Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          8khJyQz5NFIwNpxu8saUq8KASMFLPTdRf91en6p9tRI=
Subject key identifier:   30:32:D9:1E:C2:42:0D:F1:A7:31:83:6F:11:6E:C3:F3:24:A1:55:C9
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       2C59DE6DDC9943358B0D84BB462C98199890C924
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     28345
IP address blocks:        2001:12f8:4::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:59:de:6d:dc:99:43:35:8b:0d:84:bb:46:2c:98:19:98:90:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:27:30:14:fa:06:f4:8f:6f:9f:7c:b2:1c:
                    66:98:ca:4d:95:14:66:1e:5b:3f:1a:3e:52:cd:97:
                    e2:e0:81:a1:25:39:3d:aa:b3:d9:77:c6:42:e1:b7:
                    2f:02:40:16:d5:e4:17:19:79:52:ca:99:f9:1f:cc:
                    91:49:0d:63:f7:89:ec:41:b3:65:0c:32:47:6c:98:
                    ee:ef:37:7d:6c:9a:31:cb:c9:30:89:0f:24:d0:b7:
                    aa:ce:d8:3a:65:86:d1:e8:74:95:90:af:60:dc:43:
                    70:48:15:e3:a9:c1:f2:68:44:e6:c3:a3:8d:de:b1:
                    76:e7:b9:ba:77:75:8f:00:8d:40:e9:3f:43:61:b3:
                    5e:f3:59:01:62:e1:b1:56:cc:e9:14:e0:4f:19:a0:
                    48:61:3a:df:f9:57:7f:88:3e:63:0c:35:c9:26:ba:
                    e8:6f:b2:d6:43:aa:ff:14:8d:20:5d:d3:3a:e2:46:
                    b6:73:ce:13:c3:5d:91:39:35:25:f3:5b:ff:3a:7d:
                    3a:9d:01:49:9b:26:99:ed:ba:35:f6:ae:ce:f5:f1:
                    c9:db:8b:1c:fa:bd:75:d8:fc:66:fe:45:9c:ff:d2:
                    23:5f:e6:78:64:25:8d:c7:c0:94:94:55:41:a4:12:
                    7c:03:c7:03:b3:7c:6c:dd:d3:49:00:33:35:a3:30:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:D9:1E:C2:42:0D:F1:A7:31:83:6F:11:6E:C3:F3:24:A1:55:C9
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:1b:8c:af:cf:a1:96:e6:44:aa:35:24:8f:53:5c:1b:c5:
         91:91:4e:14:3c:37:4d:21:45:3b:01:ed:3c:81:d2:99:dc:0e:
         d2:6c:e6:7b:88:f7:af:1e:02:3b:ec:47:3d:c6:b6:f6:3a:12:
         fc:69:4b:80:56:6c:0e:8a:00:c7:69:a6:00:0e:d0:cc:66:a0:
         6f:91:51:8e:72:7a:46:f6:05:e3:d3:7d:ce:3c:65:1f:63:66:
         ca:c7:e7:3d:87:29:dc:6e:20:8e:db:69:e3:3e:e9:bd:5a:a1:
         de:85:e1:e4:29:79:a9:20:43:d9:e0:ff:bd:68:26:04:b8:59:
         19:fe:5f:69:2d:7e:fa:58:5f:9e:5c:15:fa:f3:66:f7:93:02:
         32:6c:07:68:1b:35:72:e7:f2:97:f9:96:73:3c:cb:3d:35:4f:
         1c:cd:f5:78:34:4c:7a:f1:6d:2f:2c:24:b1:65:96:d1:3b:3a:
         ff:98:ff:10:cf:f5:49:84:a4:ff:40:d6:cb:54:db:61:13:a8:
         c0:b5:1a:41:47:5b:63:08:69:42:f3:c6:fd:51:98:49:d0:07:
         cb:cd:2c:07:21:6f:0e:65:2a:a2:2e:df:73:d8:f3:33:5d:61:
         19:c1:89:29:1c:f9:5e:f1:8f:c7:6d:3c:62:97:65:51:6d:61:
         9f:1e:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:16 2024 by rpki-client on console-fra.rpki-client.org