Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
File:                     3138372e31362e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          wv25BNVFpERr+SYEmleFRDA7bibdpIPCq7DwYl9LhdE=
Subject key identifier:   13:74:1D:6A:1E:0F:A2:AD:67:B3:AE:64:07:0D:5A:EF:5C:E5:A7:D2
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       3BAD4D4C1767C27C008FD70D590FD10E411A41C3
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:23 +0000
ROA not before:           Thu 06 Mar 2025 15:29:23 +0000
ROA not after:            Thu 05 Mar 2026 15:34:23 +0000
asID:                     17222
IP address blocks:        187.16.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ad:4d:4c:17:67:c2:7c:00:8f:d7:0d:59:0f:d1:0e:41:1a:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:23 2025 GMT
            Not After : Mar  5 15:34:23 2026 GMT
        Subject: CN=13741D6A1E0FA2AD67B3AE64070D5AEF5CE5A7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:fe:2d:22:45:c3:b7:74:09:d1:0d:97:d9:
                    88:97:50:45:ff:9a:cd:d1:dd:32:ca:f8:d9:ec:60:
                    d1:fe:a1:42:90:91:85:d8:dd:d4:11:49:83:36:e5:
                    08:b2:c9:d7:d7:25:6e:39:0c:ff:20:35:ae:f7:ad:
                    b6:73:6d:cb:bc:63:1b:1f:9b:a5:2f:c7:60:48:cf:
                    74:cf:c4:f8:d5:9a:4d:dc:ee:cf:27:3a:f3:0a:79:
                    a0:b1:86:47:51:f0:e0:a9:af:49:43:be:60:c7:ea:
                    97:29:fb:7f:4e:dd:4e:80:e0:17:69:df:83:64:2e:
                    fc:cc:df:ef:bb:fd:b4:53:2a:ee:9c:2f:bd:87:09:
                    f0:22:74:d6:e8:02:02:f5:2e:7a:13:3c:16:b9:72:
                    36:a3:71:94:c1:b8:68:d3:6c:29:21:5f:5a:24:6a:
                    e5:c9:3d:31:12:bf:2d:a7:64:20:df:e2:72:04:f4:
                    03:14:d3:9e:1c:df:02:6b:7b:d1:3f:ff:b7:3b:7c:
                    1a:4c:88:42:3a:cc:cc:c4:3e:80:ef:48:3a:02:9c:
                    6f:b6:af:60:9a:b1:ac:55:58:f1:6c:be:f2:5c:06:
                    fe:0f:b9:35:fd:b6:aa:8f:af:da:ec:f5:d3:68:69:
                    22:f6:c9:d9:e7:0c:97:35:7b:74:e9:b4:47:3c:a4:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:74:1D:6A:1E:0F:A2:AD:67:B3:AE:64:07:0D:5A:EF:5C:E5:A7:D2
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:9b:dc:35:79:71:d2:69:0a:93:b3:49:fa:f8:51:26:fb:
         1b:43:4e:c6:0a:c6:09:2a:a3:90:f3:de:33:d9:cc:54:95:9c:
         c2:02:55:a7:b3:e9:7c:72:58:2f:61:5e:16:fc:d4:cf:29:6e:
         f5:e7:7e:15:62:ac:76:f8:2b:29:cc:20:1b:97:63:75:c2:9c:
         d0:dc:37:4e:bc:34:6f:14:74:da:ce:ca:dd:8f:e5:7c:2e:5a:
         06:9d:b7:8a:1f:cb:07:15:83:a4:c9:d6:88:db:48:f1:de:21:
         f4:51:7e:bc:a7:ba:ea:33:b1:db:b8:5a:31:1d:4d:9c:3c:be:
         b8:81:35:3b:03:c3:ae:a1:3d:9f:76:e9:d5:6e:cd:9b:c4:a2:
         9f:2e:ca:a0:8a:f4:96:21:01:90:5c:67:23:78:2a:78:71:e6:
         14:ff:5b:49:44:3b:f8:f0:c1:33:40:d5:f4:fc:37:19:7a:e0:
         25:0b:f7:f6:0f:71:13:d9:8f:09:46:91:48:d8:70:6d:7d:42:
         4e:e3:a5:5e:0a:be:f1:df:b0:49:e8:86:d4:18:2a:6f:4d:49:
         89:7d:a0:be:21:bf:42:c9:fb:1a:a7:7c:55:e1:2d:f5:db:81:
         5c:f4:9d:c2:dd:a2:42:0b:0e:82:57:b5:21:88:a6:06:ff:97:
         cc:77:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:57 2025 by rpki-client