Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136302e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          dpeV6YzgI9gdvUUya9O44FRbAV6A4chRNGFUTd4S3r4=
Subject key identifier:   92:87:51:27:F5:25:DE:24:49:A7:7F:0A:CB:82:01:5D:9A:A6:35:B5
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       0BF255AC2CD5FF30DE570C4B2235C466418BD110
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32342d3234203d3e203237373132.roa
Signing time:             Mon 01 Jul 2024 13:27:22 +0000
ROA not before:           Mon 01 Jul 2024 13:22:22 +0000
ROA not after:            Mon 30 Jun 2025 13:27:22 +0000
asID:                     27712
IP address blocks:        200.220.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f2:55:ac:2c:d5:ff:30:de:57:0c:4b:22:35:c4:66:41:8b:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 13:22:22 2024 GMT
            Not After : Jun 30 13:27:22 2025 GMT
        Subject: CN=92875127F525DE2449A77F0ACB82015D9AA635B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:eb:6b:72:fd:89:9a:0f:42:21:0c:11:6b:
                    5a:d4:a7:cc:9d:4e:3c:3c:2b:e9:07:a6:22:35:58:
                    14:51:da:0d:7f:e5:07:d3:bf:fe:39:4b:c7:00:bc:
                    01:eb:cf:ca:aa:2c:bf:6d:2e:f5:db:29:05:08:43:
                    ff:17:23:fc:b5:cf:75:29:18:ab:49:1d:a4:4c:3a:
                    a7:29:58:a3:1a:84:e3:94:dd:b2:16:22:20:10:a6:
                    b8:83:9e:79:10:bf:f9:ff:ae:94:da:01:c1:e2:52:
                    78:0d:74:17:1c:ef:2a:54:d8:c4:e1:0d:7a:2a:4e:
                    6d:d8:f4:de:91:82:46:c6:8a:06:44:9a:2d:46:76:
                    ed:4a:42:50:30:4c:b7:e2:07:9b:38:04:9b:64:a4:
                    28:9e:bb:30:ab:c4:19:8b:e5:c0:e0:99:e9:8b:95:
                    fe:f6:be:6c:68:98:7c:dd:2d:6a:95:a6:7c:86:f7:
                    9e:80:d7:f3:69:0f:21:c5:11:d0:eb:c9:cd:63:a8:
                    d0:fe:06:51:4e:42:2c:bc:71:ce:4d:d9:d1:2d:56:
                    9f:fc:62:98:8a:e5:2b:b3:d8:5d:9d:39:d2:9d:9e:
                    1c:cd:76:1d:8b:54:d5:80:e2:d0:0c:bd:ee:bc:37:
                    3a:ce:e7:12:90:bc:df:10:c2:c5:fd:17:b1:4a:66:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:87:51:27:F5:25:DE:24:49:A7:7F:0A:CB:82:01:5D:9A:A6:35:B5
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7c:e5:da:61:f2:eb:fb:95:fb:6f:78:d6:d3:6f:63:f3:96:
         23:e3:84:18:0d:aa:88:7a:cd:c8:af:c8:13:06:f2:e5:db:25:
         56:dc:9f:44:27:03:c0:9c:bf:a8:9a:6c:7a:03:cb:b5:f3:34:
         12:e0:37:0e:18:02:30:56:1c:fd:03:70:d6:4e:ba:fb:f5:ac:
         62:62:d9:19:0c:f3:30:58:e7:88:43:fa:cd:bd:09:e1:30:2e:
         2b:2f:16:3b:30:35:c2:51:fe:ff:29:e8:51:af:4a:68:9a:76:
         64:b3:2d:fe:0d:53:c9:4c:fd:f8:a0:95:2a:ab:43:61:a0:5c:
         87:5e:50:fd:7d:2d:ba:8e:3a:df:a1:ec:ce:31:a8:04:70:71:
         97:60:c0:30:fa:07:10:97:18:f6:d8:90:d0:aa:3e:85:12:f4:
         25:14:09:73:32:de:8b:6a:2f:19:ef:ff:b2:db:f0:74:55:5b:
         f9:4a:25:bb:b9:ce:de:73:a9:ad:16:a7:2a:aa:1d:21:e6:be:
         5f:40:ff:92:ff:13:47:83:91:98:e7:b0:d7:28:e7:13:54:fb:
         c6:70:93:8a:2f:e8:ee:83:2c:eb:b9:d2:77:49:4b:eb:10:87:
         3e:e9:da:ad:d5:7a:be:af:e4:42:28:08:c9:ba:60:82:38:33:
         02:1d:ac:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC/JVrCzV/zDeVwxLIjXEZkGL0RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNDA3MDExMzIyMjJaFw0yNTA2MzAxMzI3MjJaMDMxMTAvBgNV
BAMTKDkyODc1MTI3RjUyNURFMjQ0OUE3N0YwQUNCODIwMTVEOUFBNjM1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjetrcv2Jmg9CIQwRa1rUp8yd
Tjw8K+kHpiI1WBRR2g1/5QfTv/45S8cAvAHrz8qqLL9tLvXbKQUIQ/8XI/y1z3Up
GKtJHaRMOqcpWKMahOOU3bIWIiAQpriDnnkQv/n/rpTaAcHiUngNdBcc7ypU2MTh
DXoqTm3Y9N6RgkbGigZEmi1Gdu1KQlAwTLfiB5s4BJtkpCieuzCrxBmL5cDgmemL
lf72vmxomHzdLWqVpnyG956A1/NpDyHFEdDryc1jqND+BlFOQiy8cc5N2dEtVp/8
YpiK5Suz2F2dOdKdnhzNdh2LVNWA4tAMve68NzrO5xKQvN8QwsX9F7FKZlzfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkodRJ/Ul3iRJp38Ky4IBXZqmNbUwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3KAwDQYJKoZIhvcNAQELBQADggEBAK585dph
8uv7lftveNbTb2PzliPjhBgNqoh6zcivyBMG8uXbJVbcn0QnA8Ccv6iabHoDy7Xz
NBLgNw4YAjBWHP0DcNZOuvv1rGJi2RkM8zBY54hD+s29CeEwLisvFjswNcJR/v8p
6FGvSmiadmSzLf4NU8lM/figlSqrQ2GgXIdeUP19LbqOOt+h7M4xqARwcZdgwDD6
BxCXGPbYkNCqPoUS9CUUCXMy3otqLxnv/7Lb8HRVW/lKJbu5zt5zqa0WpyqqHSHm
vl9A/5L/E0eDkZjnsNco5xNU+8Zwk4ov6O6DLOu50ndJS+sQhz7p2q3Ver6v5EIo
CMm6YII4MwIdrNk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:45 2024 by rpki-client on console-fra.rpki-client.org