Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          cB+n25IEuxwdB9Wun5Tpm5vXud4hRPdVf+0b6P2HSoY=
Subject key identifier:   A0:EE:B3:54:8B:39:AB:EE:3A:6C:1B:82:88:84:08:77:E9:A6:A2:9F
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5ED1EBE6A9A2C68B493C324D5E5C13F5EE4A40CE
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:55 +0000
ROA not before:           Mon 15 Apr 2024 17:38:55 +0000
ROA not after:            Mon 14 Apr 2025 17:43:55 +0000
asID:                     28345
IP address blocks:        2001:12f8:8::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d1:eb:e6:a9:a2:c6:8b:49:3c:32:4d:5e:5c:13:f5:ee:4a:40:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:55 2024 GMT
            Not After : Apr 14 17:43:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:30:d4:9c:4e:1d:c0:05:bf:f9:f4:8d:f1:
                    01:a8:71:d9:d0:fd:db:4d:31:f3:5e:62:40:5f:4e:
                    52:94:87:25:b5:8a:0a:1f:5e:32:e0:b0:26:f9:dc:
                    96:8c:cb:04:78:1f:9d:85:5c:20:6e:f8:50:f2:9b:
                    81:44:3e:e3:80:a2:30:4b:26:82:60:d6:cc:9a:58:
                    fd:4f:15:fb:db:58:c1:f7:0d:51:23:b6:c6:4d:0a:
                    b1:0e:c0:0a:b2:f4:3d:4c:5d:30:21:1f:2f:ea:6a:
                    9c:2c:7f:11:2d:8f:28:80:71:0b:64:32:da:dd:2f:
                    56:a1:eb:d4:4a:66:be:5d:77:97:e6:02:9a:6f:09:
                    32:1d:00:27:1d:c2:30:c4:67:3d:40:6e:f3:da:2f:
                    8a:48:14:4b:97:2c:97:b7:17:48:d9:31:23:54:e7:
                    26:67:3d:0d:58:c8:13:6f:8b:14:6a:f4:dc:97:53:
                    44:60:b7:79:5f:c9:a6:70:bb:57:9c:80:f2:6b:91:
                    4f:02:58:66:1c:23:a4:40:24:01:b4:a4:5f:63:e0:
                    80:dd:4f:58:4e:b8:36:dd:c7:f6:a7:24:4a:2c:c2:
                    77:1d:ed:61:aa:0d:1c:f7:dd:60:4d:6b:a0:99:c5:
                    5c:3e:47:25:c3:4a:7d:33:5f:03:7f:65:e2:db:45:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:B3:54:8B:39:AB:EE:3A:6C:1B:82:88:84:08:77:E9:A6:A2:9F
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:f0:ba:00:e6:33:cf:84:15:ef:a8:3c:20:1b:6f:87:9b:
         0b:c5:5e:70:46:05:59:83:de:cc:43:cc:e9:c9:a8:71:06:6f:
         ec:a4:de:17:ad:78:9a:1e:76:79:f6:cd:32:be:53:62:01:c5:
         78:ce:48:c6:f1:e3:17:e3:76:8b:20:c7:e0:b8:58:54:1f:43:
         4a:b7:c2:de:ec:7c:fb:17:89:34:2d:31:a0:65:e9:b6:bb:84:
         3c:96:35:51:fa:af:62:e8:05:22:6a:92:f6:f3:13:a1:15:ca:
         bb:80:57:90:8e:41:e8:5f:99:bd:23:4d:32:9d:7a:e9:5f:70:
         74:e7:83:85:fe:31:56:4d:8d:97:84:8a:8c:ef:42:9d:05:71:
         6f:b6:cd:ad:a6:33:6f:8e:c0:98:19:ca:69:b7:0b:97:5d:a6:
         c8:ff:0a:ab:4b:a8:c1:08:97:56:20:be:2c:df:84:d4:60:92:
         1e:5a:ba:0c:4d:90:fb:68:6a:9d:eb:be:02:3b:8b:9e:78:02:
         1f:40:a1:88:01:db:af:9a:25:17:8d:11:79:b1:00:ea:fa:02:
         e7:90:7a:e9:ce:da:3a:51:46:4a:e6:35:2e:38:ff:b7:05:1f:
         e4:e1:1d:2f:0d:3a:2d:bf:23:f7:30:82:47:70:b6:a8:ff:cf:
         7c:62:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org