Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266653a3a2f33322d3438203d3e203131373532.roa
File:                     323030313a313266653a3a2f33322d3438203d3e203131373532.roa (raw, json)
Hash identifier:          //VicPzn5NUlkIEm2SYcpilF+0bGicvmBk+jMXz+qq8=
Subject key identifier:   78:29:EC:6A:FA:61:F3:D3:10:98:2A:BD:9C:32:10:12:C4:5B:44:27
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       1EE15E73FE7FE6FA3BCF70547427387EDBC0631F
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266653a3a2f33322d3438203d3e203131373532.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     11752
IP address blocks:        2001:12fe::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e1:5e:73:fe:7f:e6:fa:3b:cf:70:54:74:27:38:7e:db:c0:63:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:4d:a0:dc:80:30:5c:ed:b9:1b:a0:79:06:
                    b3:33:e9:b4:4b:8b:06:83:0c:36:6e:1b:27:57:f0:
                    c0:43:ee:59:7c:da:00:d0:2d:44:60:c3:70:28:eb:
                    51:99:75:15:c0:ce:08:e5:49:43:6e:89:b8:70:8c:
                    df:28:64:4e:b2:22:65:c6:a8:d5:c9:86:4b:ba:49:
                    d6:fb:81:aa:a9:ca:b3:d4:66:8a:8d:21:e0:fa:f3:
                    92:88:3a:52:b1:11:99:00:c3:c4:de:ba:c0:5d:5f:
                    82:2f:97:9e:44:04:92:db:93:98:f2:df:ae:a2:69:
                    f9:ce:15:8d:45:bb:d7:18:ad:4e:eb:7c:d3:51:67:
                    12:d0:41:d5:a6:ad:d5:35:8c:84:3a:0e:d4:1f:54:
                    17:69:16:39:bd:13:86:4f:68:39:24:98:10:a7:b7:
                    34:10:ee:f9:04:01:a1:de:51:d0:71:13:6f:bb:91:
                    2b:75:52:44:3d:b0:77:d2:0c:d4:32:81:e9:a5:9c:
                    f7:b9:2a:56:86:1c:ee:f1:7d:32:04:1f:d3:33:8d:
                    e2:0e:c1:97:67:43:8f:02:0a:59:b8:90:ff:0a:2d:
                    08:11:d1:42:cf:e4:1e:bc:eb:7d:3a:cd:e0:12:5a:
                    21:cf:92:bb:94:c7:f8:05:a3:90:c7:f9:39:39:33:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:29:EC:6A:FA:61:F3:D3:10:98:2A:BD:9C:32:10:12:C4:5B:44:27
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266653a3a2f33322d3438203d3e203131373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:bc:fb:3c:06:3a:71:e0:1f:74:ec:76:56:21:d5:c5:91:
         67:13:91:d1:5d:0c:db:3a:fb:2b:b2:5d:41:fa:23:8c:22:ad:
         c2:9f:91:36:62:50:e9:8d:c2:90:21:87:3f:08:d1:26:03:64:
         1f:7d:82:1b:b4:b8:2b:ff:3c:c7:c9:f0:4b:6f:76:c1:5e:d5:
         74:6b:11:44:84:8d:1d:30:67:84:39:92:b1:74:6f:a7:37:6f:
         b4:f5:51:84:dd:9a:21:d6:6a:23:de:4e:d7:84:48:1f:f0:39:
         ba:f6:31:40:29:db:25:4d:12:11:5a:fb:51:9d:da:e1:6e:cf:
         83:8a:0f:ca:13:e7:b3:95:d6:99:4c:ed:57:20:ef:3e:c2:79:
         7f:32:b6:67:c5:84:71:1f:8a:ea:96:b3:92:e5:02:1e:2b:e4:
         33:e2:0d:2d:1b:66:6b:f6:38:06:30:79:db:c6:dc:93:7a:e2:
         26:98:81:74:1b:ef:21:25:20:79:b3:65:6c:b7:97:79:28:9d:
         73:16:e3:7e:36:16:97:53:5b:06:f4:45:0b:a3:2a:9b:46:67:
         30:91:b0:8f:35:54:0d:64:9b:b4:63:28:eb:8e:aa:d5:7f:36:
         b3:a5:b1:c0:0a:12:e0:e5:2d:31:d3:0b:d1:68:e3:bc:8e:d5:
         0d:bd:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:19 2025 by rpki-client on console.sobornost.net