Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          STiWj9HH9VGsPzzbehc1CRrLwWCsR31fKfQFqISOb8k=
Subject key identifier:   7D:80:8A:FD:4C:DC:00:AB:13:72:03:82:D9:1E:9D:56:83:12:07:66
Certificate issuer:       /CN=D407A692545E249527229055295FF37D45B9B8FA
Certificate serial:       563BE78CB672DAD3F4FA3029A43FF7FC5CABF743
Authority key identifier: D4:07:A6:92:54:5E:24:95:27:22:90:55:29:5F:F3:7D:45:B9:B8:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D407A692545E249527229055295FF37D45B9B8FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
Signing time:             Mon 06 Apr 2026 17:00:08 +0000
ROA not before:           Mon 06 Apr 2026 16:55:08 +0000
ROA not after:            Mon 05 Apr 2027 17:00:08 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/D407A692545E249527229055295FF37D45B9B8FA.crl
                          rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/D407A692545E249527229055295FF37D45B9B8FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D407A692545E249527229055295FF37D45B9B8FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 16:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:e7:8c:b6:72:da:d3:f4:fa:30:29:a4:3f:f7:fc:5c:ab:f7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D407A692545E249527229055295FF37D45B9B8FA
        Validity
            Not Before: Apr  6 16:55:08 2026 GMT
            Not After : Apr  5 17:00:08 2027 GMT
        Subject: CN=7D808AFD4CDC00AB13720382D91E9D5683120766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:f0:c4:8c:42:d5:f7:2a:36:c2:b8:1c:fc:
                    40:3f:74:59:f1:22:c0:f7:b7:75:b1:ba:11:f0:c6:
                    99:af:e9:7c:19:ac:b3:cc:12:c5:c7:73:1c:19:c4:
                    3d:ad:72:7c:8f:b9:c4:43:5e:fb:b1:95:69:52:b5:
                    d9:a0:75:37:d3:d8:88:39:3a:3b:79:98:c7:c3:31:
                    ce:b9:e8:1e:c6:62:6e:78:bc:a8:8e:66:6b:70:85:
                    57:c2:2d:31:9c:ba:92:a1:40:56:6e:20:23:e7:89:
                    0c:06:c8:92:b2:8d:94:06:4f:0a:09:21:38:54:6c:
                    4b:fc:f9:3d:d0:c0:0b:78:5b:e7:8c:66:f9:14:76:
                    55:35:13:4d:88:07:a4:29:df:50:62:ed:16:57:a7:
                    9a:53:0f:fb:54:58:ec:04:3d:8d:f8:d7:31:30:d0:
                    4b:00:07:36:3d:7f:d1:c1:46:7f:5c:be:b0:04:53:
                    8b:a6:53:25:2d:7c:ff:6a:a0:f1:1c:a4:a7:df:5c:
                    43:1c:6f:fe:0e:cb:01:d0:85:7e:ae:98:b1:42:3f:
                    77:5d:cf:e9:42:09:a4:b7:d3:9d:3f:48:d1:15:93:
                    2f:5d:5c:39:ac:fe:fc:45:64:86:5b:6e:9c:84:b5:
                    32:a4:7e:c5:d7:ed:53:7e:6b:78:ff:d4:f6:99:d4:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:8A:FD:4C:DC:00:AB:13:72:03:82:D9:1E:9D:56:83:12:07:66
            X509v3 Authority Key Identifier:
                keyid:D4:07:A6:92:54:5E:24:95:27:22:90:55:29:5F:F3:7D:45:B9:B8:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/D407A692545E249527229055295FF37D45B9B8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D407A692545E249527229055295FF37D45B9B8FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:54:b5:b9:ad:ea:21:8e:86:a7:b0:b4:8a:5a:27:ca:0d:16:
         3b:c4:15:4c:7f:cc:58:bc:9d:39:3c:ed:b9:ec:77:cb:34:5c:
         65:d1:d8:3c:26:9f:8c:bf:80:8b:67:c1:9b:1f:8c:49:e2:34:
         0e:9f:b0:16:ef:f8:5a:c3:35:77:4d:07:10:f4:a5:db:f9:3f:
         be:8c:98:42:6c:aa:02:93:ef:fc:d1:4b:25:54:be:dd:a4:fc:
         a5:de:bf:4e:42:ac:47:ef:d6:c2:d5:ef:22:c6:a2:0c:6d:a6:
         82:fc:d7:71:0e:90:2d:6c:57:bd:7a:db:d8:f8:65:4d:4c:23:
         7e:1f:f3:b7:e1:de:7d:c6:03:ed:b8:ec:3f:6a:17:c8:9b:25:
         7e:08:39:72:85:27:da:f7:f9:0c:f4:64:8d:e7:e5:08:a8:f0:
         6f:9b:2a:95:ce:16:f3:6b:a1:f9:c7:ca:80:89:5d:5c:ed:20:
         2e:92:1e:56:38:7e:d0:4f:c4:64:75:62:6b:eb:d2:08:aa:01:
         50:36:eb:e2:01:bf:ee:dc:38:26:9d:d7:de:75:07:ac:b6:fa:
         70:05:11:e2:b2:ec:4d:b8:0b:eb:fa:90:26:72:60:da:03:40:
         42:b7:b1:74:dc:c6:cb:a9:d9:7a:bc:a5:e2:84:4a:da:50:76:
         90:c9:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:28 2026 by rpki-client