Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa (raw, json)
Hash identifier:          pbX2OMlOrW7DVfAeiCp5p2cjPUSB3JdDprSUbHAzULM=
Subject key identifier:   D9:B9:81:99:99:8D:57:93:83:85:C4:72:E7:1C:8E:44:00:91:1C:75
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       48403233069314B70932014BA1E6D41AD04271E5
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     11644
IP address blocks:        2001:12f8:4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:40:32:33:06:93:14:b7:09:32:01:4b:a1:e6:d4:1a:d0:42:71:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:ab:d2:c2:4f:97:b0:9f:ee:8d:39:62:8f:
                    33:64:26:c1:cf:fe:c8:4f:64:f7:7e:d2:e9:94:ee:
                    de:64:73:12:3a:e0:da:d7:7d:3d:97:bf:96:1c:95:
                    01:e3:cd:3f:81:6e:60:88:11:b1:1d:ca:b8:ee:a2:
                    b3:5c:e4:29:96:52:25:91:a4:51:16:f4:0c:65:e0:
                    3b:95:9f:bc:40:ee:37:25:a1:74:e1:cb:62:c7:27:
                    49:52:d4:97:34:6c:6b:24:e4:27:d7:b0:9d:e2:78:
                    23:4b:0a:45:5d:94:6c:8d:ad:e7:99:17:32:5d:15:
                    d2:d3:45:cb:8e:d7:c4:13:1b:04:b8:f3:8c:1c:f4:
                    ca:bc:08:9f:27:bf:be:e7:83:ce:f0:6f:2f:8c:76:
                    b6:32:3d:27:2d:60:0f:d1:d7:7a:56:56:1d:74:90:
                    37:09:94:dc:11:9f:ce:9f:05:9b:a5:1d:b2:dd:67:
                    b8:2f:07:c6:71:46:21:8c:c9:de:3f:88:21:65:a1:
                    42:1e:75:5b:07:ed:a1:c6:0c:79:1a:48:c0:8e:a6:
                    f1:95:75:38:50:6c:5d:7b:50:c2:bf:93:37:89:ee:
                    12:a1:76:b1:77:f7:e4:a2:c7:e5:d2:2e:2d:be:06:
                    d1:44:71:18:97:0d:cf:a7:a5:77:c7:60:d0:71:11:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:81:99:99:8D:57:93:83:85:C4:72:E7:1C:8E:44:00:91:1C:75
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         c2:ed:d2:a5:57:eb:90:a5:22:16:a9:44:d7:c4:a6:7d:b2:79:
         97:b8:23:e5:92:85:c0:99:2e:bd:a8:11:3c:21:d3:8c:4b:8e:
         85:c1:ce:30:c8:6a:44:37:f6:44:66:78:f0:70:d4:00:5e:c5:
         c2:b8:9a:58:d2:03:c2:56:df:cf:b3:23:87:a4:94:e1:92:d4:
         96:eb:fa:e5:e7:dc:82:9e:fa:20:e2:5b:bf:36:c6:2c:9f:31:
         69:1c:ba:3c:94:ba:fa:d1:82:34:30:e1:9d:89:77:a3:c4:af:
         0f:e7:1f:48:f8:5e:be:26:34:ff:80:41:ad:b5:5f:20:a5:b3:
         b6:94:a4:bd:a0:66:11:18:76:15:eb:00:f1:fa:5a:c3:0f:eb:
         a9:8b:cb:0d:c1:b2:2f:77:d3:a4:c1:3f:15:14:5d:33:90:2d:
         51:2e:37:f7:89:03:bb:ae:82:57:92:a6:58:90:51:cc:b1:5b:
         1d:23:53:3c:a1:6c:07:df:09:cd:2e:33:29:8c:b0:cc:03:4e:
         8a:df:19:f9:c1:a7:8f:e5:e7:f8:d9:14:d6:b8:6f:d3:ff:92:
         0d:2f:08:2d:ea:90:eb:e9:50:2e:39:27:37:76:b8:59:cb:d2:
         0c:35:1c:80:af:69:fc:e0:8a:4c:6e:d1:30:c2:53:67:bf:59:
         cc:6c:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:47:51 2025 by rpki-client