Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          nr92TYmlqFXy8DIsZKLkSp9JFA2yfx+jkrmc0i2IDeg=
Subject key identifier:   65:63:C0:F5:39:26:29:1F:00:09:C0:A3:4C:84:26:59:04:F5:38:FC
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       24E8AC5B9A0F8334A094F42A576EDA093EDC1297
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     11431
IP address blocks:        2001:12f8:4::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e8:ac:5b:9a:0f:83:34:a0:94:f4:2a:57:6e:da:09:3e:dc:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:c7:60:a8:e5:de:e6:24:06:0d:7a:d3:2a:
                    79:34:f7:96:04:74:5f:5c:53:0b:26:8a:c5:48:4c:
                    d9:5f:71:ee:57:7f:89:4b:89:84:dd:71:e4:1e:62:
                    59:4e:04:23:0a:ef:34:78:e8:75:51:68:4e:03:68:
                    a1:56:26:42:c6:ce:87:bc:12:98:1a:07:62:2b:45:
                    cd:25:8d:e2:cf:45:6d:a8:4d:c2:4f:c9:63:a2:f9:
                    b8:fb:34:47:c8:2f:64:33:ac:09:e0:0d:e0:d7:f7:
                    35:80:e7:90:ab:41:97:f8:83:fd:86:03:72:17:c2:
                    aa:a4:17:f4:df:99:9e:a4:0c:57:89:11:5e:9d:c0:
                    1f:a7:43:65:e2:e7:da:f8:be:e9:a0:71:59:ea:1e:
                    c6:3a:b6:72:84:68:fa:b4:05:74:b3:da:32:3d:20:
                    52:08:4c:58:38:ad:f3:cd:69:87:88:36:76:4f:89:
                    2a:da:5b:81:a5:41:37:2c:a7:92:ad:fa:f2:b7:5e:
                    8c:a5:10:c2:20:b1:70:77:b6:3d:07:26:06:1e:d1:
                    d0:5a:97:ae:c6:bc:e0:ef:bb:11:d7:74:6d:b0:a2:
                    3c:2d:d1:4d:cc:ba:72:9a:0a:7a:9c:a1:68:4d:92:
                    b5:ac:d0:8a:f7:8c:c8:ab:6c:9a:c4:fe:46:30:c3:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:C0:F5:39:26:29:1F:00:09:C0:A3:4C:84:26:59:04:F5:38:FC
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:98:55:69:25:f0:08:6c:13:d1:52:7b:5c:80:07:8e:8d:
         66:47:4d:32:7f:1c:6d:5a:e1:0c:05:74:75:b7:50:66:83:f4:
         e5:ea:47:c7:9f:6e:77:68:73:9d:69:3b:65:94:d8:21:1e:07:
         a1:a0:49:7f:68:b0:1e:84:74:a9:91:7e:86:7d:c8:34:a1:62:
         47:86:7b:40:72:6f:0a:df:ff:bd:8e:c0:4a:e0:79:4f:bb:e2:
         7e:55:6d:b2:d5:e6:22:e6:31:32:ac:48:af:60:ec:98:4f:c7:
         a2:9f:c9:87:ea:c7:0c:99:63:d1:44:a8:91:d3:6b:44:92:50:
         b6:50:62:11:99:e5:4a:f2:38:43:01:a5:ec:42:30:01:05:b9:
         cf:ab:60:38:e3:c9:06:79:94:3c:d3:17:b9:83:0f:41:09:00:
