Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          l3kkV3Wmt4eM8onl1Wt681flnzMwrfepG5HAtIJ6m4E=
Subject key identifier:   05:D8:2A:C0:2B:21:1C:00:2B:E2:A4:7E:5A:4B:AA:B4:4E:9D:E8:EA
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6900F86EB31870F1799546671E00744FC45426E2
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:58 +0000
ROA not before:           Mon 15 Apr 2024 17:38:58 +0000
ROA not after:            Mon 14 Apr 2025 17:43:58 +0000
asID:                     11431
IP address blocks:        2001:12f8:a::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:f8:6e:b3:18:70:f1:79:95:46:67:1e:00:74:4f:c4:54:26:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:58 2024 GMT
            Not After : Apr 14 17:43:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:15:77:eb:67:6e:a2:5a:37:12:57:ad:8a:
                    34:ee:4c:cc:92:90:01:b3:2f:06:0f:04:f9:e6:79:
                    60:23:1c:dd:c1:7a:ed:9d:9c:e3:d7:21:91:b1:b2:
                    31:5c:45:da:70:6c:d6:7f:42:2c:17:0c:0d:23:e3:
                    de:a9:ac:05:59:cb:49:39:75:81:a3:a7:c3:6a:54:
                    ff:e4:5f:c6:da:83:10:1d:23:8d:1e:4b:fa:7d:a8:
                    f1:f4:2a:b1:0d:ef:e9:a5:f7:50:b2:24:4b:e3:41:
                    a8:0d:68:63:8b:35:89:fb:bc:08:60:18:24:f6:2e:
                    c2:d5:c7:33:dc:77:95:60:3b:e4:fe:75:2e:08:3d:
                    75:3e:6d:4b:65:95:c8:33:7e:7c:fc:bd:94:03:dd:
                    81:22:e2:49:dd:03:49:8c:98:9f:cd:ff:18:01:0f:
                    c1:9c:d4:1e:89:12:fc:4d:e3:7a:54:a6:66:50:bc:
                    24:b0:48:6c:54:45:d3:fb:df:fd:50:81:b9:03:28:
                    4b:df:1e:2e:35:10:7d:76:e9:d4:5b:83:61:98:f7:
                    06:44:41:e7:c6:c3:11:6e:47:87:94:2c:ec:ff:47:
                    d8:8d:44:f4:be:0c:7b:8e:1b:95:54:75:d6:b3:d5:
                    3a:6e:52:b5:62:ce:6f:a8:d9:55:87:71:02:57:2b:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:2A:C0:2B:21:1C:00:2B:E2:A4:7E:5A:4B:AA:B4:4E:9D:E8:EA
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:5e:60:a8:79:d1:59:de:aa:b5:07:8a:39:98:16:76:4e:
         6b:1a:4e:b9:e2:7b:e0:ce:da:03:01:50:4f:bb:66:54:ba:5a:
         8f:48:45:05:c9:19:28:ac:21:01:14:de:67:30:42:17:d4:d9:
         65:52:da:82:5d:74:9b:8e:6d:b9:4f:cc:be:89:58:93:ee:1a:
         34:8c:8e:b6:df:e2:bc:db:d8:7f:17:6a:4b:2a:d5:ca:45:d4:
         14:20:9a:b8:3a:cd:ea:09:3a:e5:91:b0:14:40:48:39:fa:07:
         d2:d1:4e:f8:c4:f4:c7:71:5f:39:c2:c9:81:7b:58:d5:a5:00:
         1a:c1:87:86:17:05:13:7a:ac:30:46:8d:11:b8:11:df:f5:4d:
         d6:f3:83:46:e8:5a:94:3d:84:55:f5:45:5e:34:34:a2:ed:4e:
         0f:1a:fd:dc:6a:a9:8a:f0:92:4c:87:fd:2c:54:e4:7d:e3:42:
         30:4a:22:0d:0d:7b:29:45:07:a1:84:87:97:b9:a5:77:6b:dd:
         86:e4:2a:e8:2b:55:a5:e5:67:97:27:bb:6d:eb:64:03:af:cc:
         d7:f6:e8:da:41:ef:31:56:5e:90:c0:68:51:70:8b:e1:bd:dc:
         11:bc:c1:3a:5e:ad:06:08:cb:6f:09:73:20:a9:5e:e0:08:fa:
         2e:e2:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org