Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa (raw, json)
Hash identifier:          /WrImy+rjSuUaQDSEejNrnc5oUxNFKO2Do9Zi2CsCQQ=
Subject key identifier:   80:53:AF:64:52:FB:B6:9A:98:16:57:7E:34:FB:E4:06:A9:17:BF:AD
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6AECB145C024A7B317FB80BE87F3D347D05EA05E
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     53035
IP address blocks:        2001:12f8:6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ec:b1:45:c0:24:a7:b3:17:fb:80:be:87:f3:d3:47:d0:5e:a0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:62:eb:79:40:89:1e:92:87:0c:12:1e:f1:
                    fd:a6:14:c0:da:ba:0a:c4:dd:2b:5b:0e:b1:eb:1a:
                    6c:72:6f:10:31:31:db:15:13:b1:34:40:38:bd:1b:
                    ad:aa:34:1f:2b:c5:e3:3e:0f:25:7f:e5:3d:82:eb:
                    8c:02:79:55:ce:34:f4:f1:ad:2a:9a:88:7a:21:86:
                    3d:ae:32:fd:95:55:e4:57:b0:ba:36:bb:09:04:3c:
                    a2:84:06:82:86:d8:1f:83:ed:7f:c8:5f:01:21:51:
                    eb:68:ed:c6:c9:60:63:b2:4c:17:fe:ae:e1:0c:c9:
                    5a:fc:05:9a:bc:03:4f:8e:21:10:da:df:7e:0a:7b:
                    6c:57:9f:62:bb:4f:d0:80:8a:46:69:a5:d3:b1:4a:
                    73:8c:91:72:f2:79:42:5d:0a:1d:92:de:9e:31:7c:
                    91:aa:aa:01:14:6a:38:0c:06:f8:8c:4d:0b:13:0b:
                    2d:31:f7:9a:4d:64:48:12:30:1f:77:c4:b8:3f:71:
                    8e:7c:fc:a6:95:24:39:cd:df:4a:27:ab:e9:c2:61:
                    f0:f1:a5:4e:a4:af:84:98:1a:6b:2a:b8:47:12:2c:
                    a5:84:ca:5a:51:0b:ad:6e:20:e3:31:0a:e8:1b:13:
                    46:c0:27:3a:0d:6d:7c:26:f4:c7:e2:fc:db:71:5c:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:AF:64:52:FB:B6:9A:98:16:57:7E:34:FB:E4:06:A9:17:BF:AD
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:14:0d:8b:f5:cd:24:43:c7:c3:87:37:ae:2f:47:08:e8:
         e5:2f:95:51:23:a6:d0:aa:53:a6:3d:a7:1d:cc:62:db:5a:35:
         58:38:d8:8b:5c:56:62:64:00:0b:c9:19:96:18:8d:71:df:aa:
         c4:e5:0e:aa:4e:4c:88:b3:2f:4f:1a:83:44:98:c8:19:ee:dc:
         39:98:93:db:14:61:2e:04:6a:6a:66:4e:54:24:c3:4b:5e:6e:
         a7:9d:52:3a:59:9a:82:4a:4f:d0:19:d8:b4:87:6a:5d:08:ff:
         58:c4:5e:97:02:39:3b:c7:82:5f:c5:1e:79:c0:25:9b:6a:c7:
         71:37:c4:2f:ec:f0:b6:bb:4e:8c:65:e3:67:a3:d4:2b:0b:7b:
         72:b5:e8:80:e9:59:e6:6f:41:e2:b3:f3:a5:83:22:74:b6:7f:
         5e:a3:ec:5c:ae:8e:01:8a:25:23:fd:08:be:cd:5b:0c:5c:a7:
         92:b6:fd:ab:d4:df:65:69:33:9f:f5:70:b7:25:b2:ea:3a:34:
         ee:09:c2:b9:52:80:89:b8:03:75:45:6e:c5:96:b5:b7:56:aa:
         ee:14:a0:6b:80:83:d5:a7:33:8f:e5:e8:cb:e5:97:30:7b:cb:
         d9:64:5c:43:05:bc:7f:39:4f:50:ea:9a:ae:51:b4:21:d5:50:
         e4:a2:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:50:13 2025 by rpki-client