Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
File:                     3230302e3134322e39362e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          5alEekQPnGrGKXesfX+ttSFj5cHBTMoNJHrAtK+ULDM=
Subject key identifier:   0D:2C:C0:31:62:A0:C9:9E:F5:F8:6B:55:34:7C:2A:2B:DE:DF:2A:1D
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       34587D420CD7BD78BC0A625FFA59CC83E8189369
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        200.142.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:7d:42:0c:d7:bd:78:bc:0a:62:5f:fa:59:cc:83:e8:18:93:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=0D2CC03162A0C99EF5F86B55347C2A2BDEDF2A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:fb:9a:3c:c7:17:c9:e4:58:4e:43:57:73:
                    a0:40:72:30:d7:9c:68:cb:49:25:ba:1c:fa:66:b3:
                    38:8c:7a:45:63:76:8d:bd:08:66:3a:ef:a1:bd:f4:
                    95:04:31:1e:e3:93:dd:01:84:5d:ff:94:1a:a4:51:
                    bb:f8:e0:8c:dd:e3:97:a3:f2:85:db:96:d0:e7:dd:
                    89:c4:d0:e4:49:42:22:0c:f1:86:6c:68:3f:3b:be:
                    5f:a8:27:e1:83:f8:20:b0:1c:b9:30:aa:40:7b:fc:
                    63:4d:f9:f4:6a:07:a9:43:25:05:ea:23:4b:8b:b3:
                    ef:31:0c:6b:c6:27:1d:cc:56:39:ba:ff:6a:e6:50:
                    c1:74:4a:e6:31:56:32:bd:76:e6:e7:84:5f:9c:ac:
                    74:b3:b0:59:ee:7f:79:28:b0:df:f5:e9:64:19:e2:
                    17:2e:cb:09:53:db:20:9b:57:50:18:f4:cc:91:75:
                    e4:a4:04:b5:b5:b2:b3:9d:2c:02:ee:6d:48:11:9c:
                    40:c3:d5:31:99:b8:75:49:87:07:69:26:b3:86:61:
                    01:6d:a8:62:4f:fb:24:43:45:bc:a7:49:4f:4f:b0:
                    cc:5f:6b:f2:95:8e:d3:18:8e:ce:f3:61:ff:7e:97:
                    c0:39:e2:ad:7f:eb:02:e9:ad:3c:e5:90:0e:81:0d:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:C0:31:62:A0:C9:9E:F5:F8:6B:55:34:7C:2A:2B:DE:DF:2A:1D
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:62:89:94:5e:41:96:ce:04:96:2a:e0:68:b5:0c:6f:95:
         ec:aa:11:fa:7a:9a:ed:1d:8f:fe:68:86:aa:96:42:65:cc:98:
         59:9e:83:69:38:8e:11:3f:7e:a6:ba:37:c5:f3:d1:1f:fd:24:
         3e:13:4d:15:7e:72:79:89:9b:2c:6d:e1:d6:9d:d0:88:b9:20:
         3b:7e:29:e4:07:b9:76:a7:0a:30:11:b4:1c:75:a2:ab:5a:89:
         3e:0d:52:95:88:72:5e:a2:14:e4:b1:89:8a:e7:c9:10:05:bf:
         dd:af:56:d3:84:ee:6e:f2:9a:70:22:c6:ec:41:76:c8:81:d3:
         29:7d:a8:b0:37:21:49:84:44:81:3d:32:67:00:54:9b:15:62:
         51:50:58:8f:73:7b:c0:82:92:b6:eb:b1:05:43:b7:f8:af:21:
         a4:9e:1e:a5:de:5e:ba:3d:5e:d8:12:79:b7:f0:f9:ee:2c:e2:
         dc:81:63:7a:fa:c2:a0:a9:3c:f6:2f:0e:af:0c:a5:68:f3:b3:
         16:26:58:bb:e0:43:f0:87:c1:ab:2e:f8:e2:28:ae:fe:f3:c1:
         54:e8:dd:a8:71:06:b2:06:64:3c:4a:dc:53:ff:eb:25:3d:3c:
         b5:eb:9f:72:1d:20:67:80:23:e3:ec:32:c0:11:70:40:97:de:
         a3:3b:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:39 2024 by rpki-client on console-ams.rpki-client.org