Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a63303a3a2f34342d3434203d3e203137323232.roa
File:                     323830343a3731303a63303a3a2f34342d3434203d3e203137323232.roa (raw, json)
Hash identifier:          AJ/0CVw689mz+kmIPQVNg98H8moEYCjiJ/eKZgg1gQU=
Subject key identifier:   B1:24:90:58:43:1A:18:D0:68:B6:DA:6C:43:41:CD:52:A2:EE:39:DD
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       4F86844141E080D63301AE0E5D7A4ABD24F58650
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a63303a3a2f34342d3434203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:25 +0000
ROA not before:           Thu 04 Apr 2024 15:04:25 +0000
ROA not after:            Thu 03 Apr 2025 15:09:25 +0000
asID:                     17222
IP address blocks:        2804:710:c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:84:41:41:e0:80:d6:33:01:ae:0e:5d:7a:4a:bd:24:f5:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:25 2024 GMT
            Not After : Apr  3 15:09:25 2025 GMT
        Subject: CN=B1249058431A18D068B6DA6C4341CD52A2EE39DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:58:3c:60:60:2b:15:b3:73:4c:e1:2e:a9:
                    3d:29:54:88:0c:3a:09:cc:b2:a3:1c:bc:68:a0:da:
                    dc:52:82:d2:44:6d:b0:5a:5b:33:2b:52:28:49:21:
                    43:3a:de:3d:7a:b3:a5:94:60:c1:85:e2:6b:89:42:
                    3e:0f:67:a0:bd:d0:a9:3c:7f:13:79:7f:53:eb:4c:
                    70:41:b1:d1:6b:c1:e2:af:b8:db:b4:a9:ad:2d:22:
                    ff:67:81:c0:fd:3a:72:09:59:de:53:e4:47:82:29:
                    c4:f6:69:b8:a6:10:c8:39:55:8a:69:4e:e3:36:9d:
                    1a:66:2b:45:92:45:78:02:cb:1b:23:f5:2b:9a:94:
                    cb:7a:36:7a:cf:92:be:bf:6a:37:85:9a:54:5d:57:
                    0e:7f:bc:ae:b4:7b:ee:6e:3e:6e:6f:dc:22:ba:d9:
                    0d:42:5d:b4:45:68:32:1f:73:24:6c:ec:2e:a0:7c:
                    e2:c5:1a:b0:64:4a:2c:6f:1a:f9:ea:3f:8b:2c:09:
                    f7:0b:df:1f:e2:60:e1:f2:61:22:a8:67:49:e8:e4:
                    19:36:43:bf:66:6f:64:ad:96:3b:c5:cd:da:d1:b9:
                    fe:0b:72:89:2a:b8:49:04:70:f1:fd:40:8a:e8:fb:
                    2e:ca:d6:35:6c:40:ef:20:32:fa:e2:ac:78:47:f5:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:90:58:43:1A:18:D0:68:B6:DA:6C:43:41:CD:52:A2:EE:39:DD
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/323830343a3731303a63303a3a2f34342d3434203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:710:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:09:d3:d0:78:30:a4:60:f3:29:98:77:9f:17:96:9c:84:
         92:9b:3d:f2:60:15:c0:b3:5f:cd:65:12:be:e6:21:5d:57:d2:
         e9:cc:3b:07:1e:c9:99:1a:7a:dd:eb:df:27:b1:67:64:b3:7c:
         ff:07:da:10:73:72:68:4a:1f:95:05:85:51:7c:4c:cf:f9:40:
         52:36:82:32:87:36:65:e7:72:6d:44:be:50:5c:62:13:98:77:
         f4:6b:d8:48:1a:6a:3a:dc:53:47:a1:57:af:80:60:5b:8e:d2:
         a9:c4:b8:f6:22:4b:98:db:01:38:5d:9c:93:26:df:b5:72:f7:
         2e:a9:ca:ed:0e:74:df:a3:21:94:f5:8f:70:fc:42:1f:f0:a9:
         98:10:8e:a0:3a:17:89:03:57:42:83:37:73:f6:d2:7d:54:4f:
         d9:9b:3a:54:32:02:35:4c:a9:0d:44:b5:8c:cf:b8:9c:5f:f1:
         55:64:5c:c6:6e:67:04:ea:d7:b0:1a:d6:81:84:4b:50:e8:dd:
         9e:01:37:d2:dc:bb:77:a7:f8:c7:61:f0:8b:a0:7d:3a:7c:80:
         97:53:a2:23:7e:0f:cb:a7:54:02:71:51:8d:4b:cf:f0:6c:97:
         ac:72:40:5a:1d:5c:74:74:68:6c:1a:36:80:00:59:ae:a5:39:
         f6:50:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org