Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa (raw, json)
Hash identifier:          jzsOU9MtqRNgIJYQJAlki54r84iezbfNWcPeO+Ngl78=
Subject key identifier:   BB:E8:AF:79:96:2D:55:D6:CB:ED:E8:E2:17:21:67:A1:F5:24:7A:5F
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       3744D44E29B3C65F8F4621F3D9E8BB65BE942A67
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:44:d4:4e:29:b3:c6:5f:8f:46:21:f3:d9:e8:bb:65:be:94:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=BBE8AF79962D55D6CBEDE8E2172167A1F5247A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:2d:50:fb:ac:97:f0:d0:25:e6:b1:b7:7b:
                    69:63:19:8d:07:85:0b:af:f1:f0:17:9d:d9:ba:de:
                    fe:53:1d:c9:81:2f:f7:8c:fa:8e:f3:33:d7:5d:bf:
                    38:8f:9d:46:78:95:37:a8:94:ce:fd:46:91:db:6e:
                    9e:b3:70:9b:e0:0a:ea:cd:dc:e7:d3:53:20:b7:a8:
                    7e:11:0e:1d:a3:da:78:fa:f2:31:46:93:98:6c:a9:
                    eb:95:cc:7e:4e:f2:e6:77:27:91:24:53:46:bf:d5:
                    b4:04:45:3e:c7:99:a3:27:9d:a5:20:49:b1:cd:6a:
                    df:f7:5a:ee:8c:37:06:79:dc:9d:f8:59:95:2c:cb:
                    72:b4:83:ef:10:2c:91:fc:77:a2:07:4b:81:51:47:
                    59:63:1e:f9:84:d4:4b:e4:3a:80:1c:7f:db:2e:55:
                    5b:d0:01:11:22:2f:ae:d9:5e:6e:4b:72:dc:43:95:
                    6f:02:94:01:f7:f9:81:5c:ff:79:5b:c9:1b:e6:4f:
                    8c:05:f6:8e:8c:26:3e:8b:ad:a3:5c:c8:ff:04:a1:
                    1f:16:53:8f:e4:f7:84:89:b7:df:24:e1:6e:e3:3e:
                    61:06:e3:7a:94:98:4c:80:6f:70:41:1a:34:cc:d5:
                    bb:e4:20:b4:3c:8f:bf:e8:80:9f:58:b5:69:08:db:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E8:AF:79:96:2D:55:D6:CB:ED:E8:E2:17:21:67:A1:F5:24:7A:5F
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:94:37:be:33:72:ef:26:0f:ac:93:cf:6e:32:18:10:07:a0:
         2f:d8:95:c7:da:ef:39:97:4c:98:71:b1:12:88:7f:22:fb:04:
         63:f8:39:ba:96:fe:02:25:43:a2:57:2c:10:7e:d3:69:1c:e1:
         8d:0c:77:cf:da:04:db:d9:f6:24:00:16:59:cf:2f:9b:5e:be:
         fd:27:fe:ff:4b:77:ab:f1:6b:11:bd:a7:17:c0:ec:f9:47:d9:
         02:17:48:30:bb:19:ce:6e:30:15:d5:fb:34:2c:92:55:15:07:
         97:c0:8f:21:d4:cf:48:bb:88:bd:ca:36:0f:f8:f1:a3:ac:0f:
         ae:ce:68:3b:12:f4:3d:2e:33:80:9c:10:97:33:77:7f:f6:1c:
         31:55:a5:da:27:39:27:8a:9b:0c:b8:ed:68:64:23:56:3b:95:
         5b:19:20:c4:a5:0b:b1:1b:74:3d:fb:17:a4:45:78:4f:18:92:
         42:11:6f:e3:94:d5:0d:d6:1d:d1:b9:48:1b:92:bd:06:f0:b4:
         ab:b6:94:2b:45:dc:77:a5:24:67:96:84:fc:cd:de:83:55:64:
         b3:e9:68:07:df:23:a5:db:57:79:18:22:72:d1:a4:2d:c9:79:
         6c:f8:fb:87:f9:be:ff:a3:89:4b:c5:cb:1f:70:1f:4d:5c:ef:
         53:43:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:40 2025 by rpki-client