Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
File:                     3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (raw, json)
Hash identifier:          4cLY2Ex3kgDxhYRizK2N//cjTSJbGJakQqVxlF0HK7A=
Subject key identifier:   DC:70:FC:E6:3D:B8:7C:DC:6C:66:A5:D4:EF:63:EC:8C:DB:27:1A:42
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       6A26D76A6E64C75EB3BFD4D94CF0D1912D405426
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     271330
IP address blocks:        207.248.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:d7:6a:6e:64:c7:5e:b3:bf:d4:d9:4c:f0:d1:91:2d:40:54:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:2a:e7:34:22:a8:c8:a9:a3:d8:e9:c8:5b:
                    61:17:8c:28:bc:30:cc:70:cc:00:07:9b:37:1c:eb:
                    c9:e1:92:2d:02:16:5e:3c:54:d5:68:c4:77:a5:ca:
                    24:50:ae:fc:19:77:8e:1f:af:77:99:3f:b6:48:2f:
                    4c:ee:91:7b:cd:c9:f3:ab:62:bb:5f:79:db:ce:2f:
                    a7:b9:c5:69:eb:fd:e4:54:a2:d7:8d:e2:cf:ba:98:
                    2e:5c:4d:ba:32:e1:35:f2:5f:02:98:5c:2a:4b:23:
                    67:33:54:5b:c3:9c:26:73:86:81:b5:54:25:b7:33:
                    09:36:1d:41:11:62:6e:c2:41:73:e6:8e:28:36:26:
                    43:ac:67:6f:23:1c:80:55:5f:52:fc:3a:7e:a9:ce:
                    b4:3a:c3:29:b9:cf:64:64:1a:10:ce:9a:1a:af:92:
                    ec:90:b2:73:e1:40:37:9f:b5:5c:3d:81:07:0d:d6:
                    3e:65:99:60:d7:f7:4e:53:ad:a5:32:5e:60:df:f5:
                    f9:ef:0e:a4:0f:55:e0:92:0c:2a:4e:2f:65:3f:ac:
                    f9:fd:6c:84:94:0c:b5:23:aa:d0:cf:b5:9f:52:ad:
                    3a:d4:07:75:34:e9:10:ba:0a:33:bc:f3:7b:fd:41:
                    40:bc:4d:db:2c:23:eb:ac:4f:c1:2c:6c:f4:86:5b:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:FC:E6:3D:B8:7C:DC:6C:66:A5:D4:EF:63:EC:8C:DB:27:1A:42
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:57:bc:97:57:ac:68:ef:c0:d9:f7:33:80:a4:09:76:f1:e8:
         4c:88:6f:83:0d:02:04:b6:38:5f:1e:59:75:80:af:14:f0:e9:
         55:21:07:0a:8b:33:f3:0d:47:6d:0c:21:d0:da:78:0c:ac:3b:
         a1:9b:70:b9:fc:f8:e2:a8:9b:86:16:81:0e:d7:42:46:6f:32:
         50:13:d8:be:74:a7:5a:f1:4d:58:67:8b:ef:9b:6d:91:71:21:
         ae:0e:4d:20:cf:ed:87:9d:b0:56:76:c5:66:53:9a:f3:31:4c:
         37:ad:ae:d7:d3:c7:5b:c7:dc:57:3f:c7:c7:78:d3:28:0d:82:
         5d:c5:62:f6:42:c8:9c:0e:70:57:8a:a3:cc:23:49:af:68:bf:
         7e:74:57:93:99:01:c7:94:8e:3a:62:85:2b:57:d2:0e:65:99:
         82:7f:b2:f6:b4:28:8a:95:62:9d:c9:02:2f:bc:f2:37:10:1c:
         48:c8:b7:70:a3:d5:25:66:5d:b1:1b:a1:00:f1:57:b1:1e:d6:
