Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          zd0FuKTBzGqCxTEdYEaq9ZN35OVJdXvK4EVkVtjdNuQ=
Subject key identifier:   24:97:14:26:B5:ED:3C:BF:C0:2E:6C:52:38:C8:D3:97:CD:15:31:BC
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6DDF5BB0023FB7BD59CB48FFC003F809433E4F10
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     11431
IP address blocks:        2001:12f8:4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:df:5b:b0:02:3f:b7:bd:59:cb:48:ff:c0:03:f8:09:43:3e:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject: CN=3082010A0282010100985B53EB9D188BFCDCCFE7843F5313281300927E6AD575DC0901255763BE99199ADFDD0D274C3D774F8151B746798A4B2F0BF930F821CE24B4FBFA9EA22B8CE58A671050E2E1D5CDBE7C2A4CB3C390FCA89EF0DBFD8BA76A9F5FFD96242D3548A5EAA600EF66886109858CE6A39200B7222712EB0D071D0FD024E01C1D1D97B3CEE009FD4B94944A9D90AD04D120EC25796CE13D58680926DDAB01B9507F60E84DD87966B482ACE50812339F7A197D1B8D472C16FDDA0EBE24A80DA57256D37E66EA5422F60BCA661217DE693E6360F17F87BB23BDD96349DB0F8C11921092C50284653239141ED0D08EEDEA0A108DFC50F2BBE6C1B96206C7F04038175DEB450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:53:eb:9d:18:8b:fc:dc:cf:e7:84:3f:53:
                    13:28:13:00:92:7e:6a:d5:75:dc:09:01:25:57:63:
                    be:99:19:9a:df:dd:0d:27:4c:3d:77:4f:81:51:b7:
                    46:79:8a:4b:2f:0b:f9:30:f8:21:ce:24:b4:fb:fa:
                    9e:a2:2b:8c:e5:8a:67:10:50:e2:e1:d5:cd:be:7c:
                    2a:4c:b3:c3:90:fc:a8:9e:f0:db:fd:8b:a7:6a:9f:
                    5f:fd:96:24:2d:35:48:a5:ea:a6:00:ef:66:88:61:
                    09:85:8c:e6:a3:92:00:b7:22:27:12:eb:0d:07:1d:
                    0f:d0:24:e0:1c:1d:1d:97:b3:ce:e0:09:fd:4b:94:
                    94:4a:9d:90:ad:04:d1:20:ec:25:79:6c:e1:3d:58:
                    68:09:26:dd:ab:01:b9:50:7f:60:e8:4d:d8:79:66:
                    b4:82:ac:e5:08:12:33:9f:7a:19:7d:1b:8d:47:2c:
                    16:fd:da:0e:be:24:a8:0d:a5:72:56:d3:7e:66:ea:
                    54:22:f6:0b:ca:66:12:17:de:69:3e:63:60:f1:7f:
                    87:bb:23:bd:d9:63:49:db:0f:8c:11:92:10:92:c5:
                    02:84:65:32:39:14:1e:d0:d0:8e:ed:ea:0a:10:8d:
                    fc:50:f2:bb:e6:c1:b9:62:06:c7:f0:40:38:17:5d:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:14:26:B5:ED:3C:BF:C0:2E:6C:52:38:C8:D3:97:CD:15:31:BC
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:40:c4:be:c6:21:76:0c:6a:c8:67:a3:37:cb:98:9d:e7:
         02:d9:a7:6e:f3:5d:77:2f:11:11:58:cb:8a:d6:ad:4a:38:5e:
         6e:f5:92:ca:5e:fd:8d:7b:55:bc:73:13:f9:c4:dd:7c:ab:fd:
         9c:81:a8:07:a6:cb:10:97:a3:94:ab:e4:86:bc:87:9e:aa:46:
