Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136332e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136332e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          9pEi22nTuVZqYo+wgU0AGiGa3a97w/EDoee5sCC5rzI=
Subject key identifier:   21:29:D2:5B:5A:73:8C:B7:C6:29:59:3C:42:7B:05:67:8A:D6:9F:92
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       391CB6C98E5A1A2647E9A75107F0171D01818AE0
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136332e302f32342d3234203d3e203237373132.roa
Signing time:             Mon 01 Jul 2024 13:28:34 +0000
ROA not before:           Mon 01 Jul 2024 13:23:34 +0000
ROA not after:            Mon 30 Jun 2025 13:28:34 +0000
asID:                     27712
IP address blocks:        200.220.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1c:b6:c9:8e:5a:1a:26:47:e9:a7:51:07:f0:17:1d:01:81:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 13:23:34 2024 GMT
            Not After : Jun 30 13:28:34 2025 GMT
        Subject: CN=2129D25B5A738CB7C629593C427B05678AD69F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:de:64:74:9f:b7:23:39:82:e2:71:5a:e2:
                    89:c3:07:32:21:73:ec:f6:e6:c4:a9:73:fd:6f:fe:
                    d9:e8:74:af:db:2d:e6:1b:ae:96:51:19:96:ff:4d:
                    f1:4f:1f:47:fb:3c:ec:9c:1e:e5:5a:99:45:ec:39:
                    b4:b9:64:1f:43:0a:15:ce:c9:f2:f6:6a:53:3e:32:
                    8f:65:23:28:f6:fc:8d:a8:70:91:83:17:1d:7e:ed:
                    a6:47:a8:4e:f8:3f:94:3b:7e:14:28:b0:29:94:56:
                    0c:1c:45:36:5e:46:25:7e:25:9e:a2:44:c6:c8:ab:
                    9f:99:a8:e1:90:6b:e2:81:94:dd:d6:56:5e:94:97:
                    57:72:0a:8c:71:8d:9f:b1:3f:48:e9:b8:2f:9a:a4:
                    8f:24:2d:9d:b0:ea:c5:18:ff:d4:fa:22:20:3a:29:
                    b9:1d:64:7f:d4:83:1b:d2:14:55:99:91:6c:db:5e:
                    d3:8f:9e:62:c0:6e:4a:f0:f1:09:e3:df:2e:17:9d:
                    8b:90:83:e1:22:50:b8:7d:74:a2:e8:08:d2:c4:af:
                    57:42:63:52:c9:6a:51:8a:98:8c:85:3e:65:56:90:
                    96:b8:8b:2b:69:2c:09:a3:30:d8:06:81:8b:f4:9b:
                    54:4d:c1:99:5a:85:de:16:81:c2:e0:2c:9b:26:f2:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:D2:5B:5A:73:8C:B7:C6:29:59:3C:42:7B:05:67:8A:D6:9F:92
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136332e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:98:fa:cc:e9:c0:72:f5:21:0a:ce:b8:3c:3a:d1:f8:a2:
         ef:ef:57:a8:ef:d8:3a:19:1a:1e:58:d2:66:76:ed:2f:81:4b:
         9d:51:35:a9:b2:98:f4:77:04:32:42:2b:bd:f5:8e:74:94:78:
         6b:7c:5e:6a:2b:b6:38:14:15:b0:cd:c9:a2:69:52:c2:97:fb:
         31:47:99:e9:f6:dc:48:7e:de:2c:fe:dd:a6:c0:e5:07:f6:3b:
         b9:97:55:06:d5:88:46:f3:f3:9b:1d:17:f4:c6:2a:6d:dc:bf:
         2b:10:3d:79:e0:4e:dd:ef:b2:bc:80:f5:1d:5d:40:66:02:89:
         0a:64:97:20:35:63:ce:d7:c9:63:29:30:5e:97:6d:ee:f1:a6:
         ab:23:d4:ba:a6:85:4a:90:09:99:02:dc:3d:e3:14:12:97:b5:
         16:c1:39:c0:45:95:da:cc:89:06:df:90:82:68:3c:de:c8:e8:
         01:8c:6f:ec:a6:27:cd:7f:56:38:f1:da:a6:79:a9:94:5e:fa:
         fc:7e:11:1d:67:0a:4b:2f:5b:85:7a:01:fd:37:60:92:bf:67:
         2d:03:96:27:00:94:16:1b:40:57:c1:94:2a:cf:60:bc:a1:f2:
         cf:df:18:c4:25:2f:31:74:bb:bb:6e:ad:94:8c:3b:30:fa:1d:
         40:83:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:55 2024 by rpki-client on console-fra.rpki-client.org