Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa
File:                     3230312e37362e3136302e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          z9xG43JS1hjaltQmshr2fd+f5cinIZPBJIFfbItGGe8=
Subject key identifier:   8D:22:19:59:69:62:0D:8F:E9:FB:E0:81:7D:4E:61:6B:93:C4:CA:2C
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       172C22B69119ADF6C7B36DD57620C3557CD32514
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        201.76.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2c:22:b6:91:19:ad:f6:c7:b3:6d:d5:76:20:c3:55:7c:d3:25:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=8D22195969620D8FE9FBE0817D4E616B93C4CA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:5c:5c:fc:b0:2d:59:59:6b:63:72:ed:5f:
                    91:a3:50:c8:5c:04:82:4a:56:5a:9f:0b:e2:41:7f:
                    cb:7e:b7:75:95:30:93:7b:34:c4:f2:a8:ce:83:21:
                    cb:de:55:b1:12:40:20:f6:e2:67:21:d0:10:f9:f6:
                    4e:36:cf:3d:49:57:76:38:d9:5a:51:dc:3e:75:1f:
                    86:75:64:3d:85:2a:90:25:e8:4d:f3:32:0a:9e:1a:
                    1a:b1:7a:dd:3e:5d:78:38:cf:ca:1b:ec:97:49:be:
                    47:c3:70:4d:fe:d1:06:f3:01:27:45:b4:41:98:19:
                    37:8d:3f:2b:45:0f:43:15:6b:db:cf:28:5d:8e:bd:
                    db:b5:ee:46:dd:27:45:d3:3b:ba:28:25:cc:41:fe:
                    6e:62:f7:f9:e0:74:9c:10:4a:75:31:5d:d8:14:f1:
                    e2:ea:12:2f:d6:b2:4f:0e:46:c3:f5:67:88:fb:70:
                    28:1d:0d:71:96:b0:87:fe:7a:c8:e8:52:23:1c:39:
                    f1:1b:9d:7f:6c:8b:65:72:80:54:dd:6e:db:24:64:
                    5f:29:bb:35:2a:63:43:c5:03:c0:04:95:87:24:35:
                    da:05:de:74:2b:bd:62:80:b2:64:4f:9c:4b:b3:c4:
                    a2:c4:66:8f:5e:54:d6:ab:77:ce:ae:81:e9:ec:38:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:19:59:69:62:0D:8F:E9:FB:E0:81:7D:4E:61:6B:93:C4:CA:2C
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:90:0d:f3:b2:63:d4:f7:0a:5c:fc:28:d0:dc:6f:f1:81:
         16:c2:f8:ab:77:e6:e9:8b:07:7d:be:56:2e:cc:f4:87:0d:df:
         6c:78:79:7b:d8:87:9a:c9:64:c0:8b:71:38:34:f0:e3:5f:81:
         04:a9:15:6c:fe:d7:b9:34:3d:8f:68:e8:be:c6:b6:ac:29:66:
         20:97:af:2c:14:38:2e:ad:ad:e2:48:6c:c6:81:64:c9:9b:74:
         54:00:e3:45:16:40:d7:8a:33:53:44:51:61:45:c7:fd:7b:07:
         c9:e0:90:43:29:18:67:3d:1e:08:44:82:d5:2c:db:5a:67:ac:
         f7:d8:a5:dc:c1:17:51:58:d5:d2:cd:f9:b5:97:0d:28:0e:a8:
         79:6f:fd:cb:95:5a:2a:28:03:62:20:ce:eb:51:f0:78:4b:b4:
         88:e3:64:0b:19:81:89:a9:49:e7:16:5f:f5:42:e4:f9:af:f3:
         a8:99:5c:e9:db:08:ea:7c:dd:b1:8e:a3:31:d7:1b:29:ac:74:
         3f:03:17:27:62:48:5c:7c:a2:f8:09:7a:9e:9c:21:6d:2d:5f:
         05:da:ba:01:09:d3:5f:a0:15:26:c8:f8:85:bd:bc:0f:3b:ba:
         57:ba:1b:2b:0e:d1:0d:2d:0e:82:c9:80:7d:4d:c1:05:7c:d5:
         ee:be:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org