Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
File:                     3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (raw, json)
Hash identifier:          LSPvF/yPwqYM389vmOVbK55ZQ+kVjTiieioX5ncwkIE=
Subject key identifier:   F8:25:A7:1E:20:93:F5:C0:AF:F0:B9:2C:F7:A5:D4:D1:DD:A7:E4:BE
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       1A02F4A6FFFBCA4698D55BAF0395B95809E25121
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271330
IP address blocks:        207.248.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:02:f4:a6:ff:fb:ca:46:98:d5:5b:af:03:95:b9:58:09:e2:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:95:25:fb:82:a4:f7:bc:f5:76:18:d5:de:
                    98:0b:f6:c7:1d:a5:64:e7:04:78:c6:16:34:eb:bb:
                    a9:33:d1:00:19:c8:24:d9:54:ca:7c:96:75:fd:f3:
                    50:8a:0e:c6:ca:45:cf:f5:8c:13:63:ec:93:db:f0:
                    d4:10:63:0e:36:95:b1:c7:a7:9d:12:9b:72:23:c8:
                    1f:89:4e:84:cf:c3:89:e6:07:c6:d1:4a:09:bb:0d:
                    01:02:36:42:76:31:90:42:27:f0:12:b7:ce:84:5d:
                    32:c3:c3:ef:7c:b0:67:06:c6:3b:3b:da:6e:85:6a:
                    86:48:87:9a:26:72:1d:82:05:b4:30:7f:a7:4d:de:
                    8d:7e:c6:f2:bc:cc:1c:7d:d4:de:28:12:d7:81:cb:
                    63:aa:8c:5c:08:8f:c4:ea:c7:4e:95:93:34:19:83:
                    9d:f7:56:ae:9b:2e:f6:23:41:b2:09:a1:5a:38:45:
                    f2:a3:16:8d:f3:ba:1d:54:f2:91:fe:b8:76:dc:c1:
                    9e:23:92:f6:c4:b0:d1:04:c7:3c:1b:b0:9f:01:47:
                    2b:dd:68:e3:74:03:a6:1f:9c:43:7c:5f:a3:48:de:
                    ed:b4:a0:6a:46:0a:f6:f1:fc:81:9d:53:d7:4f:24:
                    ca:ec:77:91:48:64:c2:f4:ea:45:ab:7d:47:00:7f:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:25:A7:1E:20:93:F5:C0:AF:F0:B9:2C:F7:A5:D4:D1:DD:A7:E4:BE
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:a8:e9:ae:b2:a4:14:58:1a:df:ad:7c:d8:57:70:81:70:
         9f:a3:a3:3e:a3:c5:f4:51:e5:7a:27:cf:ce:1e:a5:a1:f2:01:
         88:7a:2d:f8:fe:ee:c1:ff:5a:85:33:0f:7c:ab:7a:86:bb:fa:
         8c:38:6c:bd:1e:25:d0:23:60:cd:a6:46:7f:79:5d:f1:fd:5f:
         18:1f:67:00:06:8b:14:18:bf:03:b3:77:d4:0f:77:1d:44:91:
         47:1d:e5:b3:99:35:dd:d8:01:94:b4:af:fb:23:eb:0c:d7:d7:
         37:65:35:4a:08:04:a2:cc:4e:19:82:47:a7:90:ae:ac:f3:dd:
         1e:a1:c2:88:77:4a:d2:02:36:1f:38:28:2c:b8:fa:e3:98:f0:
         ef:08:fb:34:77:f6:35:c2:83:d1:97:b7:0c:1a:d7:5b:7c:ca:
         f5:d2:cf:ee:7c:a7:42:c6:b0:4b:5b:f7:7d:e5:7d:42:06:6d:
         23:3a:60:45:92:85:85:d6:89:d5:8c:d6:31:a2:a6:0a:91:2d:
         36:66:1c:10:fe:94:92:ee:c5:bc:b2:c8:ff:e7:d1:b4:8a:ad:
         15:af:b6:db:bb:04:4c:c7:48:84:12:ee:d9:77:00:a4:a4:27:
         4f:cb:cd:3b:ee:32:17:1b:cd:d1:e4:d4:5e:46:b5:75:1f:9c:
         79:41:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:35:36 2025 by rpki-client