Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa
File:                     3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          olPYa0fuMcoe4xVrRR7QqH0kA3uWIvAIPTcD5Lu4nVg=
Subject key identifier:   0A:49:6E:7B:F6:87:0B:CF:FD:4A:0A:67:AB:59:F4:F5:FA:14:D9:A4
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       2C58ABA2C2E8B55579329AC4D845AF0473D93168
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        200.201.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 02:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:58:ab:a2:c2:e8:b5:55:79:32:9a:c4:d8:45:af:04:73:d9:31:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=0A496E7BF6870BCFFD4A0A67AB59F4F5FA14D9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:b7:e5:93:ba:26:37:94:b9:74:c8:1d:49:
                    35:bf:3f:ad:79:0d:21:71:14:a9:14:d6:75:da:32:
                    02:97:fe:fe:ef:1f:29:11:77:24:bf:b3:1b:42:de:
                    7b:9d:55:65:db:ba:bd:02:e2:73:61:16:35:de:c9:
                    c2:f9:d8:54:b4:0a:90:63:3b:5d:aa:15:ca:f9:d2:
                    d9:7b:bd:c1:0b:8b:b1:e7:33:42:fb:f3:a4:80:ac:
                    38:d1:fd:a3:8b:68:f7:7f:77:a0:f5:b7:0e:78:87:
                    ce:e3:f7:43:81:29:c8:eb:49:8f:1d:06:bd:17:41:
                    b9:41:47:67:0f:73:2a:a0:46:80:a3:6b:db:dc:ac:
                    11:19:5b:4e:ea:de:0c:16:de:ce:36:43:01:87:56:
                    d7:96:12:27:e6:97:c5:04:db:a9:05:00:5e:e5:01:
                    40:91:d6:7d:0f:94:e3:b6:bb:c7:7e:0c:6b:e8:50:
                    ac:24:6c:f8:93:7b:04:dc:02:ab:1e:51:bf:c0:08:
                    33:14:5f:f8:ca:1d:82:b9:ac:88:7f:9f:65:eb:e9:
                    5a:73:f7:96:f0:9f:c2:24:be:02:fc:40:ea:d6:97:
                    23:c0:de:8d:14:84:09:a3:dd:3e:fb:4b:79:fd:ea:
                    a8:ce:c2:41:77:8e:bc:4c:1d:b8:a8:7f:99:13:b0:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:6E:7B:F6:87:0B:CF:FD:4A:0A:67:AB:59:F4:F5:FA:14:D9:A4
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:a3:cb:ea:f1:b4:73:b9:ad:56:8e:2d:ee:af:8b:bd:dd:
         e1:07:36:31:f5:f2:ef:70:c3:69:bb:f9:e7:46:e4:dc:63:e5:
         8c:ce:8e:fb:f8:c2:b0:3a:ef:7f:27:16:61:5e:54:05:8d:0c:
         75:6d:0e:cf:f8:57:98:f8:8a:60:bb:ae:90:44:64:16:8c:58:
         77:5b:4f:d7:43:c3:e9:76:82:38:0e:2d:4b:ab:74:60:62:00:
         37:9a:7d:fb:7c:90:f9:95:8a:81:07:d4:22:5d:de:5e:5f:b7:
         1f:f7:54:2b:50:44:0c:96:32:9f:cf:d7:4f:cf:76:ab:bc:25:
         c6:70:39:4a:f8:a3:51:78:f8:a6:38:78:e1:79:8c:ab:85:1a:
         f6:77:e4:db:1b:cf:4a:bf:43:f0:eb:57:ff:67:67:c2:5b:cc:
         96:38:33:13:9c:83:f7:bb:08:05:94:a9:37:ac:dc:12:ff:ec:
         62:fc:0e:7a:7f:73:35:0e:6f:3f:79:74:3f:ba:72:50:81:29:
         e2:09:5d:1a:6f:55:f2:93:e6:a9:96:b0:07:ea:ef:32:b6:9f:
         52:33:3a:33:ff:85:16:ad:27:fd:76:10:10:14:1a:e1:ac:d6:
         eb:06:c3:5a:2d:1d:6b:10:b8:0c:26:ac:4e:7d:46:85:ee:37:
         56:13:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:16 2025 by rpki-client on console.sobornost.net