Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          iRof8HmC1RiqRYLq3lY3EB/Di6/ZuaQl8u2S8y6FXCI=
Subject key identifier:   CD:A8:CD:EA:1C:48:ED:AC:D2:65:48:90:AE:54:C1:FB:A8:3D:8D:84
Certificate issuer:       /CN=78F1584B27A57805343587E532998410F6B69D3A
Certificate serial:       38E2412BFB0B8D397F43B8BB7AAB2322F689B1DC
Authority key identifier: 78:F1:58:4B:27:A5:78:05:34:35:87:E5:32:99:84:10:F6:B6:9D:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78F1584B27A57805343587E532998410F6B69D3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
Signing time:             Wed 24 Jun 2026 19:06:12 +0000
ROA not before:           Wed 24 Jun 2026 19:01:12 +0000
ROA not after:            Wed 23 Jun 2027 19:06:12 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/78F1584B27A57805343587E532998410F6B69D3A.crl
                          rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/78F1584B27A57805343587E532998410F6B69D3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78F1584B27A57805343587E532998410F6B69D3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:41:2b:fb:0b:8d:39:7f:43:b8:bb:7a:ab:23:22:f6:89:b1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78F1584B27A57805343587E532998410F6B69D3A
        Validity
            Not Before: Jun 24 19:01:12 2026 GMT
            Not After : Jun 23 19:06:12 2027 GMT
        Subject: CN=CDA8CDEA1C48EDACD2654890AE54C1FBA83D8D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:90:99:86:92:75:00:2e:1f:78:be:50:3c:
                    48:e7:0d:a0:6a:55:d5:fc:74:f4:22:27:dd:d5:fc:
                    f2:39:64:64:bc:f8:3e:63:2d:a8:42:d9:36:ce:df:
                    db:9e:f0:aa:bb:b5:17:93:68:9f:36:53:19:0b:00:
                    17:b1:8e:01:e8:53:1b:e9:6c:25:29:94:08:aa:67:
                    53:be:e4:ac:f7:a1:33:42:25:9d:f3:f0:7c:5a:7c:
                    0d:1b:17:83:89:d9:4a:49:49:ba:25:45:98:18:53:
                    77:a5:9b:39:a4:b5:fd:8a:84:24:1a:57:d7:f9:c8:
                    90:0f:34:ba:d1:36:2d:e3:50:07:3a:96:ef:17:4c:
                    7b:4a:be:26:78:a6:c5:f5:33:30:2b:40:b9:8a:b0:
                    10:59:2a:03:12:d6:65:8c:a6:7c:e6:f5:17:1a:63:
                    ca:4e:41:37:96:c5:5b:4b:11:0b:5a:f3:71:bb:04:
                    76:d3:93:36:c0:e1:9a:9b:27:61:af:96:3e:4e:16:
                    85:48:1c:a5:15:41:28:8a:cb:31:2f:7d:bf:07:ff:
                    5d:46:bd:58:7d:6f:19:1d:e7:bc:e6:1e:58:66:97:
                    14:f6:f7:4c:c3:9d:f7:99:5e:f3:2b:fb:7a:a9:17:
                    55:76:87:56:c3:29:5e:96:77:0c:c3:cc:87:93:ec:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:CD:EA:1C:48:ED:AC:D2:65:48:90:AE:54:C1:FB:A8:3D:8D:84
            X509v3 Authority Key Identifier:
