Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
File:                     3138372e31362e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          bAqE3+LTarrWs529HzE7Be8edQbCPXVKgAjppGm755g=
Subject key identifier:   44:BB:7C:30:23:8D:B8:70:B1:C3:A0:A8:EC:E5:41:28:13:B0:75:6A
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       202B0B1733C85BFE32DA24E383718790CD400E38
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        187.16.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2b:0b:17:33:c8:5b:fe:32:da:24:e3:83:71:87:90:cd:40:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=44BB7C30238DB870B1C3A0A8ECE5412813B0756A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:58:63:20:50:47:d6:1e:7c:27:2d:84:24:
                    5f:c8:83:8d:cf:0e:eb:55:7b:d0:42:69:18:20:78:
                    00:2c:31:d8:3e:06:74:79:59:ea:65:ce:9a:3d:5f:
                    69:bc:2e:0e:c6:6e:03:e6:14:49:3a:70:d0:9a:3c:
                    86:2a:1d:a3:23:1a:99:d4:3e:bf:8f:09:5a:b1:04:
                    9b:0c:cb:ba:26:3b:81:62:0c:8b:af:20:28:31:1e:
                    99:c9:36:ae:a5:41:8f:f4:62:7e:3b:5f:c7:30:4d:
                    fe:4b:75:de:3b:92:e4:da:4f:03:f6:03:af:f1:3a:
                    1b:1c:0d:28:73:bc:b6:91:06:7d:24:a0:9a:8a:b0:
                    23:a1:2e:c1:63:74:e1:6d:ab:1a:4e:b6:23:b8:68:
                    ee:af:f6:e7:83:25:83:56:ad:08:0d:c3:a0:be:fc:
                    4e:30:ad:66:38:0b:0f:52:a3:7a:dd:d2:e9:98:27:
                    e4:98:57:28:8e:d6:2a:af:b3:11:2c:2e:4e:8e:15:
                    28:f2:3f:b5:f3:3f:40:ca:5a:a6:ae:00:b6:0c:3e:
                    90:c2:34:1d:9d:f1:64:d0:19:2b:9e:b4:ed:2a:90:
                    1e:e8:f6:bd:e1:7a:56:77:97:33:25:85:ae:2e:d7:
                    72:73:78:83:62:e0:51:22:a0:7f:53:bf:6b:18:3e:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:7C:30:23:8D:B8:70:B1:C3:A0:A8:EC:E5:41:28:13:B0:75:6A
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:fa:04:96:c1:b8:a5:d7:12:c2:c2:91:4a:3b:ef:24:70:
         01:d6:c7:72:ce:ad:08:50:1a:61:5c:bc:51:9f:b4:00:ae:b0:
         dc:e4:d6:d7:2d:e3:0d:c2:05:34:de:19:bc:13:33:c3:75:3d:
         83:58:44:92:3a:b5:18:b5:ec:9b:f8:fa:26:3e:87:54:5f:83:
         15:fd:f6:e7:49:4f:0a:a9:32:2c:a9:1c:88:88:7f:a9:63:0f:
         3a:b7:e2:8d:c2:10:ed:c0:de:36:7a:b9:e3:a8:b5:32:78:75:
         96:68:4e:90:9d:26:97:d8:50:cb:c6:ed:4b:32:92:76:53:3c:
         1e:76:ac:e9:c9:c8:d2:6f:93:8a:83:d2:8c:13:d8:43:f1:06:
         4d:3f:8b:5a:01:b8:54:32:bf:da:b6:56:d0:d4:c3:71:1a:ca:
         83:75:6c:e5:3b:d4:00:3a:f3:af:f5:0c:bc:18:43:04:2d:26:
         f4:cd:06:02:9a:41:46:0a:59:bc:60:6d:a3:63:e5:05:d1:5f:
         8a:4c:29:13:05:9b:1e:de:dd:28:a4:db:86:b6:41:2a:cf:eb:
         37:55:f7:b8:76:f7:7d:2b:d8:4f:40:a3:eb:5a:b0:c5:87:8e:
         2f:dc:4f:cf:46:e8:87:67:94:64:e1:64:d3:fa:e0:32:40:02:
         b0:25:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:39 2024 by rpki-client on console-ams.rpki-client.org