         26:eb:1d:17:7c:8a:a0:cc:0a:d1:02:56:97:16:35:c1:cd:65:
         db:7f:76:df:02:1b:97:ba:04:ee:b9:f1:ec:c4:c3:16:a2:75:
         ea:be:30:7c:75:1e:2c:1d:fe:b3:51:59:14:ab:cc:cb:3c:af:
         8d:84:03:15:71:71:ab:6c:64:e6:1b:03:5e:48:b1:e0:54:b5:
         28:72:1e:c6:fb:4b:c1:68:8d:41:02:c2:61:43:68:3f:ed:5c:
         16:51:f7:88
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUJOisW5oPgzSglPQqV27aCT7cEpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NTlaFw0yNTA0MTQxNzQzNTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VGQUM3NjBBOEU1REVFNjI0
MDYwRDdBRDMyQTc5MzRGNzk2MDQ3NDVGNUM1MzBCMjY4QUM1NDg0Q0Q5NUY3MUVF
NTc3Rjg5NEI4OTg0REQ3MUU0MUU2MjU5NEUwNDIzMEFFRjM0NzhFODc1NTE2ODRF
MDM2OEExNTYyNjQyQzZDRTg3QkMxMjk4MUEwNzYyMkI0NUNEMjU4REUyQ0Y0NTZE
QTg0REMyNEZDOTYzQTJGOUI4RkIzNDQ3QzgyRjY0MzNBQzA5RTAwREUwRDdGNzM1
ODBFNzkwQUI0MTk3Rjg4M0ZEODYwMzcyMTdDMkFBQTQxN0Y0REY5OTlFQTQwQzU3
ODkxMTVFOURDMDFGQTc0MzY1RTJFN0RBRjhCRUU5QTA3MTU5RUExRUM2M0FCNjcy
ODQ2OEZBQjQwNTc0QjNEQTMyM0QyMDUyMDg0QzU4MzhBREYzQ0Q2OTg3ODgzNjc2
NEY4OTJBREE1QjgxQTU0MTM3MkNBNzkyQURGQUYyQjc1RThDQTUxMEMyMjBCMTcw
NzdCNjNEMDcyNjA2MUVEMUQwNUE5N0FFQzZCQ0UwRUZCQjExRDc3NDZEQjBBMjND
MkREMTREQ0NCQTcyOUEwQTdBOUNBMTY4NEQ5MkI1QUNEMDhBRjc4Q0M4QUI2QzlB
QzRGRTQ2MzBDMzE3QTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzvrHYKjl3uYkBg160yp5NPeWBHRfXFMLJorFSEzZX3HuV3+JS4mE
3XHkHmJZTgQjCu80eOh1UWhOA2ihViZCxs6HvBKYGgdiK0XNJY3iz0VtqE3CT8lj
ovm4+zRHyC9kM6wJ4A3g1/c1gOeQq0GX+IP9hgNyF8KqpBf035mepAxXiRFencAf
p0Nl4ufa+L7poHFZ6h7GOrZyhGj6tAV0s9oyPSBSCExYOK3zzWmHiDZ2T4kq2luB
pUE3LKeSrfryt16MpRDCILFwd7Y9ByYGHtHQWpeuxrzg77sR13RtsKI8LdFNzLpy
mgp6nKFoTZK1rNCK94zIq2yaxP5GMMMXowIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FGVjwPU5JikfAAnAo0yEJlkE9Tj8MB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
MzQzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTMxMzQzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAEMA0GCSqGSIb3DQEBCwUAA4IBAQAU6phVaSXwCGwT0VJ7XIAHjo1mR00y
fxxtWuEMBXR1t1Bmg/Tl6kfHn253aHOdaTtllNghHgehoEl/aLAehHSpkX6Gfcg0
oWJHhntAcm8K3/+9jsBK4HlPu+J+VW2y1eYi5jEyrEivYOyYT8ein8mH6scMmWPR
RKiR02tEklC2UGIRmeVK8jhDAaXsQjABBbnPq2A448kGeZQ80xe5gw9BCQAm6x0X
fIqgzArRAlaXFjXBzWXbf3bfAhuXugTuufHsxMMWonXqvjB8dR4sHf6zUVkUq8zL
PK+NhAMVcXGrbGTmGwNeSLHgVLUoch7G+0vBaI1BAsJhQ2g/7VwWUfeI
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:15 2024 by rpki-client on console-fra.rpki-client.org