Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a3a2f33322d3332203d3e203137323232.roa
File:                     323830343a3731303a3a2f33322d3332203d3e203137323232.roa (raw, json)
Hash identifier:          vdFNNEn5GZU8ftHme2Q9oJhSndItqbE87VHrO3KJnzo=
Subject key identifier:   E2:5B:AC:13:58:2F:9C:5B:0A:7B:7F:A6:6F:23:A6:F8:74:0D:B7:01
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       674D25BC13D0D3BB822020E641C68B8F79C22B00
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a3a2f33322d3332203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:24 +0000
ROA not before:           Thu 04 Apr 2024 15:04:24 +0000
ROA not after:            Thu 03 Apr 2025 15:09:24 +0000
asID:                     17222
IP address blocks:        2804:710::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4d:25:bc:13:d0:d3:bb:82:20:20:e6:41:c6:8b:8f:79:c2:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:24 2024 GMT
            Not After : Apr  3 15:09:24 2025 GMT
        Subject: CN=E25BAC13582F9C5B0A7B7FA66F23A6F8740DB701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:64:97:dd:9d:1e:b3:f9:12:34:44:44:61:
                    a6:46:4f:bd:54:bc:ff:39:de:ac:fd:32:b2:b8:29:
                    03:45:00:05:3c:4b:a1:27:0c:81:68:dc:8a:b5:a8:
                    5a:e4:8e:52:96:56:70:2f:22:26:70:5e:8b:66:b0:
                    35:a2:a5:9e:c7:06:fe:dd:4d:0c:dd:2b:68:6a:51:
                    db:76:7e:34:ca:16:9b:28:a4:2e:6a:f2:09:14:a5:
                    60:2e:f5:3c:85:71:bc:58:64:87:e9:86:07:6e:5d:
                    f2:55:ae:b7:b0:08:5f:2a:3d:5e:19:03:96:77:d1:
                    3b:45:d1:d9:18:e6:5f:79:9d:9f:75:a3:01:f1:d6:
                    47:d7:8a:85:58:2e:90:15:66:6b:9e:5a:62:77:6b:
                    2e:7f:bf:de:d9:2f:20:b2:98:92:77:ea:fb:45:da:
                    c8:c5:56:48:93:7a:8d:a4:b1:cf:3f:57:9c:5c:bb:
                    cf:04:ea:e2:5b:dd:47:7e:c1:34:d0:82:28:0e:e5:
                    72:e9:7c:7f:b5:bf:54:2e:cc:61:3d:76:a3:5f:0d:
                    a8:2b:ec:12:d7:5e:15:f6:fa:46:52:15:4c:b3:3b:
                    23:15:5c:7c:bc:41:81:d5:23:79:03:67:a3:25:80:
                    22:0c:4a:ca:0a:d1:5d:29:ed:3a:c5:65:99:a4:66:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5B:AC:13:58:2F:9C:5B:0A:7B:7F:A6:6F:23:A6:F8:74:0D:B7:01
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a3a2f33322d3332203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:710::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:27:82:6a:e6:ba:bb:ef:bb:4f:cf:22:d7:3d:99:d6:1d:
         2e:95:a5:cd:19:96:e9:3b:20:f8:6d:38:92:6c:c7:40:77:19:
         31:fc:f4:35:d5:1c:49:f6:b0:c4:af:c1:83:59:22:60:95:f5:
         27:53:5d:88:79:d3:e9:38:36:12:a8:4f:cb:5a:12:57:7d:bd:
         33:94:49:8e:e1:c4:ef:bb:54:ee:c8:95:b7:ad:4d:4a:a4:3d:
         78:69:99:dd:5e:e7:96:3f:e5:8b:c6:e8:2f:52:54:57:cf:3b:
         ca:ab:77:f0:c7:ef:9d:92:28:53:8a:9a:b2:d4:de:08:b8:62:
         33:43:05:99:84:79:c6:39:d9:70:e8:97:c5:29:8c:af:cd:b0:
         d5:ba:54:7b:2f:27:78:ff:f4:6b:9b:ad:38:db:89:31:0c:25:
         b1:be:1e:fd:e9:65:0b:bd:3d:db:22:f5:9d:f8:2e:db:e5:c3:
         1d:24:3e:d9:fc:f9:30:a1:71:65:ca:8e:d9:b1:49:8c:ab:2e:
         94:3b:47:8a:34:e9:f3:ee:73:08:0e:a4:04:21:25:29:59:b0:
         23:de:19:1b:f4:c0:3f:91:78:ed:22:c0:e9:ce:df:f9:1b:8a:
         a4:bb:f5:4d:62:a3:52:1d:cd:fd:62:7c:e0:a7:51:40:85:3b:
         5c:1f:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org