Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa (raw, json)
Hash identifier:          WEo481J46kNB3LT9xDVcUX//VvoY46Jy0PK3oMrE6Zc=
Subject key identifier:   41:1E:A9:08:49:19:CF:E3:54:61:0F:76:33:D0:2E:92:14:C1:A8:8B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       0A53D034D0F22B669CA076B7A4CA83B50661B009
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     11284
IP address blocks:        2001:12f8:a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:53:d0:34:d0:f2:2b:66:9c:a0:76:b7:a4:ca:83:b5:06:61:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:37:78:76:04:40:07:d3:82:c8:bd:8d:8d:
                    0a:23:f7:21:05:d1:e1:47:0c:82:34:22:03:fd:91:
                    cb:8d:a7:a8:5e:10:50:91:77:10:85:59:b2:1e:98:
                    86:cf:ba:c2:6f:ec:b7:de:1b:ca:36:3f:a4:3e:6e:
                    c6:c5:a6:4e:f0:ff:a0:37:d8:29:f6:dc:ae:f0:1a:
                    82:c9:06:5a:49:db:50:50:84:e2:d1:a8:68:ff:23:
                    f5:3b:94:52:49:29:cd:30:bb:a9:77:f9:8c:eb:47:
                    12:68:6a:30:b2:b6:8e:71:ea:1c:cb:a6:6b:87:f8:
                    5d:58:55:bb:02:ce:0b:5b:bd:8b:27:d7:3a:2d:bc:
                    e1:35:b0:19:64:22:de:8c:35:42:cd:73:d8:08:2c:
                    1e:5c:3b:3c:e6:08:c4:d4:5e:76:6e:b0:55:66:15:
                    a1:ad:b1:37:e1:66:0a:94:f6:2a:37:82:00:ec:fb:
                    94:fa:4e:0d:ea:f8:1a:3e:96:6b:8b:1f:7f:24:00:
                    6c:52:f3:4a:05:69:b8:86:3b:4f:5d:58:12:bf:f2:
                    9b:eb:0d:ea:2c:ec:3b:ff:d4:60:b1:c4:58:64:0d:
                    40:00:d1:fd:ad:84:bd:80:03:94:8f:8e:37:6a:cc:
                    2b:fd:0c:85:86:ee:e7:0e:96:bd:17:63:2a:39:b8:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:A9:08:49:19:CF:E3:54:61:0F:76:33:D0:2E:92:14:C1:A8:8B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:43:4d:4a:9d:2f:e2:a9:10:5a:e8:dc:03:b6:1a:ff:d1:
         d5:c5:68:76:47:f6:41:ee:7e:d4:a2:9a:30:a9:2a:8f:83:86:
         de:58:00:0e:58:98:d9:3d:79:1a:ab:f0:73:6e:cc:42:c6:43:
         7f:53:a8:0b:2d:39:f1:bf:af:27:4f:b6:0b:94:8e:c3:61:a5:
         11:11:21:44:23:74:2c:7d:7d:fe:ba:3d:86:85:00:ce:7c:b8:
         a7:a3:35:88:5c:7b:eb:8a:20:11:64:23:b2:8f:4c:69:9c:95:
         1a:30:ca:1d:47:5e:59:c2:35:da:33:5e:d8:af:c6:a6:2f:47:
         ae:67:e5:8e:d7:e3:e1:69:61:37:8c:a6:3d:5c:11:a5:5c:e5:
         6d:60:f4:40:ad:83:85:aa:6c:84:f1:01:30:e9:f3:f3:11:55:
         a3:87:3a:c3:91:26:5b:bf:2d:33:2b:f6:1c:94:4f:03:b6:fa:
         7c:d3:5a:19:a2:9f:d6:0b:33:62:78:28:a7:fe:37:18:60:de:
         3c:ee:81:6f:64:f3:78:d5:9b:6d:64:28:fd:b1:0e:3f:d3:bf:
         c9:17:01:ad:a8:a2:d6:97:09:18:c3:0a:5e:6a:eb:d9:33:ed:
         3c:51:97:bc:04:cc:83:69:d2:09:8d:ca:2e:3f:36:4f:a2:61:
         e3:59:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:49:53 2025 by rpki-client