         a5:be:3a:73:5f:bf:57:ee:8d:27:ae:2f:44:10:70:f5:84:44:
         7d:d6:81:95:94:d6:88:09:d1:69:33:a2:4b:46:17:af:4b:7c:
         a1:a7:64:be:66:4d:b4:7b:41:42:e9:3a:07:e1:88:98:34:bb:
         a1:f8:f8:a4
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUaibXam5kx16zv9TZTPDRkS1AVCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwQTFFRUZENjdGMzZCN0Q3RjYwQTY0MzFDNzJDODEz
ODAyMDY2MTAeFw0yNDA0MDMxODI1NDdaFw0yNTA0MDIxODMwNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURGMTJBRTczNDIyQThDOEE5
QTNEOEU5Qzg1QjYxMTc4QzI4QkMzMENDNzBDQzAwMDc5QjM3MUNFQkM5RTE5MjJE
MDIxNjVFM0M1NEQ1NjhDNDc3QTVDQTI0NTBBRUZDMTk3NzhFMUZBRjc3OTkzRkI2
NDgyRjRDRUU5MTdCQ0RDOUYzQUI2MkJCNUY3OURCQ0UyRkE3QjlDNTY5RUJGREU0
NTRBMkQ3OERFMkNGQkE5ODJFNUM0REJBMzJFMTM1RjI1RjAyOTg1QzJBNEIyMzY3
MzM1NDVCQzM5QzI2NzM4NjgxQjU1NDI1QjczMzA5MzYxRDQxMTE2MjZFQzI0MTcz
RTY4RTI4MzYyNjQzQUM2NzZGMjMxQzgwNTU1RjUyRkMzQTdFQTlDRUI0M0FDMzI5
QjlDRjY0NjQxQTEwQ0U5QTFBQUY5MkVDOTBCMjczRTE0MDM3OUZCNTVDM0Q4MTA3
MERENjNFNjU5OTYwRDdGNzRFNTNBREE1MzI1RTYwREZGNUY5RUYwRUE0MEY1NUUw
OTIwQzJBNEUyRjY1M0ZBQ0Y5RkQ2Qzg0OTQwQ0I1MjNBQUQwQ0ZCNTlGNTJBRDNB
RDQwNzc1MzRFOTEwQkEwQTMzQkNGMzdCRkQ0MTQwQkM0RERCMkMyM0VCQUM0RkMx
MkM2Q0Y0ODY1QjE3QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArfEq5zQiqMipo9jpyFthF4wovDDMcMwAB5s3HOvJ4ZItAhZePFTV
aMR3pcokUK78GXeOH693mT+2SC9M7pF7zcnzq2K7X3nbzi+nucVp6/3kVKLXjeLP
upguXE26MuE18l8CmFwqSyNnM1Rbw5wmc4aBtVQltzMJNh1BEWJuwkFz5o4oNiZD
rGdvIxyAVV9S/Dp+qc60OsMpuc9kZBoQzpoar5LskLJz4UA3n7VcPYEHDdY+ZZlg
1/dOU62lMl5g3/X57w6kD1XgkgwqTi9lP6z5/WyElAy1I6rQz7WfUq061Ad1NOkQ
ugozvPN7/UFAvE3bLCPrrE/BLGz0hlsXxQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNxw/OY9uHzcbGal1O9j7IzbJxpCMB8GA1UdIwQYMBaAFLsKHu/Wfza31/YKZDHH
LIE4AgZhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJGd0dwS2VoSmpRcHhM
cXJNZFN1a2c2czV2YkhndW5IbnRTbVVGZWthblZLLzEvQkIwQTFFRUZENjdGMzZC
N0Q3RjYwQTY0MzFDNzJDODEzODAyMDY2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjBBMUVFRkQ2N0YzNkI3RDdGNjBBNjQzMUM3MkM4MTM4MDIw
NjYxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yRndHcEtlaEpqUXB4THFyTWRT
dWtnNnM1dmJIZ3VuSG50U21VRmVrYW5WSy8xLzMyMzAzNzJlMzIzNDM4MmUzNDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMzMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs/4
BDANBgkqhkiG9w0BAQsFAAOCAQEAOVe8l1esaO/A2fczgKQJdvHoTIhvgw0CBLY4
Xx5ZdYCvFPDpVSEHCosz8w1HbQwh0Np4DKw7oZtwufz44qibhhaBDtdCRm8yUBPY
vnSnWvFNWGeL75ttkXEhrg5NIM/th52wVnbFZlOa8zFMN62u19PHW8fcVz/Hx3jT
KA2CXcVi9kLInA5wV4qjzCNJr2i/fnRXk5kBx5SOOmKFK1fSDmWZgn+y9rQoipVi
nckCL7zyNxAcSMi3cKPVJWZdsRuhAPFXsR7Wpb46c1+/V+6NJ64vRBBw9YREfdaB
lZTWiAnRaTOiS0YXr0t8oadkvmZNtHtBQuk6B+GImDS7ofj4pA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org