Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa (raw, json)
Hash identifier:          TUkPpW9WbvdmiTNzeXvpFten/uxgHoCCxTMIaIT71ek=
Subject key identifier:   86:D8:C8:A1:E6:11:B9:4B:D2:22:00:95:C9:0F:D4:02:00:16:10:1B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       3407649490B5A8C6A6DC44F06609FA77338F72BC
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     53035
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:07:64:94:90:b5:a8:c6:a6:dc:44:f0:66:09:fa:77:33:8f:72:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:98:87:a0:ca:dc:c7:fa:de:73:7e:88:c6:
                    b3:52:80:9b:5a:ca:77:7c:49:d0:df:1a:b0:79:10:
                    25:32:b6:30:54:24:e2:f3:18:ab:23:76:6d:47:21:
                    d9:ff:77:08:f6:af:9b:cb:f8:98:85:f7:57:c1:ec:
                    5e:13:08:89:66:9c:86:e1:f2:8d:47:d1:0e:07:c9:
                    8f:43:77:72:ac:e5:54:66:2c:d4:59:47:fb:11:90:
                    20:3f:72:59:72:a3:56:88:79:09:07:37:e0:20:cc:
                    a5:4a:f2:42:6b:49:13:8a:6d:97:be:31:0a:55:34:
                    b3:f6:d6:0e:7b:88:4f:d1:19:df:c7:93:2b:12:70:
                    22:89:5f:70:61:ec:78:27:8a:d4:4a:41:f6:15:b1:
                    63:b9:13:d3:26:7a:f5:8e:71:2f:22:c9:0a:0e:63:
                    eb:64:c0:dc:d1:28:91:43:e5:4f:a6:ff:74:2d:83:
                    39:90:fb:86:0d:d5:8f:8f:a3:cd:9a:1a:b4:31:22:
                    d6:3b:f4:ba:fb:fc:03:b3:8c:61:c1:5a:90:0d:b0:
                    f2:b4:82:9a:9e:43:ab:f7:8f:7d:1b:ac:c6:65:fa:
                    86:19:4f:75:ad:83:bf:8b:c0:ff:a7:43:20:3c:b4:
                    5e:f3:ff:3a:57:8f:eb:8c:41:26:09:2a:f4:54:ab:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:C8:A1:E6:11:B9:4B:D2:22:00:95:C9:0F:D4:02:00:16:10:1B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:85:88:23:96:76:b2:dd:41:35:f0:11:3b:56:bd:0e:a4:
         05:17:5c:b7:6e:e3:56:db:af:b0:ce:82:d5:28:87:62:bb:e8:
         f0:10:4e:ed:13:ba:94:7d:9a:01:9e:fc:d8:40:8e:5b:7f:df:
         12:39:43:99:47:a8:e8:b1:3b:2e:7e:d3:73:c4:47:f4:f8:ce:
         24:0b:be:5f:3e:55:89:fe:f8:f9:43:82:33:95:f6:c4:93:73:
         1a:ef:64:f5:8a:61:10:8c:89:b3:72:bd:8a:af:c1:a9:98:b3:
         b6:d7:ec:1a:87:48:f4:62:c0:f3:7a:e7:d7:c8:7c:60:7f:cc:
         84:0a:4d:0c:fa:e7:da:5a:d7:b5:25:20:ee:1f:a8:00:07:33:
         c8:15:4b:1f:22:ee:b1:ff:9b:7c:98:97:91:13:d4:cd:44:62:
         f1:75:c6:30:48:2a:ea:ef:58:c5:40:d0:74:6d:30:1b:eb:00:
         3d:7d:99:29:d3:b6:ee:cf:64:56:71:1a:90:2a:e2:af:6f:a6:
         11:2c:f3:d4:60:90:2e:da:39:7a:ac:d3:45:d7:de:c8:9f:f9:
         66:dc:f1:22:d6:af:27:b0:e2:a3:55:5f:f5:95:de:67:28:9c:
         5b:54:c5:31:9e:d2:05:38:5a:45:fc:a3:32:ea:2b:42:49:6c:
         4d:a1:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org