Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
File:                     36372e3135392e3232342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          r29xQy5EdgJ73tjukU5y8kSjO231pG5cya3rsWtjto0=
Subject key identifier:   0D:1F:43:0F:71:3F:26:13:D8:0C:1C:6F:4A:48:52:5D:13:96:27:E6
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       01E3D3BF8C2CC8954597B9FF345C0CAC1AA53A64
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        67.159.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e3:d3:bf:8c:2c:c8:95:45:97:b9:ff:34:5c:0c:ac:1a:a5:3a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=0D1F430F713F2613D80C1C6F4A48525D139627E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:c6:d9:9d:0a:0c:27:9e:fd:2a:10:07:4c:
                    3e:fb:f7:57:9f:b9:bc:63:23:e2:ba:6d:9b:de:dc:
                    bb:b5:55:91:49:9a:f8:a3:0d:14:eb:f6:a8:87:79:
                    1e:82:f9:0d:4f:67:e7:1c:67:4b:da:ac:39:71:99:
                    3a:4f:84:ca:e2:93:ab:2f:f2:b1:a1:1a:ba:83:bb:
                    7d:2b:8b:f0:22:6f:d4:fe:2c:71:21:54:66:be:63:
                    88:f0:10:18:0e:02:c8:c8:13:3b:62:49:e7:e5:a4:
                    d0:4d:c3:4c:49:8c:0a:92:4c:31:08:21:ee:37:ec:
                    4c:fe:4c:ff:46:0b:d9:79:b7:0e:80:f4:c7:be:7c:
                    02:54:80:a9:fc:31:45:72:c2:88:0f:d0:eb:de:56:
                    4f:08:4a:b2:3b:60:16:e6:e6:ce:08:f8:de:b8:16:
                    5b:fe:ce:1a:78:5f:c5:0d:38:58:10:f3:38:5d:19:
                    c8:b9:cc:64:54:e2:7b:6c:97:11:d3:37:6a:4f:72:
                    3d:a4:9c:f9:25:0b:d1:1b:d1:16:82:f7:78:bf:18:
                    b0:69:c2:8a:58:c2:a9:89:2f:16:1f:0f:b7:42:6a:
                    4f:8b:3d:d4:6b:fe:83:65:58:e2:02:56:21:1c:34:
                    50:79:9f:5e:b5:10:1f:ff:4d:92:4b:e6:9d:89:65:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:43:0F:71:3F:26:13:D8:0C:1C:6F:4A:48:52:5D:13:96:27:E6
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:07:32:e1:a4:7b:bd:73:ae:bf:5e:fb:0c:86:a6:00:b9:
         e1:b5:02:32:0a:8e:ee:cf:e9:75:44:fa:54:5f:44:2d:6a:e6:
         ca:70:81:45:c1:c0:68:3e:c5:2e:d3:00:bb:1b:e3:3e:11:e2:
         8a:5c:ca:05:85:c3:88:fa:ff:27:4e:8e:9d:97:cf:1e:8f:06:
         b8:7d:12:24:a0:7d:93:6f:fe:f2:2d:47:5d:cd:5f:8a:56:7a:
         cc:f8:d8:e0:6e:a7:89:12:2a:0c:15:7c:37:9c:c6:29:dc:80:
         b6:38:50:68:89:98:c8:cc:3a:dd:fa:db:db:a8:88:ca:6b:af:
         09:fa:d4:42:b5:f7:74:38:6d:79:e3:1d:20:79:a6:03:10:e4:
         e5:50:54:cf:d3:55:9d:1a:85:ae:d6:82:a4:62:bc:d8:da:55:
         51:35:de:98:bf:21:81:e5:f0:77:5a:5c:9c:13:64:44:98:78:
         46:a8:f2:43:e9:0a:b1:7f:12:d2:e3:ff:49:e0:94:86:3e:0a:
         d6:23:3f:ca:02:70:cf:ef:04:1f:24:99:e5:55:8e:3b:0d:8f:
         47:11:0f:95:df:e9:2c:92:b4:45:85:92:85:6c:65:f9:ff:a7:
         44:7a:c1:00:37:8e:82:07:b4:72:32:4c:06:ca:6d:3b:db:d1:
         25:a9:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org