Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          LGEtNFI3J6E26idyG5ijJZOCg8614Z6DkQi97dSznhU=
Subject key identifier:   14:5A:0F:D4:68:61:BE:A2:E1:29:FB:20:77:AC:93:98:82:A6:99:C3
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       721DD783B4770280F3BEEE8530E85BF61E24F6E3
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa
Signing time:             Fri 06 Jun 2025 14:27:37 +0000
ROA not before:           Fri 06 Jun 2025 14:22:37 +0000
ROA not after:            Fri 05 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1d:d7:83:b4:77:02:80:f3:be:ee:85:30:e8:5b:f6:1e:24:f6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  6 14:22:37 2025 GMT
            Not After : Jun  5 14:27:37 2026 GMT
        Subject: CN=145A0FD46861BEA2E129FB2077AC939882A699C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:0e:0b:7a:59:74:9f:eb:42:a2:8d:20:66:
                    de:22:53:37:38:ff:a8:b4:86:c4:67:d9:a0:ec:e6:
                    4f:93:22:48:61:2e:0a:42:0c:cf:40:f8:d4:60:a4:
                    79:25:8a:84:df:d8:a5:5e:87:3e:bf:91:b8:d4:29:
                    c7:4f:2f:08:bf:82:c1:e4:af:13:56:ff:7b:08:fd:
                    84:f4:e9:2a:bb:cb:3f:a3:57:d7:9b:87:8c:3e:f6:
                    1e:2d:86:cf:bd:b2:48:13:4a:4d:4b:5d:4e:7a:81:
                    ca:30:00:04:7d:e0:3e:34:80:65:d4:10:4a:a2:d2:
                    fc:38:c3:24:9e:51:1c:e7:d5:ec:6b:7c:1b:40:43:
                    f9:8d:54:ba:3d:95:dc:d2:b1:bc:fe:ae:d2:39:f0:
                    13:72:f4:5d:0a:ea:d6:6a:d5:d0:ed:ae:ab:15:1f:
                    f0:ff:6c:68:be:8e:ad:ed:c3:ab:46:a9:2b:f8:37:
                    1c:36:bc:8b:ab:37:a1:57:af:91:eb:d3:8b:83:e4:
                    5a:b8:5e:2c:64:18:e2:34:65:92:c3:bf:34:e0:a2:
                    c0:fc:82:40:7c:c3:a0:02:70:07:e4:17:c2:ca:4b:
                    f9:ae:56:7d:29:fc:21:cc:cb:a8:fd:f3:42:c8:98:
                    e9:29:c4:bf:a3:9f:cc:75:82:7a:aa:d9:43:8e:64:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:0F:D4:68:61:BE:A2:E1:29:FB:20:77:AC:93:98:82:A6:99:C3
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:d1:a0:ee:fe:3d:ff:89:78:2e:be:54:23:5e:ed:7a:3f:
         1d:12:91:f7:62:7c:d6:38:80:51:e0:ca:d6:95:e5:b9:3e:1b:
         31:14:b4:88:dd:57:80:8c:31:aa:0f:bd:12:34:d3:a2:8d:11:
         22:54:86:fb:24:fe:cf:bc:24:d6:6d:30:43:ad:3b:e1:ab:04:
         4c:bc:4f:f2:8d:df:a8:b1:fd:bb:90:e0:47:e2:e8:82:91:af:
         21:4d:01:97:a5:d7:48:ba:00:77:93:21:8a:06:cc:9f:60:9c:
         9d:18:4b:a7:92:41:67:93:90:b3:c5:ca:d7:27:2d:b8:3b:c7:
         c1:07:41:9c:a9:30:f1:d1:01:ad:aa:f0:a4:de:ba:87:98:81:
         78:ce:c0:67:45:07:87:db:8d:88:fd:fa:5b:92:ed:2d:dc:18:
         fb:2b:28:65:2d:23:eb:2d:34:f4:d4:58:70:c0:44:1d:db:f9:
         cd:07:c1:39:b0:3b:93:fd:d7:15:8d:15:86:93:7d:3b:10:72:
         79:a7:74:ef:ff:04:c9:7e:00:8c:f8:56:4d:a4:4a:cc:a7:68:
         7b:9e:ac:3a:a0:ef:e0:9f:24:55:4f:62:91:23:71:07:69:4b:
         f5:1e:43:88:f6:ab:47:fd:25:dd:e2:70:39:fd:21:f6:1b:31:
         d0:2c:39:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUch3Xg7R3AoDzvu6FMOhb9h4k9uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNTA2MDYxNDIyMzdaFw0yNjA2MDUxNDI3MzdaMDMxMTAvBgNV
BAMTKDE0NUEwRkQ0Njg2MUJFQTJFMTI5RkIyMDc3QUM5Mzk4ODJBNjk5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sA4Lell0n+tCoo0gZt4iUzc4
/6i0hsRn2aDs5k+TIkhhLgpCDM9A+NRgpHklioTf2KVehz6/kbjUKcdPLwi/gsHk
rxNW/3sI/YT06Sq7yz+jV9ebh4w+9h4ths+9skgTSk1LXU56gcowAAR94D40gGXU
EEqi0vw4wySeURzn1exrfBtAQ/mNVLo9ldzSsbz+rtI58BNy9F0K6tZq1dDtrqsV
H/D/bGi+jq3tw6tGqSv4Nxw2vIurN6FXr5Hr04uD5Fq4XixkGOI0ZZLDvzTgosD8
gkB8w6ACcAfkF8LKS/muVn0p/CHMy6j980LImOkpxL+jn8x1gnqq2UOOZJcpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFFoP1GhhvqLhKfsgd6yTmIKmmcMwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI3KAwDQYJKoZIhvcNAQELBQADggEBAB9t0aDu
/j3/iXguvlQjXu16Px0SkfdifNY4gFHgytaV5bk+GzEUtIjdV4CMMaoPvRI006KN
ESJUhvsk/s+8JNZtMEOtO+GrBEy8T/KN36ix/buQ4Efi6IKRryFNAZel10i6AHeT
IYoGzJ9gnJ0YS6eSQWeTkLPFytcnLbg7x8EHQZypMPHRAa2q8KTeuoeYgXjOwGdF
B4fbjYj9+luS7S3cGPsrKGUtI+stNPTUWHDARB3b+c0HwTmwO5P91xWNFYaTfTsQ
cnmndO//BMl+AIz4Vk2kSsynaHuerDqg7+CfJFVPYpEjcQdpS/UeQ4j2q0f9Jd3i
cDn9IfYbMdAsOXU=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:36 2025 by rpki-client