Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa (raw, json)
Hash identifier:          BR1xUXEqjCacLrdLLBRN+sWB5IY5FuCCsLyoyIsFUgw=
Subject key identifier:   73:DD:CF:6D:3C:ED:21:CD:1C:D6:00:D1:BA:26:B8:A2:49:0B:5D:25
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6EC100EA9C657D094AD6831AB807A13DC923BC18
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     11284
IP address blocks:        2001:12f8:a::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c1:00:ea:9c:65:7d:09:4a:d6:83:1a:b8:07:a1:3d:c9:23:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:f6:b9:29:eb:34:ad:4e:00:63:5a:d6:cf:
                    1a:2e:3d:84:81:08:17:e3:d8:32:30:98:0f:70:be:
                    b5:c6:27:1c:89:38:5a:9e:4d:d3:ce:29:c4:94:5c:
                    bf:92:68:75:3f:5d:87:19:52:bc:0f:c6:0a:12:f4:
                    c5:cc:5d:1e:4c:9d:36:7c:08:1b:b1:77:20:17:90:
                    cf:a6:4d:3e:41:5f:cd:be:a8:bd:41:bd:18:da:52:
                    2c:e1:21:21:4a:31:c6:4e:0c:7b:f7:60:19:a9:13:
                    24:e5:a4:0a:2d:0e:b2:41:3d:38:f7:bd:2c:36:d8:
                    b0:49:db:61:b4:52:84:5b:bd:d2:fe:52:26:92:74:
                    59:fb:dc:4a:12:5d:2e:e0:c3:10:17:51:40:6d:15:
                    03:38:a3:05:27:46:42:2c:2a:fc:ff:dd:10:27:0d:
                    f8:8f:85:5b:2b:ad:40:2e:e0:a3:3a:bb:32:53:07:
                    1a:28:ff:e2:45:43:7d:a0:39:bd:9c:46:2b:5e:83:
                    8a:a8:4e:b6:5e:68:3b:39:14:75:37:c2:53:79:f2:
                    b6:76:f6:96:52:11:25:3f:4c:5d:66:aa:84:80:68:
                    70:d7:82:29:5e:94:aa:09:04:ff:14:e5:6e:c6:17:
                    76:63:34:a8:27:38:4e:ed:7f:61:82:01:c7:bc:2f:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:CF:6D:3C:ED:21:CD:1C:D6:00:D1:BA:26:B8:A2:49:0B:5D:25
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:20:77:d9:09:ab:c6:e0:65:4c:51:9a:1f:18:a4:c9:93:13:
         24:aa:33:9f:26:38:f5:32:0c:b9:55:33:a3:14:33:69:28:47:
         cf:d0:5f:21:e1:c8:85:8d:61:56:09:aa:9a:53:26:d7:2d:7e:
         df:cb:fc:28:8d:b3:46:29:96:57:f4:32:67:11:c3:82:e6:42:
         bb:22:cc:13:aa:c7:71:66:38:59:d8:2f:38:1f:b9:eb:e9:2e:
         e2:d6:0c:66:85:04:ec:af:a4:1c:3a:00:bd:6c:88:83:74:8f:
         ab:f9:f8:90:bc:fb:a6:48:d0:8e:dd:8a:b5:a1:70:4e:cf:69:
         9c:af:e8:fb:b5:5a:32:ae:70:bd:b9:5c:93:d2:05:d1:02:16:
         6a:a0:bc:1f:d7:71:2d:95:42:42:01:45:2c:a1:65:c7:39:06:
         e5:a3:74:8a:dc:d2:42:f2:95:69:fb:35:72:5b:76:50:12:12:
         b8:58:28:a7:09:d6:35:78:52:48:21:42:aa:49:60:5c:45:39:
         fc:1d:d3:37:57:2b:ad:fd:e2:07:a0:5c:63:84:ba:81:7f:5d:
         73:14:2c:9b:02:cc:80:1d:95:1e:58:89:73:73:da:79:02:86:
         1c:45:0e:86:88:6e:76:c6:dc:87:29:4f:00:4e:e7:05:4b:33:
         3b:fd:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org