Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a38303a3a2f34342d3434203d3e203137323232.roa
File:                     323830343a3731303a38303a3a2f34342d3434203d3e203137323232.roa (raw, json)
Hash identifier:          HskA2N26gc8Er3J5JR1sp3PHWc7fXamg6b/BidK8DV4=
Subject key identifier:   AA:AA:C1:38:CD:37:D3:44:E6:3B:07:98:50:E6:5C:FE:C1:90:37:47
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       7131F43FFBC7BA3F6E5482EC60F8B6786A8FBAA8
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a38303a3a2f34342d3434203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:23 +0000
ROA not before:           Thu 06 Mar 2025 15:29:23 +0000
ROA not after:            Thu 05 Mar 2026 15:34:23 +0000
asID:                     17222
IP address blocks:        2804:710:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:31:f4:3f:fb:c7:ba:3f:6e:54:82:ec:60:f8:b6:78:6a:8f:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:23 2025 GMT
            Not After : Mar  5 15:34:23 2026 GMT
        Subject: CN=AAAAC138CD37D344E63B079850E65CFEC1903747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:3b:26:ef:e6:07:eb:c8:6c:cf:50:3f:d0:
                    53:56:29:95:28:5f:af:4f:06:11:00:07:aa:77:ad:
                    38:ef:21:59:82:1e:8d:24:d3:5a:ce:7e:7b:e7:4e:
                    5b:d9:69:a5:bb:ad:3c:4a:de:42:92:b1:69:c9:55:
                    a1:42:b7:ea:d6:a0:f7:48:c6:0e:27:a0:98:9e:4b:
                    21:5d:d5:ab:40:62:17:7b:67:6f:8e:fd:f9:84:45:
                    9f:b2:62:0c:b4:31:e2:3b:ec:cb:26:6a:7a:91:e4:
                    66:f2:4b:6f:0f:20:4f:0c:2d:53:b8:ae:93:38:bb:
                    06:95:6f:56:fc:db:6c:5e:f5:71:26:06:53:d8:f0:
                    f4:69:79:12:29:a4:42:dc:d5:bc:84:43:9e:bc:65:
                    11:a3:1b:28:40:a1:5b:36:c0:c1:1e:58:8a:15:ef:
                    ef:76:b9:ea:85:f3:7d:31:c8:a6:20:5a:2c:9a:8f:
                    6a:35:70:c0:e3:08:e2:b4:26:67:a1:de:65:6e:a2:
                    c7:8d:0c:26:2f:51:b2:e1:de:c2:9b:e5:d6:18:0a:
                    75:80:e9:b5:fa:65:db:3f:ce:d9:3d:36:21:51:c6:
                    af:b9:92:3e:71:4a:7b:39:03:a3:2d:0c:86:d3:56:
                    7b:a5:b2:9b:26:ce:d9:ea:af:c4:3f:cf:2d:fa:36:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AA:C1:38:CD:37:D3:44:E6:3B:07:98:50:E6:5C:FE:C1:90:37:47
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a38303a3a2f34342d3434203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:710:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:bc:a3:2c:96:dd:ae:e2:8f:86:0b:96:71:50:89:d6:c0:
         a9:c5:61:06:91:0e:3e:f6:ff:5d:d2:f4:9c:4a:a0:1e:45:37:
         0b:1b:82:3a:05:29:51:6a:84:99:e5:65:07:7d:41:92:5a:3d:
         38:6c:18:16:f6:c7:7f:13:1a:14:29:8a:d9:46:88:24:cf:3f:
         ad:87:e5:84:9b:92:44:9f:56:dd:60:5f:8e:68:86:fa:fa:22:
         a6:9b:82:dc:5e:84:56:40:54:39:00:66:d4:ee:ec:93:d4:f3:
         d2:5f:6a:c1:d2:56:d7:5a:36:c8:48:c1:7d:b9:3d:49:56:b2:
         ba:d7:14:e6:e7:b3:9f:4c:6e:b2:4b:d2:77:6e:51:10:02:18:
         7e:cc:54:32:d0:e7:b2:bf:26:1c:9e:df:0f:94:29:19:df:74:
         b8:da:73:b9:4e:3c:5b:be:3c:39:4e:65:32:44:74:ce:17:9d:
         24:2c:4d:fc:00:51:79:55:30:67:d0:eb:04:95:7d:41:ec:83:
         67:b7:f2:e1:59:f6:b5:d8:5a:03:1d:f6:70:c7:6d:3f:60:13:
         47:dd:58:2a:ae:8c:13:09:2a:40:ec:01:ce:5c:2d:03:f6:45:
         7e:28:a8:9d:fc:b1:4a:4a:52:d3:99:77:ab:a7:ed:a9:db:61:
         eb:0b:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:38 2025 by rpki-client