Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
File:                     3137372e39322e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          WQlot066jTML9v34grOZ2I8WEKEk1T9FOiUk2fejwTI=
Subject key identifier:   BF:C5:A5:E7:7D:19:4D:23:60:3B:79:D7:E2:9B:C2:C7:2E:AF:FC:81
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       5B654C8F9B57D1E80DF6661AEBC8EE7709B50D3F
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        177.92.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:65:4c:8f:9b:57:d1:e8:0d:f6:66:1a:eb:c8:ee:77:09:b5:0d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=BFC5A5E77D194D23603B79D7E29BC2C72EAFFC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:74:ea:21:2e:54:65:27:62:52:82:7f:65:
                    34:05:93:33:e8:d4:8f:e8:ad:d8:a6:56:0b:5c:8e:
                    29:76:3f:30:65:e6:0b:c5:4c:34:68:87:48:32:eb:
                    6d:ad:88:57:b9:b0:19:f6:15:20:db:76:d5:2e:00:
                    20:07:ea:50:a1:32:3c:3b:e9:5b:37:43:2c:f1:9a:
                    14:93:cf:90:66:36:58:b5:ff:c7:54:e6:17:a9:ec:
                    fd:90:e1:6e:d3:16:00:c3:a5:ba:4d:1a:bb:1b:97:
                    21:a3:b5:74:a2:36:8b:72:94:91:d4:b6:cb:29:71:
                    84:26:92:ea:1d:6b:d5:5f:44:b9:cf:db:3e:8f:19:
                    e8:0e:14:35:d8:b1:cf:93:f7:d8:30:3b:7c:08:85:
                    c5:97:c3:72:64:e5:ed:12:ef:23:a4:21:16:3d:ea:
                    ad:63:2e:8a:d4:42:63:62:d6:cd:10:bc:6d:36:76:
                    61:dc:a4:ac:71:b2:94:b0:d6:db:3a:3b:44:4d:0c:
                    a0:a6:66:60:4c:69:7d:b4:40:96:64:66:5b:5f:9a:
                    ba:9a:15:f9:ff:ea:ea:65:b3:79:e8:38:5a:34:4d:
                    4e:6c:d8:5f:f8:2c:02:36:3e:04:2d:a7:cb:bd:33:
                    3c:6b:3c:de:b4:8e:f6:3c:1e:e2:71:48:31:c6:24:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:A5:E7:7D:19:4D:23:60:3B:79:D7:E2:9B:C2:C7:2E:AF:FC:81
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e39322e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:0d:08:95:69:55:a4:b5:e8:61:22:42:f9:ac:d6:ba:13:
         2e:33:8f:13:10:22:1c:60:17:28:1d:ad:65:00:3d:15:86:a2:
         31:d6:b8:48:1d:88:8d:65:78:d0:98:c2:eb:04:a5:46:65:5b:
         10:b9:07:b8:0c:4e:32:a7:1b:40:4d:1b:32:40:c4:88:07:ef:
         9f:82:81:00:38:5c:5b:12:0e:77:50:96:9c:c5:5f:63:52:e8:
         1d:d6:4b:9a:26:c7:55:d5:da:5c:58:fe:8a:26:30:9c:ff:81:
         8c:ec:1d:1c:b4:88:94:72:b7:dc:24:22:41:a1:38:be:52:1a:
         c7:c3:8b:2e:13:d7:27:8e:59:4e:da:e8:bc:a9:c3:05:db:ca:
         ac:70:64:c6:f0:bb:70:31:4a:12:70:a1:41:fe:db:71:4a:50:
         cb:dc:96:6b:55:d9:77:c6:71:bd:27:06:b3:e3:83:17:3f:f9:
         81:c9:da:d3:59:14:39:f9:ad:25:54:f1:77:6b:69:fe:d7:ba:
         4f:44:22:d8:82:42:b6:ea:68:62:72:22:9b:1c:96:34:e3:13:
         8c:a5:be:d0:f6:ad:9e:74:8e:b2:2a:be:2b:46:58:1d:6a:8a:
         96:53:16:5d:8a:90:f8:2e:77:1d:89:4b:12:14:49:21:2a:79:
         c8:9f:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:19:46 2025 by rpki-client