Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
File:                     3137392e3139312e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          22QjQYDk9f4pePPM6TgmNBxnsgU3beeqe64xw6IBNBU=
Subject key identifier:   BC:4D:06:A1:FE:35:6F:B0:1A:4E:D6:DC:F4:4C:43:53:A6:A2:DF:7C
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       6F90BBC3A1C20714D609D04D9E0C98D6A7140507
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:23 +0000
ROA not before:           Thu 06 Mar 2025 15:29:23 +0000
ROA not after:            Thu 05 Mar 2026 15:34:23 +0000
asID:                     17222
IP address blocks:        179.191.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:90:bb:c3:a1:c2:07:14:d6:09:d0:4d:9e:0c:98:d6:a7:14:05:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:23 2025 GMT
            Not After : Mar  5 15:34:23 2026 GMT
        Subject: CN=BC4D06A1FE356FB01A4ED6DCF44C4353A6A2DF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:d2:28:62:85:4d:5e:94:ca:ed:6f:27:5e:
                    63:7c:b0:84:ad:5c:1c:aa:e3:bd:eb:90:b2:3b:90:
                    01:05:b9:b4:fd:c9:c5:96:51:85:1f:b3:b0:05:9b:
                    50:9b:7d:17:6b:72:20:22:ff:5e:5e:b9:bf:d7:e4:
                    70:55:c8:7f:ed:c2:19:e0:19:54:80:60:32:5b:15:
                    d5:39:ee:15:02:f7:ef:bf:12:46:78:60:b2:fc:f3:
                    af:93:51:f7:b9:cc:4a:3d:22:de:72:07:ad:1e:71:
                    35:da:91:6c:52:b8:b5:ed:a8:03:d1:0a:d6:ad:46:
                    7a:24:c6:b7:aa:bf:92:5b:c0:37:4c:5d:e2:ec:df:
                    0b:a5:a1:ec:2c:54:b2:8e:73:c0:a6:50:f4:50:f0:
                    07:4c:07:b9:24:10:72:0d:5e:5e:0f:76:8f:cb:b9:
                    2a:23:61:56:71:73:3c:8a:35:ca:52:ea:16:0b:3a:
                    85:97:37:a1:2a:f4:3d:8d:71:f4:92:87:e7:b8:5a:
                    8e:ac:61:61:dd:25:c5:11:76:37:7a:00:70:26:c8:
                    6b:16:9b:01:78:fa:56:0f:b0:21:1a:f2:16:89:e8:
                    d5:a5:3a:71:1d:fc:12:c2:f5:c0:6e:0e:17:e0:a9:
                    8f:f5:d5:b8:8f:cc:d1:08:de:90:f1:f4:d7:3b:6d:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:06:A1:FE:35:6F:B0:1A:4E:D6:DC:F4:4C:43:53:A6:A2:DF:7C
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:e1:50:9b:8a:db:56:c2:aa:39:0c:0a:7b:20:0c:38:cd:
         5b:b7:90:2c:96:0c:28:de:d0:96:3f:3f:d2:10:a5:7b:05:ec:
         86:d1:3e:01:eb:42:2a:ff:27:ab:ad:3d:91:78:62:ec:bf:e4:
         d4:3b:2f:77:19:19:f4:dc:55:3d:6c:19:81:4a:5c:30:76:a4:
         05:b2:75:04:51:25:88:c0:be:b0:45:b2:55:92:c4:94:d8:4a:
         67:a4:22:a0:13:40:60:f2:61:96:e9:4f:6d:eb:69:50:89:60:
         05:76:ec:88:27:5d:e2:c4:38:32:bc:6e:ed:41:6d:5b:d4:8f:
         24:ea:61:75:63:f8:97:1f:ff:70:70:89:6a:43:3c:fc:a1:f2:
         bc:14:5a:03:46:20:db:42:cb:3b:80:ef:52:0f:2e:6d:74:e3:
         03:27:bf:6d:c0:c1:e4:72:67:1f:86:36:af:df:93:25:9f:ae:
         72:fa:d8:f8:86:41:6a:1f:09:d5:14:c5:6c:0f:34:d0:f6:ab:
         a9:66:bf:0b:b2:bc:2b:2c:22:da:7b:2a:51:45:6a:e7:c0:23:
         00:80:9e:13:44:db:a5:d8:71:bf:66:82:eb:e5:aa:f0:a7:dd:
         a3:04:0b:fc:a5:24:27:91:a0:77:f7:ae:68:5b:d2:91:8a:5f:
         16:20:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:05:08 2025 by rpki-client