Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          hNZKYfhMBsRUT3/lp0VWMpRJZLlzB8JPRWgVKtzh7Kg=
Subject key identifier:   13:BE:A9:EF:6D:F0:E0:F3:BB:7D:CE:68:03:AB:66:07:46:E9:BB:C6
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       78F4D88B11E49788788D73508CED6D1664FF6941
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa
Signing time:             Thu 21 May 2026 17:21:31 +0000
ROA not before:           Thu 21 May 2026 17:16:31 +0000
ROA not after:            Thu 20 May 2027 17:21:31 +0000
asID:                     27712
IP address blocks:        200.220.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f4:d8:8b:11:e4:97:88:78:8d:73:50:8c:ed:6d:16:64:ff:69:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May 21 17:16:31 2026 GMT
            Not After : May 20 17:21:31 2027 GMT
        Subject: CN=13BEA9EF6DF0E0F3BB7DCE6803AB660746E9BBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cb:0a:86:10:2f:71:09:49:14:81:05:90:e5:
                    94:59:6c:0e:70:dc:2e:57:6c:ff:c1:8f:2b:ce:a9:
                    51:02:19:1e:42:8e:b4:bd:44:72:23:81:6b:d2:8f:
                    44:db:4a:e9:7d:65:90:48:28:ae:04:8b:06:8f:10:
                    8d:cd:e1:ab:0b:11:7a:ae:cb:08:11:94:d8:c8:81:
                    4c:99:0e:3c:f8:44:c0:54:ca:8a:52:06:95:00:d2:
                    f4:7e:dd:95:82:55:f4:91:2c:cc:b8:fa:47:35:ee:
                    0f:16:c4:6e:ad:80:2e:7d:20:0d:09:4c:7f:7b:7e:
                    8d:39:c8:b2:0a:ae:74:48:9a:c9:04:95:41:a4:17:
                    42:24:5e:a2:92:4a:58:0f:2b:30:92:67:76:20:5b:
                    f8:38:d1:f5:77:45:4f:0c:96:32:a7:69:0c:19:2b:
                    13:da:e4:a4:0d:c7:98:48:36:f4:46:9b:86:2a:a0:
                    b4:3d:77:61:dc:f9:bf:d1:a0:81:b1:7e:0b:f2:68:
                    fc:7a:4c:1d:19:19:41:e1:72:d7:40:76:66:cf:ba:
                    d0:c4:6d:f7:55:b7:79:43:a7:93:e9:f6:3a:6e:e7:
                    f3:66:62:af:ba:c2:84:f1:9a:24:8c:6f:93:d9:ba:
                    78:41:40:f3:6b:4f:4a:bb:7d:22:6a:cc:3d:b6:ee:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:A9:EF:6D:F0:E0:F3:BB:7D:CE:68:03:AB:66:07:46:E9:BB:C6
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:26:7d:8c:5c:7d:0a:4c:d1:07:a0:5c:e2:35:d5:72:a5:
         6e:4d:38:26:b9:bb:34:05:79:81:c8:6c:a3:ae:bc:11:e6:95:
         e1:2b:0e:4a:79:30:a5:0e:aa:71:80:a6:37:a5:c8:d5:01:f2:
         13:20:98:92:17:09:27:6d:64:d3:f8:7e:79:e9:ce:94:08:5e:
         73:b1:b6:7d:07:e0:25:9a:b8:59:00:8a:54:2b:fa:24:ca:29:
         6a:3a:f6:4a:0e:e1:60:49:42:43:0a:68:bd:96:8c:9e:f2:81:
         e3:36:c8:27:97:82:80:d9:52:54:84:78:fd:72:0e:8e:e0:f8:
         8c:ff:d6:23:6c:81:40:bb:3a:35:e1:cd:2e:22:c3:11:0c:59:
         60:98:57:da:97:45:06:36:11:98:b4:08:c3:09:69:03:62:73:
         db:7f:a8:37:e1:0e:8f:d0:54:98:3d:7b:68:5c:2f:6c:07:db:
         a5:ac:ad:ea:c7:e5:e6:5f:f6:c2:47:f6:23:32:eb:68:95:e7:
         72:ae:b4:c0:c9:da:69:7c:9e:14:9c:ae:39:e6:51:c5:86:95:
         08:7e:80:e4:e5:35:d1:bf:ee:e2:f6:b7:04:78:11:5f:39:f8:
         82:96:ef:59:6d:eb:16:61:e0:50:92:73:50:f0:d1:7d:55:c7:
         93:c1:32:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUePTYixHkl4h4jXNQjO1tFmT/aUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNjA1MjExNzE2MzFaFw0yNzA1MjAxNzIxMzFaMDMxMTAvBgNV
BAMTKDEzQkVBOUVGNkRGMEUwRjNCQjdEQ0U2ODAzQUI2NjA3NDZFOUJCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ywqGEC9xCUkUgQWQ5ZRZbA5w
3C5XbP/BjyvOqVECGR5CjrS9RHIjgWvSj0TbSul9ZZBIKK4EiwaPEI3N4asLEXqu
ywgRlNjIgUyZDjz4RMBUyopSBpUA0vR+3ZWCVfSRLMy4+kc17g8WxG6tgC59IA0J
TH97fo05yLIKrnRImskElUGkF0IkXqKSSlgPKzCSZ3YgW/g40fV3RU8MljKnaQwZ
KxPa5KQNx5hINvRGm4YqoLQ9d2Hc+b/RoIGxfgvyaPx6TB0ZGUHhctdAdmbPutDE
bfdVt3lDp5Pp9jpu5/NmYq+6woTxmiSMb5PZunhBQPNrT0q7fSJqzD227pdNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE76p723w4PO7fc5oA6tmB0bpu8YwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI3KAwDQYJKoZIhvcNAQELBQADggEBAG6CJn2M
XH0KTNEHoFziNdVypW5NOCa5uzQFeYHIbKOuvBHmleErDkp5MKUOqnGApjelyNUB
8hMgmJIXCSdtZNP4fnnpzpQIXnOxtn0H4CWauFkAilQr+iTKKWo69koO4WBJQkMK
aL2WjJ7ygeM2yCeXgoDZUlSEeP1yDo7g+Iz/1iNsgUC7OjXhzS4iwxEMWWCYV9qX
RQY2EZi0CMMJaQNic9t/qDfhDo/QVJg9e2hcL2wH26WsrerH5eZf9sJH9iMy62iV
53KutMDJ2ml8nhScrjnmUcWGlQh+gOTlNdG/7uL2twR4EV85+IKW71lt6xZh4FCS
c1Dw0X1Vx5PBMuM=
-----END CERTIFICATE-----
Generated at Sun May 24 14:44:41 2026 by rpki-client