Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e39312e36342e302f31392d3234203d3e203137323232.roa
File:                     3138392e39312e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          pAIDp2rUidvrZkxzmebanh+xFzzFPJykOvm/NHyxwJg=
Subject key identifier:   1C:DF:51:54:10:F7:63:7F:1B:96:21:02:A4:EF:3E:8F:E8:3E:05:BF
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       1298EE49775AD2D30A89AF61E51D3F4E77184BDB
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e39312e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        189.91.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:ee:49:77:5a:d2:d3:0a:89:af:61:e5:1d:3f:4e:77:18:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=1CDF515410F7637F1B962102A4EF3E8FE83E05BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:af:a5:8e:fe:2b:6e:b7:b8:a2:1e:e7:e4:
                    f8:34:14:dc:02:d9:9d:2b:c1:01:46:fa:4f:c4:ee:
                    83:71:fb:9d:8c:c2:53:15:5b:4d:11:a9:d3:bf:22:
                    6f:e6:6d:ca:b4:a8:2c:39:5a:df:4a:c5:d4:34:d0:
                    02:62:0d:94:41:9b:cc:c3:a4:14:cb:2e:2a:9c:11:
                    27:4b:85:d4:47:9a:79:20:ab:9b:7a:44:0e:bb:40:
                    16:ce:e9:f4:c7:35:61:cd:b7:ff:4d:77:69:39:58:
                    4a:e2:1e:2f:a5:12:b1:61:32:1c:fc:63:70:df:f7:
                    70:4d:6d:d8:fd:cd:21:02:13:ec:af:7a:05:4f:71:
                    2c:6d:64:33:e0:0a:95:a3:ba:38:a3:2f:9e:12:e1:
                    80:6a:e9:74:4b:be:88:27:6b:b5:cd:e5:5d:67:e6:
                    25:4e:43:bf:be:81:f1:31:42:2a:f2:e4:a5:59:53:
                    43:c1:e3:3e:93:f2:7c:80:7e:8e:35:4f:d2:e3:33:
                    3a:fa:89:d4:87:69:90:69:2d:f3:dd:31:b0:c5:83:
                    dd:a9:22:17:99:8d:58:86:ad:8e:0f:be:e2:3e:c9:
                    8a:03:d9:62:d5:ca:3e:36:52:65:cc:e2:7f:7d:a8:
                    47:a5:30:31:c5:7a:37:32:cd:22:82:0d:04:5f:b1:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DF:51:54:10:F7:63:7F:1B:96:21:02:A4:EF:3E:8F:E8:3E:05:BF
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e39312e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:db:7e:2f:dc:0f:69:ac:67:24:31:64:72:db:c5:22:a9:66:
         67:d9:06:76:f3:8f:c2:9f:0b:27:15:d4:64:2d:7a:a2:fd:4f:
         50:17:fb:06:61:0f:77:72:15:3c:5e:c9:f4:52:a3:57:6c:c4:
         d1:7c:fa:4d:a1:f5:67:44:6a:49:a5:ad:44:a8:dc:34:d0:53:
         3e:e9:df:d0:9d:e5:91:93:ae:6d:1d:00:8f:81:86:8b:d6:b9:
         a6:a3:34:d6:7b:30:c3:32:23:ea:87:11:2b:04:49:05:a0:e5:
         82:7a:84:d0:ff:15:3c:a9:4c:01:4b:4e:88:ed:7e:41:72:6f:
         f3:b0:5d:82:af:24:b8:9a:73:e3:29:f5:d4:89:b5:23:f2:00:
         42:12:76:9c:78:fa:d3:6e:4c:09:ba:ec:76:7a:19:88:44:5d:
         11:81:53:ec:ff:c9:90:6e:49:b5:ed:bd:d3:e3:b1:2c:cf:48:
         bb:ed:dc:1e:54:2c:c7:76:1e:4e:0b:a6:6f:b2:81:54:57:75:
         f8:5a:b5:46:3a:83:16:d5:9f:2c:cb:9d:4d:e1:ab:0f:a6:92:
         d8:c9:87:9f:c8:45:74:54:d7:51:66:b9:ce:94:32:6a:48:9f:
         be:28:af:ce:03:a9:7c:db:a2:71:aa:75:b9:cd:ce:68:d9:05:
         74:cc:29:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:34 2025 by rpki-client