Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa (raw, json)
Hash identifier:          8olmftv3ZmJnRaPWxwWoAY8xmQWrnZsU9zpUi3b1e0U=
Subject key identifier:   72:0A:04:93:43:50:CB:AD:9A:6C:45:01:A1:53:D6:B2:03:D5:F5:DA
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       65092B9262B92148FF7D5EEED025C3AAA097AE62
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa
Signing time:             Mon 01 Jul 2024 13:18:53 +0000
ROA not before:           Mon 01 Jul 2024 13:13:53 +0000
ROA not after:            Mon 30 Jun 2025 13:18:53 +0000
asID:                     27712
IP address blocks:        200.220.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:09:2b:92:62:b9:21:48:ff:7d:5e:ee:d0:25:c3:aa:a0:97:ae:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 13:13:53 2024 GMT
            Not After : Jun 30 13:18:53 2025 GMT
        Subject: CN=720A04934350CBAD9A6C4501A153D6B203D5F5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:0b:db:a8:78:cb:24:66:a5:a3:4e:d2:4f:
                    bb:5c:e1:65:e8:bd:e8:d9:cc:8b:49:d0:6b:44:d0:
                    e4:9e:d5:0b:f9:19:19:c6:8b:8e:64:c0:c3:8d:1b:
                    93:ff:4c:c3:e5:c5:cd:b4:01:80:cb:64:16:f3:d3:
                    82:f9:88:4b:6f:47:be:18:a7:3e:c0:9f:db:56:4d:
                    2f:05:3b:e8:23:bb:bc:89:0b:cc:b0:81:83:38:f4:
                    6b:60:eb:0f:e4:7a:cf:f7:c4:ef:62:02:f2:00:83:
                    c5:6f:2b:80:1f:ac:b3:48:6a:33:01:23:3d:47:10:
                    f8:b2:7b:f0:a3:6f:59:ba:48:cf:5d:28:91:d1:81:
                    71:8f:a0:b9:98:42:80:93:4a:41:e9:94:9b:1e:6b:
                    bd:a9:6f:a7:c8:3b:eb:7a:94:63:02:67:04:16:cb:
                    af:a9:d2:d6:2f:e7:76:4f:de:cc:d9:58:78:fd:dd:
                    33:bf:f3:8e:65:53:2e:c8:6d:40:68:58:b9:c1:b2:
                    24:90:de:23:4e:ba:94:e6:be:42:7d:30:4f:b4:a7:
                    58:7f:c2:37:36:1a:b1:70:7a:3c:1d:f0:f0:ad:c8:
                    94:60:58:39:59:7f:2d:74:bf:22:e1:80:6d:36:09:
                    d0:27:41:1e:34:7c:eb:b6:fb:69:aa:68:59:29:9d:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:04:93:43:50:CB:AD:9A:6C:45:01:A1:53:D6:B2:03:D5:F5:DA
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:87:6b:49:8e:0e:eb:f7:f2:2b:91:82:74:71:e8:ab:92:d0:
         53:5f:83:0d:ad:52:05:b2:7d:9f:e5:a3:c4:45:76:22:6e:00:
         08:93:d2:22:b6:dd:a2:bc:9b:ff:0d:41:a5:fb:6f:74:c9:4c:
         ee:33:85:91:27:cd:58:f4:6c:7d:5f:e3:b6:69:ca:48:d6:5d:
         21:fc:bb:d4:d1:fb:84:5f:2c:61:fe:49:be:0c:c0:a3:aa:cf:
         85:dd:0d:f4:c2:d1:30:7a:ec:a8:40:33:88:3e:12:27:0d:4f:
         06:92:4c:ca:19:8c:0e:dd:75:c8:40:67:34:36:85:01:f3:41:
         15:d5:a9:3d:d9:20:1d:4f:5f:77:dd:36:f3:b7:71:19:4f:c6:
         f9:c9:8b:39:33:46:e4:85:25:aa:c4:30:70:5e:96:26:48:7f:
         94:a4:93:75:b3:ee:af:e4:28:07:33:54:e1:b0:3c:cb:81:1f:
         45:0a:07:a6:2d:21:23:19:04:16:12:a8:9f:c6:1b:6c:91:b6:
         12:8d:22:bb:8b:42:e9:6d:83:32:b9:f4:e9:7a:0f:da:03:b2:
         13:06:94:60:1e:7e:e5:ee:ee:a8:53:f2:3b:a1:a5:3b:34:f3:
         66:4c:be:1d:10:43:ef:8f:e7:89:50:c9:02:1d:90:3e:b9:4d:
         93:6c:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:45 2024 by rpki-client on console-fra.rpki-client.org