Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          htCQsmQEOg+slmc+YfylyibwSQ3PiYqEnhovOTFVBjo=
Subject key identifier:   11:12:AC:9F:3D:65:4C:F9:B8:5E:37:0A:1B:8A:89:2C:A5:90:EB:1F
Certificate issuer:       /CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778
Certificate serial:       431C5C112B5032B0D4454317465E78DF6BA5408A
Authority key identifier: 21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
Signing time:             Fri 06 Jun 2025 18:12:12 +0000
ROA not before:           Fri 06 Jun 2025 18:07:12 +0000
ROA not after:            Fri 05 Jun 2026 18:12:12 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.crl
                          rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 23:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1c:5c:11:2b:50:32:b0:d4:45:43:17:46:5e:78:df:6b:a5:40:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778
        Validity
            Not Before: Jun  6 18:07:12 2025 GMT
            Not After : Jun  5 18:12:12 2026 GMT
        Subject: CN=1112AC9F3D654CF9B85E370A1B8A892CA590EB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:58:cb:77:5d:5a:08:6f:2c:3e:2b:c7:1c:
                    0c:97:35:c8:32:0d:32:42:ac:ed:0e:85:17:f5:a4:
                    d6:3d:a5:c7:75:cf:74:bc:27:b6:d0:4f:58:a5:71:
                    b8:a0:43:27:0a:8f:4d:95:98:68:0d:b1:4e:70:18:
                    35:ea:3c:bb:90:4a:a0:45:b6:eb:c6:28:e0:bc:aa:
                    9d:56:5e:4b:42:07:99:f6:55:1c:4f:37:1c:bc:ee:
                    b6:31:c6:f0:b8:cd:2f:d3:5d:53:dc:f9:5d:e1:04:
                    dc:1f:90:97:f7:33:00:8d:1f:43:a3:0b:e7:ae:7a:
                    46:58:69:e6:54:b1:73:d9:05:a6:7d:f5:2b:a7:8b:
                    f8:a1:67:8e:8f:c0:b8:5f:99:1e:4c:15:4e:8d:db:
                    6c:57:c0:d5:fd:ea:3b:dc:49:a7:a8:fe:8e:b9:7f:
                    3a:29:cd:e8:5a:6a:9e:1a:48:30:ed:4a:1c:23:1a:
                    e4:88:95:15:e0:fa:60:b9:72:a8:64:f4:12:85:d5:
                    92:ff:98:b3:14:be:ab:34:ca:5b:4d:f1:06:19:f5:
                    b1:ee:4c:76:6a:8e:83:f0:8c:6c:1b:9c:88:ab:6d:
                    a3:ec:04:4f:53:a1:fd:f9:8a:9d:fd:5f:00:52:31:
                    fb:85:df:54:66:99:c8:43:cf:80:3c:1c:13:57:a4:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:AC:9F:3D:65:4C:F9:B8:5E:37:0A:1B:8A:89:2C:A5:90:EB:1F
            X509v3 Authority Key Identifier:
                keyid:21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:bb:71:c1:ed:da:8f:0c:b5:89:8b:73:b8:a9:36:cc:40:
         3a:b7:88:1d:96:87:f9:1b:c6:40:46:01:61:d1:2b:e6:d9:fc:
         68:42:09:bf:2f:07:51:15:46:52:cc:a1:e5:15:e8:98:fe:1d:
         69:15:2c:cf:6a:7e:5f:80:c2:32:17:85:2c:5e:46:97:48:79:
         f4:84:56:32:a4:1e:ad:81:e8:14:4e:d0:2a:26:9a:83:51:76:
         71:9c:e0:ca:88:92:9b:d6:83:b6:16:4d:7f:63:69:3e:cd:08:
         8d:c3:c5:a1:d8:87:5c:5a:51:92:84:04:10:b3:0d:33:f9:d8:
         29:2a:03:46:11:37:9f:c9:ee:6b:3b:e0:66:33:0b:ab:30:42:
         06:8a:fc:af:93:26:f7:5c:d2:47:cb:3e:7b:7f:cf:a9:d6:64:
         0b:e7:7c:25:3e:ef:2d:08:93:86:c4:21:80:cb:6e:3a:1e:e7:
         fe:0c:4d:30:6c:5b:81:49:c1:66:ee:d2:bf:f7:69:2c:e8:0b:
         32:ee:92:a1:11:da:9c:35:03:e5:fe:cc:e2:3f:f0:12:bc:51:
         3e:6b:72:61:ab:aa:e8:30:b9:99:2a:7e:96:fc:62:ea:73:2d:
         95:9b:86:0c:55:15:f2:36:e1:f4:8b:67:8f:04:ef:34:bd:b7:
         22:49:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:54:30 2025 by rpki-client