Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          ozFLnBEOr/krkFOGyOTUNET/pAvnzNUMsJqQJdGJtHg=
Subject key identifier:   7A:B9:1B:AA:A4:5A:86:A8:EB:AD:3E:A9:A3:90:5C:FD:AA:1A:DA:89
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       0FCD12B033D3E00FEE4C10B5DF057A437CADFF57
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     28345
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cd:12:b0:33:d3:e0:0f:ee:4c:10:b5:df:05:7a:43:7c:ad:ff:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject: CN=3082010A0282010100CA261742787690E195BB58F495EDE37108BD50BC5877B6CB19C822BB2B6F6F8CCB914574295BC628A60EA25188FEAFE8AAA8070CCB0875C2B7BEFDE3CDDA34AE503FFD9F7E04A211D30B1F797229907CFD26B171EBEBCA8BE5F1A01019538FED6A9CD3AA84A50A5851E8C2B8BAEDAD0017A861F2FB85B1ACB12280756A89EDE72D26735F41CE6DC46B8F415F32CE8BEEA13622AE7FA454711821BB2CF5F22D9345F09C8284BBBC43C8FCEEFFDAFB702045947B5B5BAB8CCEE114DCA0C8FD88A7E5973BA3A2E8CA82E189125F66BD63EDA381197CAC0DD46B1DDD812BBED61FFF89BB3D20E9CE346B87B30EC967814AC8F005116AE1EF93148FA55535833DD9470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:17:42:78:76:90:e1:95:bb:58:f4:95:ed:
                    e3:71:08:bd:50:bc:58:77:b6:cb:19:c8:22:bb:2b:
                    6f:6f:8c:cb:91:45:74:29:5b:c6:28:a6:0e:a2:51:
                    88:fe:af:e8:aa:a8:07:0c:cb:08:75:c2:b7:be:fd:
                    e3:cd:da:34:ae:50:3f:fd:9f:7e:04:a2:11:d3:0b:
                    1f:79:72:29:90:7c:fd:26:b1:71:eb:eb:ca:8b:e5:
                    f1:a0:10:19:53:8f:ed:6a:9c:d3:aa:84:a5:0a:58:
                    51:e8:c2:b8:ba:ed:ad:00:17:a8:61:f2:fb:85:b1:
                    ac:b1:22:80:75:6a:89:ed:e7:2d:26:73:5f:41:ce:
                    6d:c4:6b:8f:41:5f:32:ce:8b:ee:a1:36:22:ae:7f:
                    a4:54:71:18:21:bb:2c:f5:f2:2d:93:45:f0:9c:82:
                    84:bb:bc:43:c8:fc:ee:ff:da:fb:70:20:45:94:7b:
                    5b:5b:ab:8c:ce:e1:14:dc:a0:c8:fd:88:a7:e5:97:
                    3b:a3:a2:e8:ca:82:e1:89:12:5f:66:bd:63:ed:a3:
                    81:19:7c:ac:0d:d4:6b:1d:dd:81:2b:be:d6:1f:ff:
                    89:bb:3d:20:e9:ce:34:6b:87:b3:0e:c9:67:81:4a:
                    c8:f0:05:11:6a:e1:ef:93:14:8f:a5:55:35:83:3d:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B9:1B:AA:A4:5A:86:A8:EB:AD:3E:A9:A3:90:5C:FD:AA:1A:DA:89
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:8c:79:a7:cf:24:b3:51:e7:44:d8:22:32:ad:07:f8:53:
         14:47:f1:4e:3f:4c:2a:7f:73:19:b5:29:a4:90:e4:d4:bc:43:
         3c:58:e5:f4:20:70:b3:31:fd:4b:85:b7:60:63:9e:d0:90:67:
         e6:d8:5d:be:20:86:4c:74:cb:c9:e2:94:9f:3f:f2:1a:0c:9c:
         6d:e1:f6:32:1c:16:f3:fc:8d:75:80:d4:44:01:8f:da:d8:8d:
