Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e36342e302f31392d3234203d3e203137323232.roa
File:                     3137372e39322e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          1/w7D0QFugLQ045WolPWEdETNDrcjzlAVBSZVK6VyzE=
Subject key identifier:   12:05:4F:0B:6D:8D:D5:B0:61:4B:4C:A0:90:DF:04:4F:8A:37:4D:05
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       35B4E1E847A56C56689C3453DF6B8663AF30C3ED
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        177.92.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b4:e1:e8:47:a5:6c:56:68:9c:34:53:df:6b:86:63:af:30:c3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=12054F0B6D8DD5B0614B4CA090DF044F8A374D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:f0:43:cc:3d:65:29:90:d2:4c:91:a0:b9:
                    01:69:e1:80:dd:a6:42:28:e4:26:1a:31:59:21:c1:
                    c0:6b:ea:8c:4f:bf:d0:45:7f:72:4e:75:10:52:41:
                    53:47:ba:c5:cb:84:24:a5:ff:12:16:c0:62:af:2f:
                    50:72:05:f6:43:69:34:64:46:a4:4c:bb:3a:c7:7a:
                    dd:a0:c7:84:62:96:d0:cc:8c:76:09:23:ab:f1:d4:
                    9f:08:e8:a6:c7:65:bc:6e:e1:92:ef:88:c3:55:38:
                    34:60:4b:b4:d2:26:7e:22:39:2a:63:1c:f2:63:d0:
                    c4:81:ac:10:12:91:47:33:94:ce:4a:b3:09:a5:97:
                    ae:e7:ea:07:65:87:fb:49:22:c2:1c:9f:88:f4:1a:
                    d5:ae:53:6a:54:e7:3b:9e:f1:d9:45:dd:2a:4b:4b:
                    0e:e6:60:ff:e0:af:bb:86:ac:82:71:11:cb:0a:fb:
                    11:22:b6:76:25:91:97:36:13:c6:04:19:eb:ec:4a:
                    d2:8c:3a:b3:ca:89:ae:e2:ef:76:b3:65:fb:91:7c:
                    ee:3b:6f:e7:42:65:c5:59:24:44:19:35:c6:e5:10:
                    04:0a:c3:2f:e4:e4:85:17:a8:93:0b:ab:44:13:4c:
                    fd:a7:58:af:7d:14:08:ba:c2:86:c0:32:ca:2c:eb:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:4F:0B:6D:8D:D5:B0:61:4B:4C:A0:90:DF:04:4F:8A:37:4D:05
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:ca:f1:19:82:f5:79:2a:73:a0:11:62:11:6e:34:dc:b4:
         13:11:54:cd:fd:63:c7:19:ed:a5:d3:df:dd:0a:1e:f4:c3:bd:
         14:73:67:0b:08:55:df:4a:38:92:05:ce:fe:da:74:19:a1:b1:
         ae:ae:42:99:cc:b2:d4:eb:56:3a:ef:8c:31:14:15:f3:c3:70:
         fa:c5:a2:a6:8b:3f:12:65:2f:b0:dd:e7:3e:1e:03:d2:67:8e:
         1e:f7:b7:02:31:59:4f:8b:59:c2:b1:ee:91:20:67:21:07:eb:
         a2:e2:04:2c:2e:24:8e:f4:c3:4d:58:8f:38:84:e8:4b:44:f9:
         23:bd:14:88:31:61:fb:66:24:b3:d6:85:ef:b0:32:18:ad:ac:
         af:bc:c0:aa:6a:4d:81:db:e1:7f:45:bb:1b:32:7a:08:f9:56:
         b5:3c:68:91:73:70:47:13:cb:66:b2:9c:08:b8:0a:42:56:78:
         62:f5:18:77:eb:72:c7:79:24:b3:4c:51:85:a6:12:ea:b3:f2:
         94:6d:02:1d:c0:79:84:01:22:70:c3:61:13:d9:e2:c9:20:3a:
         43:b0:b2:09:a5:78:09:03:b3:71:90:33:55:d1:a6:66:17:65:
         d4:27:db:64:dd:f7:fb:2a:f7:4a:df:45:5a:35:a8:95:01:7a:
         47:e7:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:38 2025 by rpki-client