Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136312e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136312e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          RY5hm0sOS0gQd6coPJAH2snXumFkGLJJ4GG/mTFN2P4=
Subject key identifier:   FE:36:1B:22:54:59:9E:66:AB:FB:7C:6A:2B:3D:A4:4A:C6:0B:0E:3E
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       699C40F86C8D0DC9675FDC67A07A5034812F67EB
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136312e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9c:40:f8:6c:8d:0d:c9:67:5f:dc:67:a0:7a:50:34:81:2f:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=FE361B2254599E66ABFB7C6A2B3DA44AC60B0E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:0a:39:a1:ee:ef:70:d2:25:56:75:92:e7:
                    e8:ad:20:7e:51:b8:f3:84:b0:9d:f1:69:d0:a7:3e:
                    f9:79:d2:7d:e9:1e:e7:5d:6b:32:fe:1e:de:e3:07:
                    09:94:2c:cf:79:b6:5c:41:01:ea:63:7c:65:f3:62:
                    38:b1:77:e4:e9:e0:df:4f:ac:58:c0:bc:be:f5:82:
                    06:c9:8e:00:07:0c:da:d9:18:d0:2b:9a:f0:bf:c5:
                    12:9e:47:32:53:ee:75:93:5a:88:e7:a3:ff:b6:b7:
                    b8:59:66:61:07:62:2c:b5:65:39:82:06:47:a1:09:
                    d4:eb:4c:3c:f5:5a:19:35:fd:76:20:fb:f0:46:99:
                    cd:13:ce:5a:58:83:3b:38:29:6b:4e:ee:c3:d0:d9:
                    da:26:6f:2e:e0:2a:5e:22:dc:a2:cc:8f:de:11:be:
                    ff:d9:90:2d:0e:b7:02:ec:9f:b2:ed:01:eb:4f:43:
                    0f:6f:89:9a:af:20:79:6e:1d:7c:c6:15:a5:13:e1:
                    a7:f1:c5:0d:00:1a:27:7b:50:d5:74:68:fb:80:62:
                    a0:6a:79:ea:3c:e3:c0:55:e5:94:34:35:1a:f8:91:
                    53:da:63:f0:0b:b6:a5:3a:92:4d:58:56:50:9a:83:
                    0c:17:9d:46:d4:32:71:47:8f:f1:ae:81:ca:89:45:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:1B:22:54:59:9E:66:AB:FB:7C:6A:2B:3D:A4:4A:C6:0B:0E:3E
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136312e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:29:85:b6:23:dd:1f:43:c3:f2:0c:bd:52:30:ce:28:45:d6:
         d1:b9:8d:f8:95:b2:33:e0:c7:8f:64:6b:00:26:ad:d7:7c:72:
         8f:2a:75:2b:e6:70:26:9d:2c:75:07:76:8c:94:27:3a:57:a9:
         85:32:21:4f:96:ba:a9:15:aa:35:b7:f6:72:54:50:a9:ff:8d:
         e5:05:38:f2:ff:34:5f:32:4a:07:93:0a:18:59:d0:ea:27:0a:
         80:3e:9c:06:ab:cc:0c:7b:cd:3b:5e:52:05:31:f2:fb:b4:37:
         22:93:37:2f:68:30:ee:ba:1b:03:fb:ec:4b:28:fa:d5:a7:11:
         84:91:1d:70:55:b2:05:41:be:17:cd:51:cf:df:ec:ac:6b:2b:
         0f:cb:35:2a:c1:0b:f4:5c:b2:11:85:63:fa:0f:33:80:56:5f:
         85:0e:ff:79:b2:93:1c:ff:d7:87:0e:0b:38:cc:8e:e1:f8:01:
         29:99:30:1d:ad:14:2e:7b:bf:6f:54:98:f8:9f:17:43:84:4f:
         60:f7:13:84:7b:e6:04:98:5f:e5:8c:7c:37:07:45:9b:86:71:
         83:07:ff:88:27:9b:a7:1f:76:89:79:db:56:5b:3b:be:c8:ac:
         fe:46:06:1f:86:9c:4c:88:de:bd:15:e2:8b:03:48:b8:88:c1:
         18:65:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:39 2025 by rpki-client