Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          hjHSfCTdN6006V+NrHjhTF/ZfTQyF3Nq53YBFLqcjqM=
Subject key identifier:   4C:FE:8D:0E:AD:EB:6A:8B:D5:63:E7:43:AC:57:40:4C:01:3A:B5:B6
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       032FF16CE4EB19347674D82D897220927C81FBB7
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     11431
IP address blocks:        2001:12f8:6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2f:f1:6c:e4:eb:19:34:76:74:d8:2d:89:72:20:92:7c:81:fb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject: CN=3082010A0282010100D882C9B12E077BC23F75EAFE60B793059CAFAE5FA7071B6613F098EEDE215A500AA3F0BB2DED759F5818DEB6FD29DC8E662204A86DD421574878DC061E5FACACE69E0608A4C49AFCCDE9D71E3003EBD5860115BED9E7BAAEC8A66C6965521214EE128712B8CAAFF3DCF21E2F8775D75E65737C464290B478BF357DF0FC5057A32DCF45BDC6F01F389F1BB31218DF60AEFC557873E2675DC6AF1AD5EE847510A4501F62E71E6E6CB23FA4DF7B90562C6BD248B5D86F91D2F58A6FF7679207A745D37D2321F62BB46F9D123C6F22641AA3679874F0DDC0C5372805690EAB4027B95B72884DC23AF8E30D4528B80A1C4006EE989F2AF3057E0D8FBFBEE4AA6AC3DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:c9:b1:2e:07:7b:c2:3f:75:ea:fe:60:b7:
                    93:05:9c:af:ae:5f:a7:07:1b:66:13:f0:98:ee:de:
                    21:5a:50:0a:a3:f0:bb:2d:ed:75:9f:58:18:de:b6:
                    fd:29:dc:8e:66:22:04:a8:6d:d4:21:57:48:78:dc:
                    06:1e:5f:ac:ac:e6:9e:06:08:a4:c4:9a:fc:cd:e9:
                    d7:1e:30:03:eb:d5:86:01:15:be:d9:e7:ba:ae:c8:
                    a6:6c:69:65:52:12:14:ee:12:87:12:b8:ca:af:f3:
                    dc:f2:1e:2f:87:75:d7:5e:65:73:7c:46:42:90:b4:
                    78:bf:35:7d:f0:fc:50:57:a3:2d:cf:45:bd:c6:f0:
                    1f:38:9f:1b:b3:12:18:df:60:ae:fc:55:78:73:e2:
                    67:5d:c6:af:1a:d5:ee:84:75:10:a4:50:1f:62:e7:
                    1e:6e:6c:b2:3f:a4:df:7b:90:56:2c:6b:d2:48:b5:
                    d8:6f:91:d2:f5:8a:6f:f7:67:92:07:a7:45:d3:7d:
                    23:21:f6:2b:b4:6f:9d:12:3c:6f:22:64:1a:a3:67:
                    98:74:f0:dd:c0:c5:37:28:05:69:0e:ab:40:27:b9:
                    5b:72:88:4d:c2:3a:f8:e3:0d:45:28:b8:0a:1c:40:
                    06:ee:98:9f:2a:f3:05:7e:0d:8f:bf:be:e4:aa:6a:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:8D:0E:AD:EB:6A:8B:D5:63:E7:43:AC:57:40:4C:01:3A:B5:B6
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:0c:ca:25:1c:0e:93:91:1b:13:4c:76:8b:78:bd:4e:2c:
         a5:cf:a7:6d:4a:ce:c5:a4:31:6b:5d:c8:69:d7:ff:96:e8:fa:
         d9:65:7d:03:87:e4:31:ab:d3:55:85:8f:09:39:dc:9b:d0:56:
         a8:a2:9c:69:70:dd:ce:e6:91:6f:d7:24:09:c4:4c:5b:42:7d:
         07:5d:c9:b1:05:c1:ea:39:18:2c:b4:be:62:78:8f:2f:d1:f0:
