Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a35303a3a2f34342d3434203d3e203137323232.roa
File:                     323830343a3731303a35303a3a2f34342d3434203d3e203137323232.roa (raw, json)
Hash identifier:          8V0NMHEGRkvizFeRm2NJM1TfEMHJN8kpe1Sk1Hr65x0=
Subject key identifier:   4A:ED:B4:10:7F:FF:C7:15:F7:E4:79:39:D4:CE:B9:AC:B1:A6:E2:FA
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       70084CB3621B043F7C5B80B254DF8D0E71B853FF
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a35303a3a2f34342d3434203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        2804:710:50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:08:4c:b3:62:1b:04:3f:7c:5b:80:b2:54:df:8d:0e:71:b8:53:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=4AEDB4107FFFC715F7E47939D4CEB9ACB1A6E2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:0d:24:af:fb:39:11:61:f6:23:ef:25:5f:
                    d1:c5:67:8f:75:ab:0f:40:3c:13:cc:62:6f:40:aa:
                    99:09:71:c2:6b:ff:60:af:17:69:ff:c0:93:79:3c:
                    89:2a:a0:3a:49:d5:90:71:cd:1c:79:98:20:c1:28:
                    fa:95:7b:e8:e1:e9:39:5b:94:a5:74:25:99:b5:83:
                    dc:96:11:1e:f2:88:9b:98:79:18:c4:6e:15:9b:ba:
                    b7:dd:11:5a:a1:7a:26:0a:b2:67:93:bc:31:7a:df:
                    c6:13:6b:8a:2a:6d:0b:66:89:5d:de:94:be:ce:0e:
                    27:3f:f1:6f:31:01:dd:60:77:d5:56:7b:29:2d:fd:
                    a4:0d:ab:89:a2:b6:ad:c9:84:6f:a0:87:8f:e0:fb:
                    27:d9:3c:08:fa:b9:75:15:56:df:6a:b1:7d:0f:62:
                    8f:1a:9f:40:22:06:f4:f1:56:ab:9f:2e:3e:69:57:
                    78:f9:c5:46:c8:96:75:5c:1e:2f:e3:38:f2:80:dd:
                    8f:a6:e1:71:98:42:00:8e:64:02:0a:c3:7d:4a:60:
                    9b:f7:bd:3b:b1:c9:83:4f:dc:ba:7a:f8:41:57:b6:
                    80:b6:c0:15:2a:7b:23:cb:9e:cf:14:3e:e9:d6:84:
                    85:88:2e:92:09:d7:4e:79:b0:a6:08:af:c6:15:a6:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:ED:B4:10:7F:FF:C7:15:F7:E4:79:39:D4:CE:B9:AC:B1:A6:E2:FA
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a35303a3a2f34342d3434203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:710:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:d7:03:24:7b:26:14:ee:e7:43:d6:10:c9:21:d9:c0:98:
         9d:fe:9d:97:36:68:84:ae:25:ca:ca:44:2b:a3:f4:98:36:6e:
         b2:f2:dc:7c:8c:81:07:cd:78:2d:66:1f:58:91:f7:69:08:ac:
         e9:08:bb:c3:d2:78:6c:82:f4:05:be:62:c9:41:b6:0d:2b:7c:
         5c:d1:ac:aa:7e:1f:31:03:61:ba:d7:eb:91:91:15:df:8a:3f:
         be:87:f6:0f:0f:25:9b:51:a6:ad:fc:fa:c3:d9:6a:1a:67:9a:
         eb:d4:ee:80:87:42:d3:89:78:02:27:30:d7:07:6f:5f:27:99:
         90:e2:aa:ec:0d:7e:af:81:c0:50:91:da:4b:05:6c:18:4b:09:
         f9:ee:2b:39:45:08:c7:52:bb:ac:56:a3:92:45:6e:2f:b4:2f:
         da:b7:59:57:58:69:12:91:a7:8e:60:51:07:aa:33:14:ea:af:
         87:ee:1a:d7:7b:99:cd:34:30:25:24:1a:a4:2a:b1:fd:8f:db:
         13:24:6b:74:c0:6d:ec:24:4a:42:8f:c6:32:9c:48:09:ff:9c:
         f0:2c:1c:6d:62:28:4d:45:89:a0:3e:06:78:a7:b2:aa:96:1e:
         36:88:0b:f9:ac:dd:df:be:99:6a:3e:e5:c7:a7:94:d2:04:28:
         87:6f:fe:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org