                keyid:78:F1:58:4B:27:A5:78:05:34:35:87:E5:32:99:84:10:F6:B6:9D:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/78F1584B27A57805343587E532998410F6B69D3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78F1584B27A57805343587E532998410F6B69D3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:35:bf:48:93:1e:65:1d:6e:21:f1:70:fa:f5:48:9c:da:23:
         04:34:80:2a:b8:6e:80:8c:17:df:b8:ab:66:88:84:f1:1a:fd:
         d3:5f:b0:7e:02:52:7a:6f:7a:7e:58:a9:81:0d:ab:12:a4:e0:
         be:88:c4:de:c2:ce:fa:f0:19:0a:53:de:ce:e0:dd:4d:a7:ab:
         2d:3a:64:12:0c:23:ca:21:1a:67:4e:55:ee:74:3d:d9:89:83:
         3f:b7:53:99:5a:16:87:ce:06:2f:08:83:a0:ed:8a:b1:fb:2b:
         2c:ef:bf:e6:d4:44:de:5e:d1:94:31:c6:e6:35:02:e8:42:0e:
         8b:ed:6e:2a:36:49:69:38:32:a8:2c:e9:2b:c9:82:a6:95:d6:
         80:e6:d5:f8:37:e1:cf:32:ff:2c:56:07:87:ff:92:dc:5d:21:
         ee:91:44:53:c7:55:66:d3:b9:8f:2d:c0:2f:e0:1b:57:3c:30:
         11:8b:af:ea:3a:6c:b7:c9:32:5a:12:8a:0a:11:50:f4:63:83:
         fc:3f:bb:82:aa:0b:3d:5b:6e:9b:f4:79:f8:3b:41:b4:b7:ab:
         3d:a7:c2:f4:9a:32:6d:ca:59:93:89:ee:1c:b7:93:21:46:8d:
         93:c7:0b:d0:ae:92:f6:c5:2d:e3:c2:ec:ca:30:da:57:65:c9:
         54:af:51:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOOJBK/sLjTl/Q7i7eqsjIvaJsdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhGMTU4NEIyN0E1NzgwNTM0MzU4N0U1MzI5OTg0MTBG
NkI2OUQzQTAeFw0yNjA2MjQxOTAxMTJaFw0yNzA2MjMxOTA2MTJaMDMxMTAvBgNV
BAMTKENEQThDREVBMUM0OEVEQUNEMjY1NDg5MEFFNTRDMUZCQTgzRDhEODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2pCZhpJ1AC4feL5QPEjnDaBq
VdX8dPQiJ93V/PI5ZGS8+D5jLahC2TbO39ue8Kq7tReTaJ82UxkLABexjgHoUxvp
bCUplAiqZ1O+5Kz3oTNCJZ3z8HxafA0bF4OJ2UpJSbolRZgYU3elmzmktf2KhCQa
V9f5yJAPNLrRNi3jUAc6lu8XTHtKviZ4psX1MzArQLmKsBBZKgMS1mWMpnzm9Rca
Y8pOQTeWxVtLEQta83G7BHbTkzbA4ZqbJ2Gvlj5OFoVIHKUVQSiKyzEvfb8H/11G
vVh9bxkd57zmHlhmlxT290zDnfeZXvMr+3qpF1V2h1bDKV6WdwzDzIeT7FknAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzajN6hxI7azSZUiQrlTB+6g9jYQwHwYDVR0j
BBgwFoAUePFYSyeleAU0NYflMpmEEPa2nTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkdwY1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJzVjUxVzFIWEVv
R3MvMC83OEYxNTg0QjI3QTU3ODA1MzQzNTg3RTUzMjk5ODQxMEY2QjY5RDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RjE1ODRCMjdBNTc4MDUz
NDM1ODdFNTMyOTk4NDEwRjZCNjlEM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZHcGNYcENWQ0Z6dk1ROHVKblZqamtZelJodnlqbk4yc1Y1MVcxSFhFb0dzLzAv
MzIzMDM3MmUzMjM0MzgyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALP+BQwDQYJKoZIhvcNAQELBQADggEBALI1v0iT
HmUdbiHxcPr1SJzaIwQ0gCq4boCMF9+4q2aIhPEa/dNfsH4CUnpven5YqYENqxKk
4L6IxN7CzvrwGQpT3s7g3U2nqy06ZBIMI8ohGmdOVe50PdmJgz+3U5laFofOBi8I
g6DtirH7Kyzvv+bURN5e0ZQxxuY1AuhCDovtbio2SWk4Mqgs6SvJgqaV1oDm1fg3
4c8y/yxWB4f/ktxdIe6RRFPHVWbTuY8twC/gG1c8MBGLr+o6bLfJMloSigoRUPRj
g/w/u4KqCz1bbpv0efg7QbS3qz2nwvSaMm3KWZOJ7hy3kyFGjZPHC9CukvbFLePC
7Mow2ldlyVSvUWg=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:16:36 2026 by rpki-client