Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130322e3132382e302f31392d3234203d3e203137323232.roa
File:                     3138372e3130322e3132382e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          g2Hn9e67t4bdsF9G7HCHmnvWZaGksgafBYnOYXghV7s=
Subject key identifier:   F8:4C:C8:64:A0:01:63:2D:AF:4E:8A:D9:91:E9:D1:90:C9:BC:54:1A
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       0A772FC6FC79FDC28772F83F631777C20B95D149
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130322e3132382e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        187.102.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:2f:c6:fc:79:fd:c2:87:72:f8:3f:63:17:77:c2:0b:95:d1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=F84CC864A001632DAF4E8AD991E9D190C9BC541A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:09:5b:f2:b8:cb:5f:d0:86:77:9c:13:06:
                    37:40:b5:a3:8c:eb:8c:c2:13:bb:cf:67:ae:42:93:
                    d6:68:62:c8:ff:59:e9:5a:9b:44:b3:18:a9:4b:71:
                    75:a4:19:1a:68:2c:de:bb:7e:46:b8:74:2f:f1:7b:
                    d8:8b:73:68:ae:03:64:fa:07:5f:e5:9f:cd:50:e3:
                    59:38:f1:96:df:b9:f3:8a:7d:e3:67:80:10:19:51:
                    d4:96:57:9e:50:6a:6f:db:44:16:27:45:37:b8:e4:
                    e5:21:c6:04:ab:e8:ef:47:06:45:fb:88:b6:e2:0e:
                    d3:8b:48:8e:c9:79:8e:79:e5:72:e2:91:f7:2f:b9:
                    0b:cd:4b:c7:1f:6b:23:a9:88:82:12:b6:31:3f:14:
                    71:f8:cb:0e:1f:fa:a8:2d:c5:bc:2a:ca:74:02:e0:
                    14:3a:35:42:be:de:a3:d0:ff:7f:13:6d:cc:b3:6b:
                    20:3a:95:dc:bf:d5:28:57:d4:70:83:51:b8:d7:d3:
                    cf:f1:dc:b1:d2:bc:a4:52:6e:a3:56:04:4c:75:8b:
                    da:88:b6:ac:8a:fe:05:6d:fd:84:59:ed:bd:6e:d0:
                    01:72:0c:80:ed:c2:c4:e5:06:0d:d7:f5:7a:c1:51:
                    11:d5:35:02:49:8d:3a:94:c0:79:ae:f3:47:05:7f:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:C8:64:A0:01:63:2D:AF:4E:8A:D9:91:E9:D1:90:C9:BC:54:1A
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130322e3132382e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:3a:ad:bf:39:7b:13:a0:3a:4b:b7:33:3e:46:34:ed:a8:
         50:09:3b:77:eb:b7:9e:78:1d:fb:dc:51:83:3a:24:e6:55:86:
         db:48:3b:54:19:bd:ef:0e:28:51:b6:1d:6d:81:4e:f0:85:25:
         30:f8:7f:3c:86:a9:19:23:ee:53:a8:3e:30:78:5c:dd:10:d1:
         1b:2b:a9:fb:a4:f4:d8:93:da:a1:c8:d3:98:8d:59:55:59:f7:
         09:cc:e3:f4:08:4e:3f:fd:b5:59:4d:48:4c:6f:c3:61:86:15:
         cd:30:95:2d:f5:48:f3:d0:16:1e:c2:43:ca:1b:49:e7:a2:34:
         d8:37:47:5b:0d:40:c0:7e:df:dc:ab:d7:8b:7c:f1:c2:8c:a8:
         ec:5a:24:25:bc:3b:f8:04:02:7f:61:01:d8:17:6e:1e:eb:8e:
         36:c9:07:05:8a:a7:05:ac:d4:65:d7:fa:30:5a:76:48:f4:d1:
         b8:d0:05:09:5c:06:dd:3f:9d:4e:78:6c:3e:e9:ca:5a:3b:28:
         1c:88:3f:7a:a5:bb:68:24:03:e1:4a:ed:2e:77:ea:74:59:f0:
         f6:cf:da:bc:ec:97:8f:14:73:ab:ce:5a:69:1b:b3:31:f5:9a:
         f6:26:2e:f7:f3:48:f1:ff:e6:9d:2b:b5:b2:93:aa:62:1a:28:
         5b:73:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org