Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          ID2kUifbEJIxjpE1hdpMsJk9UATH8xy4gbtvRFltSes=
Subject key identifier:   01:06:27:CD:1F:3C:7D:57:20:C0:7C:A5:24:C3:FF:1A:C1:3F:5A:C8
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4FF493D46BA1AA443DDEEA4A7A14F941107DE981
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     11431
IP address blocks:        2001:12f8:2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f4:93:d4:6b:a1:aa:44:3d:de:ea:4a:7a:14:f9:41:10:7d:e9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject: CN=3082010A0282010100C7EDD5476551D1B76237EF2C998DA24C8F97CFE15A260F37B59B173A09AACEA89D5735020F110FEEED6D5D1F02765E1FE73F598DF5C0B465BB600B2A18CE9CBAA95035B83EBA01F38DF71F326A330D529486AAEF6AC04DAD18F37D82AB42F1159B83882980D3AFFF315D982E43EA037BC10486AC99E69CD515B60E40ED23B3E6CF578B31F7018197DD4AA3044EA8B8F2FFFE5203D107E4D79270C35921A6AF0801EEA703F09869ED11463660FA7A6204C16AA9D55A25C3827C25FD48C14AA942EA60754F5DF59BE19144C9FC93373F4AD5271980C0FBF1D1BD1634950F7D9E1480A3B5F068E77530C25CE598F60358B45C6A155014A19F85E5D6457FE1A1242F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:d5:47:65:51:d1:b7:62:37:ef:2c:99:8d:
                    a2:4c:8f:97:cf:e1:5a:26:0f:37:b5:9b:17:3a:09:
                    aa:ce:a8:9d:57:35:02:0f:11:0f:ee:ed:6d:5d:1f:
                    02:76:5e:1f:e7:3f:59:8d:f5:c0:b4:65:bb:60:0b:
                    2a:18:ce:9c:ba:a9:50:35:b8:3e:ba:01:f3:8d:f7:
                    1f:32:6a:33:0d:52:94:86:aa:ef:6a:c0:4d:ad:18:
                    f3:7d:82:ab:42:f1:15:9b:83:88:29:80:d3:af:ff:
                    31:5d:98:2e:43:ea:03:7b:c1:04:86:ac:99:e6:9c:
                    d5:15:b6:0e:40:ed:23:b3:e6:cf:57:8b:31:f7:01:
                    81:97:dd:4a:a3:04:4e:a8:b8:f2:ff:fe:52:03:d1:
                    07:e4:d7:92:70:c3:59:21:a6:af:08:01:ee:a7:03:
                    f0:98:69:ed:11:46:36:60:fa:7a:62:04:c1:6a:a9:
                    d5:5a:25:c3:82:7c:25:fd:48:c1:4a:a9:42:ea:60:
                    75:4f:5d:f5:9b:e1:91:44:c9:fc:93:37:3f:4a:d5:
                    27:19:80:c0:fb:f1:d1:bd:16:34:95:0f:7d:9e:14:
                    80:a3:b5:f0:68:e7:75:30:c2:5c:e5:98:f6:03:58:
                    b4:5c:6a:15:50:14:a1:9f:85:e5:d6:45:7f:e1:a1:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:06:27:CD:1F:3C:7D:57:20:C0:7C:A5:24:C3:FF:1A:C1:3F:5A:C8
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:60:96:41:eb:91:2f:04:bf:ca:6b:69:ba:cb:91:d8:cd:5a:
         c4:d9:ec:a8:21:ae:f3:df:5a:a2:0e:92:da:02:12:33:72:ef:
         26:e5:30:5a:37:6c:9f:27:9c:00:38:e4:77:10:70:42:de:04:
         8e:94:3b:19:3c:51:7b:25:9b:fd:06:08:cd:ad:bb:be:8f:6b:
         79:f9:78:a6:7b:74:42:81:96:42:93:69:77:45:ac:08:e1:50:
         fc:7f:05:53:f2:bf:5d:94:39:49:29:aa:24:3f:95:8f:b3:62:
         1d:fe:a0:c0:07:c5:9a:41:9f:ef:59:ba:6f:da:b6:1c:2a:94:
         f9:91:db:66:fa:3b:f0:1f:a7:a9:ae:e3:ca:4e:08:88:33:ca:
         7e:c4:21:cc:ff:88:21:bf:47:72:88:9e:2b:4b:84:91:95:cb:
         08:38:c8:67:9f:2d:18:65:2b:77:c2:5d:7f:9f:7f:46:a7:b2:
         85:94:13:8f:c3:50:6c:1b:ae:a3:ec:54:52:2c:07:07:32:eb:
         9a:55:fd:b9:30:90:ab:a0:30:30:3a:e1:11:cd:8a:19:31:0d:
         af:0f:45:0a:e5:db:90:d1:08:07:6f:0c:6f:8f:8c:f8:f9:d3:
         cc:df:b8:62:75:af:00:a3:66:b6:aa:77:2b:7a:36:c9:40:15:
         c4:ba:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:16 2024 by rpki-client on console-fra.rpki-client.org