Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
File:                     3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa (raw, json)
Hash identifier:          DeHpMKjqwdnpMxgRz+0D4NPJKATP/W1cXY2WzX8F6Ds=
Subject key identifier:   4A:32:30:35:6C:16:F8:50:37:3E:DE:FC:C2:D3:A1:9E:D4:32:5B:0E
Certificate issuer:       /CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Certificate serial:       664F9EE8EDC180D0CC48E66E8C49144BEC243DB6
Authority key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
Signing time:             Fri 24 Jan 2025 18:25:00 +0000
ROA not before:           Fri 24 Jan 2025 18:20:00 +0000
ROA not after:            Fri 23 Jan 2026 18:25:00 +0000
asID:                     271309
IP address blocks:        207.248.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl
                          rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:9e:e8:ed:c1:80:d0:cc:48:e6:6e:8c:49:14:4b:ec:24:3d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
        Validity
            Not Before: Jan 24 18:20:00 2025 GMT
            Not After : Jan 23 18:25:00 2026 GMT
        Subject: CN=4A3230356C16F850373EDEFCC2D3A19ED4325B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:63:28:51:69:7f:fc:89:a6:cf:55:b9:0c:
                    6a:b6:d5:46:a5:04:ca:72:4b:da:23:a2:a4:a3:9e:
                    45:13:e9:67:da:08:b6:e2:4d:7e:26:b0:56:14:b7:
                    cf:f6:77:bd:28:af:91:e3:37:ce:0b:84:b6:da:cb:
                    90:1f:a1:72:57:36:39:24:d6:54:56:f8:c9:68:39:
                    0a:89:c7:a6:54:6f:3e:29:9c:7c:cf:82:ec:17:fe:
                    79:a3:43:44:35:0c:1d:ae:c2:2c:16:75:45:1e:23:
                    d5:cc:2c:15:bf:00:e4:68:aa:84:c3:ad:58:d6:ea:
                    8b:6b:fb:cc:84:80:e4:ea:47:ca:1d:a4:78:d4:03:
                    13:e0:59:c5:a8:ac:22:46:13:ba:65:16:4d:ac:00:
                    e6:f1:b8:60:bf:e0:d8:79:7c:76:2f:ca:38:7a:8a:
                    75:73:76:03:c8:88:70:3e:f7:1a:a6:a5:97:92:fa:
                    1e:b1:e5:2a:f2:32:b7:32:50:a4:c7:94:04:a4:e7:
                    27:37:cb:81:df:2a:17:3d:fc:a7:32:32:a4:a5:ad:
                    7b:5b:b9:fe:ee:19:eb:fb:3a:ac:d0:79:6e:31:9e:
                    b0:8b:e0:97:99:e5:b0:8d:46:60:66:b8:4a:67:43:
                    fa:ef:04:c7:98:1b:cc:d3:cb:36:69:1b:ec:46:aa:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:30:35:6C:16:F8:50:37:3E:DE:FC:C2:D3:A1:9E:D4:32:5B:0E
            X509v3 Authority Key Identifier:
                keyid:FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:75:65:73:c7:7b:05:dd:fc:4d:e9:42:1c:85:11:30:60:
         7a:5e:3a:ac:68:51:a8:61:81:92:34:0e:6a:97:08:c0:8e:5f:
         6e:dc:12:99:89:36:f8:4d:44:72:b5:e4:a3:67:7e:f6:59:27:
         07:28:4f:76:e8:17:76:44:53:be:ed:45:73:c4:db:82:bd:1a:
         7b:17:ab:6f:6f:b4:fd:d8:ed:91:03:16:d4:ff:7c:cc:a8:2c:
         47:f4:a6:14:9b:48:91:1c:a6:70:e0:1b:fb:f9:67:61:ba:13:
         b3:7e:06:28:fb:6e:78:69:21:be:8b:7d:b8:ed:1b:a3:f7:3f:
         2b:24:08:1c:04:3f:a4:57:e4:5b:80:be:ae:4d:8e:e8:66:9d:
         33:35:d9:96:59:27:7a:fb:73:b2:c0:d2:04:bd:ae:5f:e3:af:
         d6:f2:60:bf:b6:56:03:41:c5:82:1f:a3:45:12:3f:7f:df:bb:
         a8:ed:07:56:4b:f4:f6:cb:b8:3a:12:38:83:aa:bd:f2:88:b8:
         5a:d8:ee:ce:4b:b4:22:62:34:60:c3:1d:df:77:1d:04:5d:57:
         22:e7:d2:63:8d:43:ec:d6:97:43:1e:e0:a7:d2:82:bb:0f:7c:
         d8:21:2f:45:30:7d:9e:2d:85:da:f9:7c:c9:22:88:92:d5:d2:
         46:b5:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:25:25 2025 by rpki-client