         d6:14:96:73:61:7f:25:3a:ac:a8:6a:03:37:d6:a1:4e:ec:c9:
         a9:5e:82:d9:34:d1:67:55:a5:1a:c0:2e:47:32:2f:2b:ff:99:
         60:49:2c:2d:39:c9:1c:08:a8:5a:e4:2c:a9:52:92:6c:ac:92:
         9b:47:3b:bb:f5:29:4d:f1:0f:f5:da:07:cc:e6:5f:b6:52:1a:
         af:b1:5c:4d:30:3b:8a:07:70:10:c6:eb:53:2f:4b:ae:fe:a9:
         5a:40:95:42:09:03:f4:54:45:06:95:62:1a:f2:5a:2e:e8:9f:
         de:68:0f:5d:44:0e:f5:2a:67:64:a8:63:14:ec:ab:70:96:6b:
         08:23:1a:9a:ee:05:24:e5:4a:00:33:b5:56:f0:fb:4f:de:81:
         d3:21:7f:b3:f8:ed:66:03:b5:f7:91:a7:d2:f5:6d:a0:a6:aa:
         66:59:a0:75
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUAy/xbOTrGTR2dNgtiXIgknyB+7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTAzMTcxNzM5MDFaFw0yNjAzMTYxNzQ0MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDg4MkM5QjEyRTA3N0JDMjNG
NzVFQUZFNjBCNzkzMDU5Q0FGQUU1RkE3MDcxQjY2MTNGMDk4RUVERTIxNUE1MDBB
QTNGMEJCMkRFRDc1OUY1ODE4REVCNkZEMjlEQzhFNjYyMjA0QTg2REQ0MjE1NzQ4
NzhEQzA2MUU1RkFDQUNFNjlFMDYwOEE0QzQ5QUZDQ0RFOUQ3MUUzMDAzRUJENTg2
MDExNUJFRDlFN0JBQUVDOEE2NkM2OTY1NTIxMjE0RUUxMjg3MTJCOENBQUZGM0RD
RjIxRTJGODc3NUQ3NUU2NTczN0M0NjQyOTBCNDc4QkYzNTdERjBGQzUwNTdBMzJE
Q0Y0NUJEQzZGMDFGMzg5RjFCQjMxMjE4REY2MEFFRkM1NTc4NzNFMjY3NURDNkFG
MUFENUVFODQ3NTEwQTQ1MDFGNjJFNzFFNkU2Q0IyM0ZBNERGN0I5MDU2MkM2QkQy
NDhCNUQ4NkY5MUQyRjU4QTZGRjc2NzkyMDdBNzQ1RDM3RDIzMjFGNjJCQjQ2RjlE
MTIzQzZGMjI2NDFBQTM2Nzk4NzRGMEREQzBDNTM3MjgwNTY5MEVBQjQwMjdCOTVC
NzI4ODREQzIzQUY4RTMwRDQ1MjhCODBBMUM0MDA2RUU5ODlGMkFGMzA1N0UwRDhG
QkZCRUU0QUE2QUMzREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2ILJsS4He8I/der+YLeTBZyvrl+nBxtmE/CY7t4hWlAKo/C7Le11
n1gY3rb9KdyOZiIEqG3UIVdIeNwGHl+srOaeBgikxJr8zenXHjAD69WGARW+2ee6
rsimbGllUhIU7hKHErjKr/Pc8h4vh3XXXmVzfEZCkLR4vzV98PxQV6Mtz0W9xvAf
OJ8bsxIY32Cu/FV4c+JnXcavGtXuhHUQpFAfYucebmyyP6Tfe5BWLGvSSLXYb5HS
9Ypv92eSB6dF030jIfYrtG+dEjxvImQao2eYdPDdwMU3KAVpDqtAJ7lbcohNwjr4
4w1FKLgKHEAG7pifKvMFfg2Pv77kqmrD3QIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FEz+jQ6t62qL1WPnQ6xXQEwBOrW2MB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDMxM2EzMTMyNjYzODNh
MzYzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTMxMzQzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcB
IAES+AAGMA0GCSqGSIb3DQEBCwUAA4IBAQCWpAzKJRwOk5EbE0x2i3i9Tiylz6dt
Ss7FpDFrXchp1/+W6PrZZX0Dh+Qxq9NVhY8JOdyb0FaoopxpcN3O5pFv1yQJxExb
Qn0HXcmxBcHqORgstL5ieI8v0fDWFJZzYX8lOqyoagM31qFO7MmpXoLZNNFnVaUa
wC5HMi8r/5lgSSwtOckcCKha5CypUpJsrJKbRzu79SlN8Q/12gfM5l+2UhqvsVxN
MDuKB3AQxutTL0uu/qlaQJVCCQP0VEUGlWIa8lou6J/eaA9dRA71KmdkqGMU7Ktw
lmsIIxqa7gUk5UoAM7VW8PtP3oHTIX+z+O1mA7X3kafS9W2gpqpmWaB1
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:10 2025 by rpki-client on console.sobornost.net