Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3139362e34382e302f32302d3234203d3e203137323232.roa
File:                     3230302e3139362e34382e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          4OccsdnHJuv99k+Kgv3TXmgpoxMXm6KsJUhhTl+DWqc=
Subject key identifier:   54:8B:3F:8F:FB:2C:0C:78:F8:13:5E:3C:ED:76:8F:F7:B5:24:C0:77
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       704242CAD39D8384E7C6C2F3F221C4D17088C527
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3139362e34382e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        200.196.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:42:42:ca:d3:9d:83:84:e7:c6:c2:f3:f2:21:c4:d1:70:88:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=548B3F8FFB2C0C78F8135E3CED768FF7B524C077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:53:a8:3e:a3:bf:ef:06:ef:49:bb:b6:f0:
                    da:42:bb:2e:52:28:3d:5d:2b:a1:ef:f7:5c:17:34:
                    72:0b:ea:a3:be:4f:bd:06:0a:bb:74:bc:a5:42:64:
                    74:7d:6a:32:8c:0b:77:34:ff:74:fb:46:64:0e:c3:
                    0d:f4:64:91:1e:c2:b2:e1:41:58:b7:c0:03:f2:f0:
                    c9:96:5b:42:79:e4:03:f8:04:62:bc:81:40:de:f9:
                    1a:79:80:f8:eb:7e:6b:6e:ae:15:6c:f9:a9:e7:b1:
                    95:0b:28:da:24:ff:5b:48:d2:48:d4:b8:e8:76:f2:
                    78:d5:83:1d:78:d7:2e:8b:3e:da:74:65:52:e8:d5:
                    4d:c9:29:d5:9d:3c:07:04:69:08:c7:46:82:96:20:
                    f8:71:13:e1:72:76:6d:4d:a8:08:21:39:21:69:1c:
                    02:20:f8:64:53:dd:7f:e9:91:19:9f:bc:2b:55:e5:
                    70:d4:4b:05:0f:02:6b:41:a4:99:f9:02:13:a5:6a:
                    85:3f:0e:13:f5:a6:ae:b0:a4:78:47:00:dd:a6:7a:
                    3c:26:ea:2b:51:03:89:03:3e:69:00:de:b0:3d:95:
                    3e:2e:72:84:09:b5:4a:7a:a0:1e:19:40:d2:18:9b:
                    7a:f8:be:0a:86:f4:0c:27:d1:3f:8c:8e:ce:14:39:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:3F:8F:FB:2C:0C:78:F8:13:5E:3C:ED:76:8F:F7:B5:24:C0:77
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3139362e34382e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:6d:c8:f6:4c:af:db:32:86:01:cd:e5:34:54:b1:29:5f:9c:
         84:80:32:1a:d3:53:c4:d5:25:a1:a4:51:11:7b:81:25:03:64:
         5b:b0:00:ee:8b:db:84:df:14:f1:74:4d:d9:71:a9:e2:29:f2:
         dd:f2:f6:b8:be:92:b7:d4:4b:58:65:88:8d:66:8b:a2:14:64:
         d5:c5:2f:00:27:02:e2:eb:11:e5:65:2a:00:b2:a0:3d:f7:8c:
         37:f7:f4:8a:6a:63:e2:7e:b1:3b:84:1f:de:ff:16:71:0a:00:
         0e:a7:92:44:bd:fb:76:37:d6:ad:ea:b7:82:c8:eb:f7:b4:41:
         86:70:ad:79:fc:5f:e6:24:4c:54:d4:f7:66:49:84:2d:50:ce:
         b3:e6:1a:46:d3:8f:5e:9f:c9:30:ae:d4:10:c8:9f:3d:d3:c2:
         58:17:02:5e:54:39:92:87:f4:3a:bf:25:95:69:5b:b0:01:71:
         a0:4a:00:90:1d:2f:ee:6e:9d:c6:58:85:98:68:44:56:94:bf:
         10:98:cc:e9:13:12:e4:86:d4:25:e1:66:f1:ae:60:6f:a7:e1:
         05:72:f5:87:1f:fe:18:63:4a:94:27:80:ac:f8:8f:cb:cf:c7:
         9c:22:9a:7b:43:18:b2:ea:da:53:38:04:f3:3c:05:2d:d4:f8:
         1e:3c:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org