Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
File:                     3137372e39322e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          22IED8d25N4i51zDyW/kxeSe7pEZOvREarZH2NJsAwI=
Subject key identifier:   BA:58:C0:8C:7E:6C:E8:75:ED:73:6D:EC:AB:1D:B8:FF:23:67:55:1A
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       2690CE62991F89612B40B93FF5759D5620654FD6
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        177.92.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:ce:62:99:1f:89:61:2b:40:b9:3f:f5:75:9d:56:20:65:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=BA58C08C7E6CE875ED736DECAB1DB8FF2367551A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:3c:67:8b:e2:de:54:6a:85:02:66:c1:5e:
                    ae:62:5f:9b:dc:e6:4b:d1:a4:33:c1:3f:a2:03:60:
                    64:17:91:4b:e3:36:2d:64:2a:bf:ec:fa:aa:0f:11:
                    bb:fd:73:94:4b:0e:ab:fb:c0:be:df:d9:72:ad:8d:
                    e1:9d:39:b3:31:25:bd:69:54:50:5f:c7:d5:36:12:
                    ab:fc:0f:6b:1c:b8:16:d6:29:a9:ae:fa:d1:48:a8:
                    fd:6c:66:e8:c1:7c:52:76:20:2b:b3:8d:4f:53:ee:
                    e8:9d:16:b6:e7:ea:66:9c:c2:18:4b:43:f6:c5:34:
                    5e:38:be:e4:5b:9c:78:fc:28:a7:48:58:06:a5:c4:
                    8d:56:91:9c:6a:04:54:a6:ab:7d:1d:70:7a:c6:17:
                    36:de:9b:88:30:78:11:28:7c:a2:e2:8f:89:f7:7f:
                    d8:83:37:65:8c:48:96:df:9e:a3:c1:06:68:7a:d4:
                    21:40:cf:0c:cb:60:fa:75:35:94:e1:f2:54:7e:06:
                    ec:d0:32:18:54:91:3d:11:cf:7a:c2:fe:23:e6:ac:
                    fd:40:b5:2e:b6:21:e5:e1:85:9a:75:f5:02:6c:ae:
                    ce:ee:c3:6e:9d:3c:50:72:e0:76:0c:6f:73:7c:71:
                    6d:0c:e2:19:f1:6e:fb:0f:39:fa:9a:06:7a:48:c3:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:C0:8C:7E:6C:E8:75:ED:73:6D:EC:AB:1D:B8:FF:23:67:55:1A
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:42:27:38:5d:91:ee:02:54:3c:6a:36:76:c3:f3:b2:75:
         eb:42:4b:82:65:50:4b:70:d8:71:d1:8c:fd:0d:3d:a2:df:d1:
         9a:92:23:72:60:89:46:51:d4:4e:c0:53:f7:1e:9c:7d:f4:97:
         4a:30:a5:fc:88:6e:d5:20:3f:f9:a5:fe:62:58:58:42:61:e5:
         a7:8f:56:fa:a5:a8:08:84:05:78:c4:86:da:10:38:f3:07:e5:
         52:3e:1e:1f:90:92:7a:6f:db:61:19:99:4f:18:49:84:56:bd:
         96:6c:2d:a7:6b:d2:ab:59:45:61:29:3b:9c:9d:c3:1d:ad:22:
         0a:da:72:88:f4:3d:7d:b3:d3:a6:b3:67:78:6a:1a:c8:a3:12:
         6e:92:bf:1c:3d:62:0f:7d:02:dc:bb:3d:82:0d:3e:73:a5:8b:
         9b:28:a3:8e:c0:e2:a1:ec:9d:d9:d5:2a:07:16:bf:65:df:21:
         a7:ca:ae:28:ad:ea:a4:81:7f:76:cb:0e:f5:c6:2f:35:a3:72:
         7f:3a:ec:32:f0:21:8d:4d:12:bb:5c:c5:df:f1:b5:cd:88:4a:
         47:21:90:77:02:9c:01:3a:f4:ad:a5:89:74:b0:26:fb:be:e6:
         1c:b3:3d:35:b2:e0:2e:4e:f2:84:1d:65:a8:34:19:16:ab:5e:
         de:e8:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org