2OVLuzDG01UG/DlIYZFCBdsUFG+7cflVefa2jKjzTfR38/CWVj
jWaQbbiO0LBElncVXUJOWq+6Zu242yCAS5KhzuZ96V/Wgg+cSwad34dCbnv43/+L
sc1cjHubAKLoBEKe+0iiozpbG9flXuAOizLMrg9h8uOh4zqj52x2rj1iGMPjhqgc
ej/NX5NPp7ymHAngtDjSum1UXfO080akLEUZ+pSDGVbSd6HKIZywptj1ecaJQjw8
tk7CsxbgqhBE2Mv6ygFVQEOFwbpKi8dryLZJyRBVXMkCIBYU+h89xEeAu5sfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUDnHX3REEn5GbNxh7h4PnYIYqxSowHwYDVR0j
BBgwFoAUKjePP8OsWv/SrvWJOYlWfi3EDbgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj
RXUvMS8yQTM3OEYzRkMzQUM1QUZGRDJBRUY1ODkzOTg5NTY3RTJEQzQwREI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzc4RjNGQzNBQzVBRkZE
MkFFRjU4OTM5ODk1NjdFMkRDNDBEQjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzEv
MzIzODMwMzQzYTMxNjYzNTM0M2E2NjY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEH1T+MA0GCSqGSIb3DQEBCwUA
A4IBAQBOraWO3D6hIOT0NGYICzP/auKWApvy7AaLGKuJXioksmO5Wjw4KiE85SQZ
Lc7OS1xr6G00BBhArdKgLvGXwmSRbHHKTNWOvewchK/ftDsz5YZuvNz1AnzQvSiJ
HeVmrAhSvDoiav1IHUpcTBXB+W3mz+30zhOEsbJfaZWN/md7LkofQ7lzKaHp3ZsN
YAJuKmjbVpTDPWoV7AEqZoNVdkZ6jlzLK7eqWIUx08Sp/Bjb5s6PBEH3hcWMz+yc
DULhwg/v1uUevkDO8XyXCOpxFB5zL7EKVCGnLRyHIQf45YlM4r4V4L2o6gq0c+TK
woxH/1xmstiDr0e9e6sZPK+jz2K8
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org