Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
File:                     3134392e31392e3230362e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          qHV0SBl2XwXazxx9UZgDrf1CiXyfUSRYqGu5uGFXq9A=
Subject key identifier:   DF:E9:2C:3F:A4:39:AE:7B:3A:87:46:7E:30:5B:AD:92:5C:AD:5E:CB
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       04CF97A0A7648E0DF3760377C106C82603BEDD54
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        149.19.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cf:97:a0:a7:64:8e:0d:f3:76:03:77:c1:06:c8:26:03:be:dd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=DFE92C3FA439AE7B3A87467E305BAD925CAD5ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:db:dc:0b:1b:60:d9:17:7f:66:ca:b4:38:
                    c2:8a:98:b1:a2:e3:7b:fe:83:3e:d3:7b:9e:49:24:
                    1b:4f:a2:bc:6f:63:df:74:87:1c:2c:f6:6b:52:c7:
                    ea:44:c4:97:ba:d3:e3:dc:0c:7e:3f:e4:cf:66:2f:
                    bb:8a:8d:64:5d:12:2d:9b:e2:2c:b0:46:9c:d1:1e:
                    05:ab:50:a6:ae:22:f0:00:3f:99:30:8a:6a:3a:e2:
                    3c:e2:7d:f9:21:09:b3:82:f5:9e:8e:fc:98:10:7a:
                    81:b5:1c:66:6c:54:d3:6d:73:8d:16:a9:75:08:48:
                    73:4e:87:a4:14:5f:44:af:87:f0:9d:2f:8d:3e:7d:
                    ac:f6:35:a1:3e:21:e3:db:8c:06:a6:bb:20:dd:1f:
                    57:de:ac:7a:2d:44:e0:94:26:96:51:c2:c3:76:0f:
                    c3:3c:97:e5:8a:49:ba:1b:6e:bc:4c:b1:35:c2:e6:
                    20:75:2f:3c:b0:f8:a8:5e:f5:e5:0e:e1:c8:ac:17:
                    59:45:58:9c:7d:d4:5b:24:bc:29:eb:40:c4:67:60:
                    e9:6d:05:81:c1:1f:79:b9:ae:69:bd:9c:0e:ba:07:
                    91:27:ad:5b:d0:cb:b6:d9:6e:ec:46:c5:af:f6:b2:
                    4a:3b:4b:8e:e6:e5:e1:df:42:13:4a:49:22:0a:b7:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:2C:3F:A4:39:AE:7B:3A:87:46:7E:30:5B:AD:92:5C:AD:5E:CB
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:cf:f3:ce:01:46:65:24:9d:cb:c0:4a:00:40:c3:d3:6e:
         fc:aa:2b:82:c0:2d:89:2f:6b:34:31:fd:85:b3:20:9b:00:fe:
         49:8e:84:12:b6:7a:40:3c:0d:7e:e7:10:34:3d:a4:dc:46:f0:
         c3:49:9b:eb:7d:51:91:55:75:44:50:96:d7:ba:b9:99:05:f0:
         af:9a:1c:ec:99:32:2f:2b:01:8a:86:c9:6f:2f:cc:1a:95:7e:
         60:7f:c8:c0:a8:02:63:22:04:07:45:f2:eb:d5:5b:16:ed:b6:
         a2:89:d9:c5:8b:3a:1c:1e:9a:53:f0:92:d2:0b:de:95:50:6d:
         d4:39:b6:1d:f4:f0:46:5a:ed:ac:6c:94:3b:58:91:cc:cb:12:
         a6:28:3c:5a:80:50:90:5a:49:00:a8:9d:59:2e:41:30:8e:fd:
         d8:05:68:59:ab:aa:89:df:b4:94:72:0a:88:8a:b1:f8:ce:4f:
         0d:c1:77:f8:39:24:a7:d1:7a:74:86:87:d5:f4:41:c1:dd:e4:
         cb:f1:04:e8:0d:94:ff:91:6b:fe:e3:3f:cc:47:0d:56:f7:1f:
         45:5c:82:03:23:1e:c7:f3:23:e4:2f:76:55:e8:02:7d:af:73:
         d7:81:49:a1:70:84:20:4d:e7:0f:da:4a:bc:1c:24:b0:76:09:
         84:e5:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org