         58:e5:0d:b0:04:63:96:c1:a8:e8:dd:c2:87:68:e5:b6:09:ec:
         dc:ef:2d:db:8e:33:51:1f:5e:7b:9f:45:b5:f4:cc:39:a3:5a:
         dc:61:12:6c:44:ed:5e:6e:40:26:1d:b6:e8:dd:2c:92:6a:38:
         9d:82:9c:9e:97:f4:d6:29:f6:e5:93:f5:9f:ab:78:2a:90:85:
         ee:0a:32:15:df:3c:50:15:1e:f2:c8:b9:79:b8:e5:18:2f:67:
         49:e6:74:ea:79:bd:f5:b7:82:7e:b7:f9:db:b0:68:4b:2d:bd:
         be:19:d6:2c:b9:01:bc:0d:6d:cb:1d:b2:08:e3:7f:6a:84:71:
         c2:a4:0d:34:bc:23:60:df:f5:6d:ae:cd:46:0e:8e:0a:7f:51:
         62:ed:ce:5b:5c:03:7c:ab:70:0f:c3:eb:98:25:4e:1a:0a:d8:
         30:ef:87:08
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUD80SsDPT4A/uTBC13wV6Q3yt/1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NTdaFw0yNTA0MTQxNzQzNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0EyNjE3NDI3ODc2OTBFMTk1
QkI1OEY0OTVFREUzNzEwOEJENTBCQzU4NzdCNkNCMTlDODIyQkIyQjZGNkY4Q0NC
OTE0NTc0Mjk1QkM2MjhBNjBFQTI1MTg4RkVBRkU4QUFBODA3MENDQjA4NzVDMkI3
QkVGREUzQ0REQTM0QUU1MDNGRkQ5RjdFMDRBMjExRDMwQjFGNzk3MjI5OTA3Q0ZE
MjZCMTcxRUJFQkNBOEJFNUYxQTAxMDE5NTM4RkVENkE5Q0QzQUE4NEE1MEE1ODUx
RThDMkI4QkFFREFEMDAxN0E4NjFGMkZCODVCMUFDQjEyMjgwNzU2QTg5RURFNzJE
MjY3MzVGNDFDRTZEQzQ2QjhGNDE1RjMyQ0U4QkVFQTEzNjIyQUU3RkE0NTQ3MTE4
MjFCQjJDRjVGMjJEOTM0NUYwOUM4Mjg0QkJCQzQzQzhGQ0VFRkZEQUZCNzAyMDQ1
OTQ3QjVCNUJBQjhDQ0VFMTE0RENBMEM4RkQ4OEE3RTU5NzNCQTNBMkU4Q0E4MkUx
ODkxMjVGNjZCRDYzRURBMzgxMTk3Q0FDMERENDZCMURERDgxMkJCRUQ2MUZGRjg5
QkIzRDIwRTlDRTM0NkI4N0IzMEVDOTY3ODE0QUM4RjAwNTExNkFFMUVGOTMxNDhG
QTU1NTM1ODMzREQ5NDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyiYXQnh2kOGVu1j0le3jcQi9ULxYd7bLGcgiuytvb4zLkUV0KVvG
KKYOolGI/q/oqqgHDMsIdcK3vv3jzdo0rlA//Z9+BKIR0wsfeXIpkHz9JrFx6+vK
i+XxoBAZU4/tapzTqoSlClhR6MK4uu2tABeoYfL7hbGssSKAdWqJ7ectJnNfQc5t
xGuPQV8yzovuoTYirn+kVHEYIbss9fItk0XwnIKEu7xDyPzu/9r7cCBFlHtbW6uM
zuEU3KDI/Yin5Zc7o6LoyoLhiRJfZr1j7aOBGXysDdRrHd2BK77WH/+Juz0g6c40
a4ezDslngUrI8AURauHvkxSPpVU1gz3ZRwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FHq5G6qkWoao660+qaOQXP2qGtqJMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
MzYzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjM4MzMzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAGMA0GCSqGSIb3DQEBCwUAA4IBAQAo0Yx5p88ks1HnRNgiMq0H+FMUR/FO
P0wqf3MZtSmkkOTUvEM8WOX0IHCzMf1LhbdgY57QkGfm2F2+IIZMdMvJ4pSfP/Ia
DJxt4fYyHBbz/I11gNREAY/a2I1Y5Q2wBGOWwajo3cKHaOW2Cezc7y3bjjNRH157
n0W19Mw5o1rcYRJsRO1ebkAmHbbo3SySajidgpyel/TWKfblk/Wfq3gqkIXuCjIV
3zxQFR7yyLl5uOUYL2dJ5nTqeb31t4J+t/nbsGhLLb2+GdYsuQG8DW3LHbII439q
hHHCpA00vCNg3/Vtrs1GDo4Kf1Fi7c5bXAN8q3APw+uYJU4aCtgw74cI
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:15 2024 by rpki-client on console-fra.rpki-client.org