Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa
File:                     3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          CnfbYtnyQF4ezyu2yDPjMWp/E6iekDj4zQcHl5GwMGM=
Subject key identifier:   17:3A:70:A8:69:55:46:6B:FA:D5:1A:B1:1B:C9:12:4E:6A:6C:B8:60
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       01E127CEA8E2B946725198A7561A8165BE683BA0
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        200.142.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e1:27:ce:a8:e2:b9:46:72:51:98:a7:56:1a:81:65:be:68:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=173A70A86955466BFAD51AB11BC9124E6A6CB860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:c8:46:6c:55:9e:83:e7:23:22:5e:37:cc:
                    dc:4f:62:68:2d:58:44:63:61:7d:0a:12:4c:2e:f9:
                    b8:39:ec:c6:15:81:6f:d3:ac:1a:88:91:97:03:42:
                    ac:a2:9e:9b:ac:66:6d:40:e3:93:4a:c3:51:cd:db:
                    3b:64:54:51:71:a8:69:0e:ae:3b:11:e1:ee:c7:8f:
                    9f:f2:21:a2:da:99:21:f5:0b:cf:90:42:e0:d4:8d:
                    7f:81:9b:f7:98:73:95:42:6d:c7:da:e7:b1:cb:c5:
                    b8:bb:1e:fd:06:c2:ab:7d:b3:ad:79:bc:1a:f1:e5:
                    3c:8e:d0:83:92:b5:52:ba:e5:6e:a0:77:c1:31:f6:
                    3d:4e:e6:73:0d:96:0b:62:5b:44:0d:79:ac:f9:c5:
                    4e:9e:9c:f0:34:24:25:41:c5:be:07:74:11:fe:7b:
                    84:53:6d:60:77:43:46:06:46:68:d7:65:c8:da:85:
                    31:3b:d4:60:a1:1f:66:13:1b:4e:55:4b:d4:2e:12:
                    6b:ea:81:29:ba:2d:93:5f:7c:0d:cf:e7:7b:7c:70:
                    39:47:1c:3f:af:23:24:a7:51:52:2f:74:e1:1c:7a:
                    62:3a:47:2e:14:ce:cc:ad:5b:76:b0:84:5d:a7:02:
                    5b:a1:b2:1d:3c:14:8c:bb:d6:20:60:5f:f7:c1:5c:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:70:A8:69:55:46:6B:FA:D5:1A:B1:1B:C9:12:4E:6A:6C:B8:60
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:bf:3a:04:82:e1:28:04:0a:69:ea:51:e4:90:82:7e:35:78:
         f4:ed:de:61:8d:65:59:25:2c:92:a4:f5:57:b2:3d:b7:f3:c8:
         c3:be:1f:81:b3:98:2b:2f:1e:04:6d:94:0a:1f:ec:ff:81:f6:
         41:dd:02:66:0d:37:97:7e:39:67:2d:ca:98:a2:74:36:98:77:
         d8:3e:94:b4:bd:32:79:45:8e:d1:57:15:82:a0:f3:a0:42:58:
         96:2d:7b:f6:a3:cd:b6:17:7d:72:73:bb:b7:93:51:73:51:aa:
         2a:a5:a5:35:6d:4a:93:37:70:75:6d:88:54:96:2e:56:e9:62:
         3e:d6:c9:7b:bb:48:8e:4c:67:07:a2:0b:12:0c:76:48:c0:94:
         bc:28:88:d0:f1:a9:f4:88:8d:66:72:5e:8d:9b:3a:66:5f:d9:
         7b:1b:6c:c4:0d:ac:b0:8b:cf:23:90:34:79:9d:e4:8a:88:d5:
         2d:cd:51:c3:75:31:33:ca:46:2d:e5:55:69:f9:ec:3a:fa:3a:
         87:ea:d7:25:d7:c1:9f:a9:2c:db:50:4c:fc:68:ed:ef:6a:18:
         13:dc:9a:9f:0a:fb:94:23:0a:94:74:1b:d9:ee:63:65:e2:61:
         1e:7e:d2:c7:3c:78:fe:f8:81:63:fc:35:c4:22:cc:a3:e4:ae:
         f6:64:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:20 2025 by rpki-client on console.sobornost.net