Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          Q9wyBGmFe/htpvnyHBhIfghOL7uKOjv9EFDgWw+D3i8=
Subject key identifier:   BA:8D:53:29:FB:29:2B:9C:77:67:C0:9D:77:D6:2C:85:80:DE:BD:DA
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       060E15A2A10E3588B21009AE5325003DEF691487
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     28345
IP address blocks:        2001:12f8:c::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:15:a2:a1:0e:35:88:b2:10:09:ae:53:25:00:3d:ef:69:14:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:c2:4d:a9:40:34:26:15:8d:d9:d5:73:3e:
                    9d:09:f0:78:40:97:94:89:b4:23:b8:5c:2c:65:d0:
                    ee:a3:11:0b:22:02:4c:bf:0e:33:d1:6b:c5:f5:9f:
                    b3:bd:e1:c2:55:ca:41:89:3f:d4:11:a4:d5:dc:60:
                    2f:9a:9f:a5:a4:5e:43:82:b6:42:98:be:82:56:c9:
                    1a:36:77:0e:4d:d4:29:2e:4c:5a:7e:7d:c2:b4:1d:
                    84:d8:10:86:b5:da:25:5c:f1:0b:a3:30:37:c4:65:
                    92:c4:d2:95:54:62:26:69:3a:7e:c2:35:b7:d3:76:
                    73:83:de:4d:7e:7f:c7:ce:f8:16:ae:e5:58:c9:7f:
                    85:73:a5:15:61:26:76:da:29:7b:91:60:82:88:98:
                    5f:b8:47:53:0c:65:13:14:39:9d:27:47:7b:23:26:
                    bb:4b:df:51:28:06:eb:4b:84:38:de:72:f8:d7:0e:
                    7e:c6:43:0f:45:f2:d3:58:71:ba:19:c7:86:f2:64:
                    d2:0c:4e:d1:93:8b:2a:70:ca:70:4c:b7:29:6d:14:
                    18:76:72:3a:fe:3f:cb:bc:81:a6:57:57:76:d1:20:
                    d2:bf:ff:af:84:28:01:6e:0a:3f:bb:bd:30:a0:19:
                    e0:a8:36:c0:cc:65:f3:49:c2:93:79:89:57:2d:e0:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:53:29:FB:29:2B:9C:77:67:C0:9D:77:D6:2C:85:80:DE:BD:DA
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:c::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:d0:d7:af:98:b0:75:56:73:8a:6f:97:d1:a3:28:81:f0:
         d8:09:72:88:9c:80:f4:c6:66:b7:45:29:e3:53:2a:41:5c:ae:
         c7:b2:7b:6e:d4:f4:67:51:26:f6:1f:90:95:40:29:cc:49:ee:
         4c:62:ca:ee:d2:4d:93:a2:0b:e1:88:bb:22:b1:b9:43:c3:d3:
         56:c2:6f:60:de:a4:74:dd:b1:66:e4:38:06:a7:2b:c7:16:3e:
         54:72:c4:9c:f5:11:f9:e0:05:32:ed:d2:42:31:5b:60:ed:4c:
         df:a9:5c:e9:aa:60:b6:70:0c:bf:4b:f9:58:fe:2d:61:41:19:
         4d:1d:02:f7:6c:6b:1e:dd:22:83:cb:c0:5e:4c:39:1e:c1:ba:
         e4:ba:43:7e:22:ab:e9:6c:18:11:df:26:8c:fc:4d:79:70:83:
         b6:4c:f5:a9:87:fd:75:be:8d:63:da:56:d3:eb:d1:72:62:94:
         40:9d:8e:f0:48:5a:90:53:e7:70:07:bc:44:4d:13:0e:85:f8:
         f1:08:77:8e:fe:c0:90:65:fc:a2:f8:78:22:d1:b1:b9:51:e5:
         bb:5f:26:db:80:9a:b7:e4:7f:34:cf:dd:48:19:fb:df:7d:e9:
         a2:13:92:ef:23:e4:81:af:da:36:dc:59:a1:60:9b:24:bb:46:
         cd:6e:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:40 2024 by rpki-client on console-fra.rpki-client.org