         ac:06:f8:af:55:b6:9d:de:47:63:39:89:d1:d8:5d:19:c0:d6:
         e2:bf:38:f5:fc:7c:51:e0:00:b9:ae:13:74:df:54:f7:55:b0:
         d7:38:62:24:3c:c0:f0:18:c0:79:c0:cf:ac:eb:69:37:87:eb:
         f2:0c:88:0c:de:4f:42:42:fb:3b:2f:96:89:9a:94:6a:0c:3e:
         07:59:91:cd:0b:f6:9a:a6:38:ad:62:bc:ee:fa:2c:53:26:85:
         b1:14:c2:aa:97:ba:19:f6:f8:82:aa:46:07:96:99:a6:0b:c2:
         e4:89:e7:75:42:8a:6d:7d:d7:eb:9d:5a:12:b3:9f:f0:20:6c:
         d4:b8:a2:0b:f7:1e:8e:07:f6:a0:ee:16:26:97:58:92:aa:72:
         26:3a:ca:7d:04:0f:46:fb:b9:f1:b2:b1:a5:e8:50:ad:30:f4:
         67:56:a2:d2:bf:62:da:f1:ca:be:47:fa:bb:c2:8e:c4:f8:3c:
         27:b7:bd:19
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUbd9bsAI/t71Zy0j/wAP4CUM+TxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTAzMTcxNzM5MDJaFw0yNjAzMTYxNzQ0MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTg1QjUzRUI5RDE4OEJGQ0RD
Q0ZFNzg0M0Y1MzEzMjgxMzAwOTI3RTZBRDU3NURDMDkwMTI1NTc2M0JFOTkxOTlB
REZERDBEMjc0QzNENzc0RjgxNTFCNzQ2Nzk4QTRCMkYwQkY5MzBGODIxQ0UyNEI0
RkJGQTlFQTIyQjhDRTU4QTY3MTA1MEUyRTFENUNEQkU3QzJBNENCM0MzOTBGQ0E4
OUVGMERCRkQ4QkE3NkE5RjVGRkQ5NjI0MkQzNTQ4QTVFQUE2MDBFRjY2ODg2MTA5
ODU4Q0U2QTM5MjAwQjcyMjI3MTJFQjBEMDcxRDBGRDAyNEUwMUMxRDFEOTdCM0NF
RTAwOUZENEI5NDk0NEE5RDkwQUQwNEQxMjBFQzI1Nzk2Q0UxM0Q1ODY4MDkyNkRE
QUIwMUI5NTA3RjYwRTg0REQ4Nzk2NkI0ODJBQ0U1MDgxMjMzOUY3QTE5N0QxQjhE
NDcyQzE2RkREQTBFQkUyNEE4MERBNTcyNTZEMzdFNjZFQTU0MjJGNjBCQ0E2NjEy
MTdERTY5M0U2MzYwRjE3Rjg3QkIyM0JERDk2MzQ5REIwRjhDMTE5MjEwOTJDNTAy
ODQ2NTMyMzkxNDFFRDBEMDhFRURFQTBBMTA4REZDNTBGMkJCRTZDMUI5NjIwNkM3
RjA0MDM4MTc1REVCNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmFtT650Yi/zcz+eEP1MTKBMAkn5q1XXcCQElV2O+mRma390NJ0w9
d0+BUbdGeYpLLwv5MPghziS0+/qeoiuM5YpnEFDi4dXNvnwqTLPDkPyonvDb/Yun
ap9f/ZYkLTVIpeqmAO9miGEJhYzmo5IAtyInEusNBx0P0CTgHB0dl7PO4An9S5SU
Sp2QrQTRIOwleWzhPVhoCSbdqwG5UH9g6E3YeWa0gqzlCBIzn3oZfRuNRywW/doO
viSoDaVyVtN+ZupUIvYLymYSF95pPmNg8X+HuyO92WNJ2w+MEZIQksUChGUyORQe
0NCO7eoKEI38UPK75sG5YgbH8EA4F13rRQIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FCSXFCa17Ty/wC5sUjjI05fNFTG8MB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
MzQzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTMxMzQzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAEMA0GCSqGSIb3DQEBCwUAA4IBAQBtE0DEvsYhdgxqyGejN8uYnecC2adu
8113LxERWMuK1q1KOF5u9ZLKXv2Ne1W8cxP5xN18q/2cgagHpssQl6OUq+SGvIee
qkasBvivVbad3kdjOYnR2F0ZwNbivzj1/HxR4AC5rhN031T3VbDXOGIkPMDwGMB5
wM+s62k3h+vyDIgM3k9CQvs7L5aJmpRqDD4HWZHNC/aapjitYrzu+ixTJoWxFMKq
l7oZ9viCqkYHlpmmC8Lkied1QoptfdfrnVoSs5/wIGzUuKIL9x6OB/ag7hYml1iS
qnImOsp9BA9G+7nxsrGl6FCtMPRnVqLSv2La8cq+R/q7wo7E+Dwnt70Z
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:47:06 2025 by rpki-client