Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa
File:                     323030313a313266383a3a2f34382d313238203d3e2030.roa (raw, json)
Hash identifier:          D0gNfUGcI7f4rlQ9qxV/CkE+CTlslmHRpW1Kf8uxcdw=
Subject key identifier:   69:57:1A:70:BB:C8:95:88:AD:CB:2C:D7:7C:2E:7D:CD:A9:F6:7D:2F
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5F73BCE98C2C6EC1542234F7B3EF293D5713233C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     0
IP address blocks:        2001:12f8::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 05:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:73:bc:e9:8c:2c:6e:c1:54:22:34:f7:b3:ef:29:3d:57:13:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:e0:87:12:56:10:82:3f:6b:cb:e8:55:3f:
                    20:3b:6f:23:86:6d:4b:f2:f8:b9:79:14:b1:a6:0a:
                    52:c7:81:57:87:da:19:93:e3:63:66:0a:99:9b:1e:
                    bc:ef:c7:d5:ba:5b:f8:ef:db:57:56:06:b5:5f:27:
                    a3:11:16:02:92:56:c8:4a:e6:c5:48:02:99:1f:6f:
                    2d:2c:66:ef:3f:19:d6:6c:ac:48:e8:2e:c3:01:85:
                    4e:0c:92:16:5d:87:3b:1c:f2:9e:e0:6d:33:40:27:
                    b5:0a:ec:76:db:dc:7d:8f:4a:a9:49:3a:6a:5b:b1:
                    0d:6a:1d:c7:63:95:b7:ee:52:bf:74:3b:24:c2:90:
                    47:ac:04:c3:e3:e7:9e:9f:af:83:00:46:8e:f3:ab:
                    aa:a7:5e:6d:8a:b6:de:47:50:11:31:b0:c8:dd:6a:
                    0f:48:b2:46:d0:bb:86:9b:5b:0b:98:98:4c:06:ad:
                    16:8b:f2:1f:76:45:04:78:c4:2b:7c:01:fb:90:3b:
                    f7:7f:bd:40:e8:5e:d0:85:1c:58:9c:44:83:de:a5:
                    7d:83:76:e0:23:0d:da:3e:a8:96:c3:6b:4d:5d:1b:
                    4c:a9:79:c0:8e:e2:93:1e:d0:f4:1d:dc:97:3f:16:
                    33:b2:e7:d1:79:43:43:e9:18:c7:84:a1:90:94:91:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:57:1A:70:BB:C8:95:88:AD:CB:2C:D7:7C:2E:7D:CD:A9:F6:7D:2F
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:3f:bb:1f:01:bd:e3:2c:86:0e:f2:72:01:be:8e:94:02:59:
         7b:b1:a1:e7:00:7b:c7:d9:53:61:00:3f:06:fd:91:c3:0d:c2:
         fe:49:4e:b9:da:16:21:31:1d:6a:d0:64:c6:22:c3:91:de:ae:
         a1:cd:cb:a8:bf:26:88:6f:be:fc:3d:35:a8:11:19:6f:93:a6:
         df:18:d4:52:74:d4:7c:44:7b:ed:18:7c:0b:14:6c:8e:cc:c4:
         db:45:fd:e1:d2:f4:09:d1:a9:23:65:14:b5:6e:6f:08:3c:34:
         10:fe:7b:93:56:ea:5f:20:8a:41:bb:2a:78:1c:70:dd:13:2e:
         eb:09:b6:dd:58:ee:a0:a0:1f:f0:ad:f8:f0:51:b7:64:bc:b7:
         0a:4c:dc:f6:82:09:4f:35:63:9e:8b:0f:b3:df:18:2f:8c:9a:
         ad:b8:ae:ca:42:36:c2:af:ea:1a:25:02:c9:0a:cb:e6:db:8a:
         f0:23:c6:f6:5e:f6:73:32:6a:39:4b:0d:b2:51:24:63:c3:78:
         6d:54:a7:3d:8c:e8:f9:bc:09:3c:bd:90:3d:c2:bb:4a:65:57:
         1d:98:9b:0b:03:c5:22:d3:b3:5e:07:06:e9:86:a8:84:67:35:
         d1:18:55:7f:49:f9:82:0f:b6:5f:48:d7:76:e8:2e:e2:a0:78:
         2a:30:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:34 2024 by rpki-client on console-ams.rpki-client.org