Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
File:                     3137392e3139312e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          edadpQQ8jRrY70sdF1vxfVZKOJ6YhWoX8wncR8mbT3U=
Subject key identifier:   E2:7B:6B:F9:0F:8F:C1:31:63:9C:39:6B:5B:C7:C3:68:B7:28:58:E1
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       58C1FFA6CD2D3985E98B2F2E4A8538BA54C790BC
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        179.191.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:ff:a6:cd:2d:39:85:e9:8b:2f:2e:4a:85:38:ba:54:c7:90:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=E27B6BF90F8FC131639C396B5BC7C368B72858E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:57:1d:d0:ec:50:54:80:6c:e8:7a:1e:a5:
                    9c:da:56:27:55:9b:0a:6e:30:e2:b6:a5:29:78:1c:
                    50:19:b8:32:40:b3:1c:ba:bd:d1:80:f4:d2:fa:2e:
                    a7:3b:61:64:8e:8a:ae:a1:0c:3f:c7:00:44:c0:7f:
                    5d:14:93:81:cc:f9:2c:5a:02:77:0b:a2:28:18:46:
                    c2:7c:82:90:2c:f6:7a:a1:65:b1:f1:ff:f1:89:d8:
                    a4:1e:78:60:97:2b:c3:0b:b7:d4:7c:d8:6a:3c:7d:
                    cd:e5:b2:0f:0a:3c:c3:c7:07:d4:2f:a1:e8:ed:7f:
                    3b:64:38:0e:d5:36:9f:93:5e:90:6f:96:bc:97:68:
                    ee:23:c4:09:bd:33:33:3b:f8:49:a2:40:98:04:86:
                    91:bb:db:83:c5:1f:7d:de:18:16:a3:2e:e2:b6:a2:
                    44:61:43:65:39:fd:7a:90:9b:dc:91:22:dc:d6:32:
                    eb:16:22:c0:b5:c0:42:49:53:74:f1:2f:e5:bb:d8:
                    5b:f2:e7:1a:d3:0a:d4:14:ef:f6:a5:30:49:b9:f5:
                    25:4b:b0:69:60:a4:41:93:92:aa:1f:4d:4d:5b:df:
                    37:10:b6:0a:83:4b:0f:eb:7c:17:ee:ab:3d:f8:a8:
                    b9:82:46:f3:ea:dd:71:a2:a3:73:cd:e2:0e:44:10:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7B:6B:F9:0F:8F:C1:31:63:9C:39:6B:5B:C7:C3:68:B7:28:58:E1
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:10:74:dd:ce:c9:5c:43:ac:72:de:34:6f:78:a7:f2:08:
         1a:e3:70:a6:25:13:6f:bc:d8:4f:ab:d7:9b:c5:35:73:a6:33:
         c3:f9:4e:c3:73:5c:35:75:5d:8f:9a:46:30:d0:d4:5b:1a:bc:
         2d:78:09:7f:fe:3c:c1:8b:9d:2f:30:7a:d8:4e:f6:5e:35:e6:
         a6:ea:48:01:33:37:d7:5d:4f:d2:7e:ce:ea:a8:bb:60:8a:1b:
         aa:fd:6b:71:b1:12:02:99:87:d1:7c:d0:b7:9a:2c:24:d5:73:
         89:ac:e6:f5:55:47:a7:90:69:43:e8:f5:6e:8a:05:3b:c4:e7:
         d1:91:35:f6:2e:b2:aa:12:81:72:85:06:34:6c:83:3e:9d:43:
         3e:97:3a:5f:6d:d5:00:cd:67:64:54:67:b8:7d:e2:a1:f3:9b:
         08:66:4a:a4:52:d7:d2:9d:32:ac:47:9c:7c:d1:5a:71:89:83:
         d5:b4:4a:3f:34:5b:84:a1:bf:70:a5:27:3d:ed:5c:e1:75:19:
         4d:ed:63:f5:ce:68:f4:71:f8:f6:6f:5e:2a:da:ce:fc:33:e5:
         79:b6:2b:ec:cc:46:6f:0a:3f:26:4b:83:3d:12:71:48:7e:49:
         13:46:6f:19:54:81:2e:be:ca:a0:d5:b8:24:ac:53:e1:8b:d4:
         05:aa:66:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWMH/ps0tOYXpiy8uSoU4ulTHkLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1OUNENzkwN0QwOEU1NjEwMzcxMzlFMTQ4RDgzODVE
RkQ5MTZFMjAeFw0yNDA0MDQxNTA0MjVaFw0yNTA0MDMxNTA5MjVaMDMxMTAvBgNV
BAMTKEUyN0I2QkY5MEY4RkMxMzE2MzlDMzk2QjVCQzdDMzY4QjcyODU4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVlcd0OxQVIBs6HoepZzaVidV
mwpuMOK2pSl4HFAZuDJAsxy6vdGA9NL6Lqc7YWSOiq6hDD/HAETAf10Uk4HM+Sxa
AncLoigYRsJ8gpAs9nqhZbHx//GJ2KQeeGCXK8MLt9R82Go8fc3lsg8KPMPHB9Qv
oejtfztkOA7VNp+TXpBvlryXaO4jxAm9MzM7+EmiQJgEhpG724PFH33eGBajLuK2
okRhQ2U5/XqQm9yRItzWMusWIsC1wEJJU3TxL+W72Fvy5xrTCtQU7/alMEm59SVL
sGlgpEGTkqofTU1b3zcQtgqDSw/rfBfuqz34qLmCRvPq3XGio3PN4g5EEJshAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4ntr+Q+PwTFjnDlrW8fDaLcoWOEwHwYDVR0j
BBgwFoAUElnNeQfQjlYQNxOeFI2Dhd/ZFuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMS8xMjU5Q0Q3OTA3RDA4RTU2MTAzNzEzOUUxNDhEODM4NURGRDkxNkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNTlDRDc5MDdEMDhFNTYx
MDM3MTM5RTE0OEQ4Mzg1REZEOTE2RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzEv
MzEzNzM5MmUzMTM5MzEyZTM2MzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFs79AMA0GCSqGSIb3DQEBCwUAA4IBAQCgShB03c7J
XEOsct40b3in8gga43CmJRNvvNhPq9ebxTVzpjPD+U7Dc1w1dV2PmkYw0NRbGrwt
eAl//jzBi50vMHrYTvZeNeam6kgBMzfXXU/Sfs7qqLtgihuq/WtxsRICmYfRfNC3
miwk1XOJrOb1VUenkGlD6PVuigU7xOfRkTX2LrKqEoFyhQY0bIM+nUM+lzpfbdUA
zWdkVGe4feKh85sIZkqkUtfSnTKsR5x80VpxiYPVtEo/NFuEob9wpSc97VzhdRlN
7WP1zmj0cfj2b14q2s78M+V5tivszEZvCj8mS4M9EnFIfkkTRm8ZVIEuvsqg1bgk
rFPhi9QFqmZh
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org