Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e2037303239.roa
File:                     3230302e3232302e3137322e302f32322d3232203d3e2037303239.roa (raw, json)
Hash identifier:          thA2NQyncNvuBXT2iHmynxGSgjo3+GAvrdVRBU2AUWI=
Subject key identifier:   D9:4B:AE:AA:D3:71:A4:95:8A:90:99:FA:C6:24:C1:6C:57:DD:5B:26
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       0FF1A1754ADD2EA6F4A8989845A7601CA3D5BBFD
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e2037303239.roa
Signing time:             Mon 29 Apr 2024 16:42:57 +0000
ROA not before:           Mon 29 Apr 2024 16:37:57 +0000
ROA not after:            Mon 28 Apr 2025 16:42:57 +0000
asID:                     7029
IP address blocks:        200.220.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:a1:75:4a:dd:2e:a6:f4:a8:98:98:45:a7:60:1c:a3:d5:bb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr 29 16:37:57 2024 GMT
            Not After : Apr 28 16:42:57 2025 GMT
        Subject: CN=D94BAEAAD371A4958A9099FAC624C16C57DD5B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:0f:a7:c3:16:67:b1:8c:32:69:78:68:a2:
                    47:bc:10:17:c5:de:98:a6:9e:cf:76:59:29:d4:e1:
                    d1:47:95:dd:cb:de:07:0b:82:c2:d2:df:67:ae:92:
                    a4:6d:ba:c9:63:9d:ee:8e:88:47:fa:d3:36:cd:b8:
                    fc:f5:6e:d3:11:35:6e:4c:90:74:b8:c6:22:1e:92:
                    a2:11:f9:48:1b:17:ff:3d:8f:6b:0e:bb:2f:81:8f:
                    69:32:6f:13:29:25:48:ca:29:c2:6b:fb:68:66:ee:
                    ce:d7:51:27:0f:fa:1e:f1:3e:b6:25:42:71:63:29:
                    68:6d:4f:50:0d:cd:e2:bc:62:40:89:55:7e:b9:a1:
                    bf:eb:e1:58:03:3e:6e:c8:02:71:92:ec:89:f7:56:
                    95:c3:27:eb:60:6f:17:c7:bf:e0:d3:e1:bc:0e:d5:
                    27:f9:1a:71:28:a7:57:b2:be:75:0b:09:6f:26:80:
                    52:9f:bd:38:27:da:70:95:fd:11:1e:0f:f0:d6:92:
                    80:a8:1a:1d:7d:6a:6b:cc:c1:b2:14:04:a3:f9:da:
                    f1:71:b5:89:33:50:a7:a0:9c:a2:71:cc:c3:ff:f2:
                    d4:27:16:94:3d:c9:b1:33:8d:38:de:4f:94:ad:ca:
                    4b:71:e1:08:b9:58:b5:af:77:fc:b4:90:f0:77:6d:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4B:AE:AA:D3:71:A4:95:8A:90:99:FA:C6:24:C1:6C:57:DD:5B:26
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:86:02:ca:00:b8:a0:d6:44:c6:63:67:da:0a:bd:d9:d7:
         d4:b8:25:af:5e:90:55:75:82:9c:39:d5:90:31:ed:ec:e7:74:
         6c:b7:7c:76:2a:e4:8c:b0:b2:63:f9:c9:4b:2d:73:86:ce:a4:
         36:8a:6a:84:0c:db:bf:8c:db:4b:23:60:00:f1:e9:af:15:06:
         b5:2a:0e:15:62:b6:91:35:94:3f:b3:9e:1b:3d:6e:24:40:32:
         79:bc:f0:ed:41:e2:5c:4c:62:84:11:fa:44:94:4e:6a:4e:8a:
         48:3f:b8:49:ab:61:d2:16:02:32:bb:57:e9:95:7e:f0:dd:ca:
         41:c8:42:74:62:4f:0a:00:30:b3:78:d7:53:3a:87:71:c5:6c:
         66:f2:41:b8:4e:cf:62:58:c9:45:0b:82:d4:28:f4:79:0b:da:
         0e:d7:09:1e:42:eb:b9:38:c9:fe:ce:53:df:24:18:ea:de:e4:
         e6:a4:e4:12:e1:8a:6f:6b:6c:c2:f3:20:99:e6:c6:6b:a8:29:
         3d:a7:05:92:12:8b:74:3a:61:25:49:de:26:e6:18:ac:cc:2b:
         ec:ab:67:c1:1f:e6:65:99:60:13:62:01:1d:69:01:bc:28:0f:
         e2:94:33:57:c2:16:04:a7:48:f1:24:9c:0c:b7:53:74:de:00:
         f2:9d:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:32 2024 by rpki-client on console-ams.rpki-client.org