Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa
File:                     3138372e3130332e33322e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          P21hNZY3Vcx6dfzlQOS4oRLEgHEOYmatxWQH7KIr5s8=
Subject key identifier:   6D:46:09:D5:05:2D:21:4B:E6:9C:20:B9:9C:11:BF:D4:45:E9:1F:9C
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       5AFB7DF512FC1B1F399767A06769EEBAD54072BA
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        187.103.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:7d:f5:12:fc:1b:1f:39:97:67:a0:67:69:ee:ba:d5:40:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=6D4609D5052D214BE69C20B99C11BFD445E91F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:3d:46:ff:dc:41:d6:34:e7:75:dc:94:38:
                    7c:e3:31:1a:1b:4c:28:e4:4e:f2:a1:37:f1:e7:b6:
                    f4:91:1a:24:57:a5:97:e6:8f:22:22:f1:f5:2a:1c:
                    c7:13:15:b8:6e:23:3f:0b:30:b8:65:a0:d3:34:66:
                    c3:66:4a:70:2b:f3:d1:95:4f:05:a4:91:8c:57:fc:
                    a0:ea:6c:c5:c1:64:9f:3f:b4:f3:70:14:65:5d:b6:
                    b1:77:b1:0a:6b:4a:c3:ec:84:e0:e5:f8:93:3a:c6:
                    9d:81:d1:be:84:1d:2f:e9:10:aa:f0:e0:56:67:2f:
                    63:be:a0:20:4f:ba:4e:d7:a6:fb:5e:32:93:a3:b2:
                    7f:86:79:73:55:bb:e5:f2:e5:6d:8e:e9:93:43:18:
                    f4:dd:8e:1e:2c:52:e4:f6:3b:6c:4c:33:4f:0d:b4:
                    32:63:f1:be:ff:20:be:a1:92:b5:9f:e7:cd:d5:f6:
                    f2:4e:7c:9c:ae:b7:72:21:5f:5c:5e:24:57:00:52:
                    31:6e:35:a8:d8:82:7b:e8:37:41:76:1d:2a:5d:57:
                    f8:26:57:e4:80:06:25:aa:77:5e:35:d9:a3:8f:dd:
                    fc:ac:3e:18:ab:73:1a:b1:79:c2:57:c3:dd:cf:09:
                    50:7c:4c:9a:9a:9a:a2:cf:1a:7e:ff:77:df:69:4e:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:09:D5:05:2D:21:4B:E6:9C:20:B9:9C:11:BF:D4:45:E9:1F:9C
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e3130332e33322e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:00:97:7a:8c:dd:cf:53:af:57:f6:0b:3a:9c:29:26:e5:
         48:c4:6f:a4:d3:ac:59:62:ad:00:f3:3d:4c:5f:d6:45:ec:a6:
         db:42:05:8a:d8:db:f4:06:1f:03:6f:88:0a:aa:17:21:0d:51:
         5c:a1:f1:4d:3d:d3:04:88:0a:cb:80:59:1d:a2:f7:6e:a5:43:
         33:3e:be:23:26:4d:90:38:b7:8a:19:15:1f:29:9a:df:87:d5:
         46:c6:c9:91:34:a3:83:13:4b:6e:c9:bf:d6:8f:0b:26:83:b2:
         cf:07:72:d4:cc:21:2d:2f:a8:7a:5c:66:a7:ee:59:a7:27:19:
         ae:d3:66:0d:e3:a5:64:d9:6b:80:fb:90:5a:3d:7f:2d:7a:da:
         f6:8c:de:f7:23:d7:2f:3a:fc:ed:20:95:b9:58:04:1f:b3:46:
         a7:b0:92:6e:21:65:e2:f3:ff:23:95:e3:92:a2:b7:96:b7:b2:
         47:20:db:52:08:c6:67:8c:b5:69:71:30:5d:7a:b4:bb:3a:40:
         b5:6c:ce:b0:22:1c:5f:4d:d5:40:2b:4c:28:02:4a:7a:c4:6d:
         19:09:f4:76:de:e0:3e:5c:2d:2b:f8:41:b0:be:56:14:7b:be:
         1f:83:87:af:b9:13:6e:b3:6d:9e:e1:ce:7f:d9:8a:7f:a6:8a:
         57:f6:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org