Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa
File:                     3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          pxBz5JrHV4L2E5kyPu745gDM72YxlP7jEatLBuMZeZw=
Subject key identifier:   6B:0C:F3:63:86:44:1B:D1:C9:D2:56:39:09:CA:90:11:2E:91:D9:75
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       6E31C0BB77D3F80015BD1B281FA0CBE420167083
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa
Signing time:             Thu 04 Apr 2024 14:17:22 +0000
ROA not before:           Thu 04 Apr 2024 14:12:22 +0000
ROA not after:            Thu 03 Apr 2025 14:17:22 +0000
asID:                     22773
IP address blocks:        200.220.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Apr 2024 17:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:31:c0:bb:77:d3:f8:00:15:bd:1b:28:1f:a0:cb:e4:20:16:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr  4 14:12:22 2024 GMT
            Not After : Apr  3 14:17:22 2025 GMT
        Subject: CN=6B0CF36386441BD1C9D2563909CA90112E91D975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:01:97:4c:41:b1:25:ed:1f:72:73:36:69:
                    18:ff:46:59:d2:37:48:8a:d2:61:68:40:56:ba:16:
                    e0:b0:61:a4:35:53:c7:69:de:7d:bc:9f:a3:e7:35:
                    73:b6:89:80:42:70:9e:1d:ed:29:4a:99:e6:53:df:
                    1f:fb:7c:a4:22:d2:26:66:60:dc:ee:59:b6:47:21:
                    cb:ad:1c:d3:57:74:7f:6a:33:05:e3:71:e6:d5:00:
                    e0:cd:00:4a:f3:d3:3c:d7:86:2b:52:ef:5f:91:ec:
                    11:2e:68:83:3e:29:38:0a:90:fe:a5:d3:4e:04:e5:
                    43:18:87:fb:7d:8f:24:7e:79:ae:7b:05:28:26:ee:
                    de:c6:43:4c:ba:ff:e4:72:7a:0c:3d:05:8c:bd:8a:
                    e4:4f:39:e4:98:c8:5e:db:08:a5:d1:f8:cb:cc:52:
                    e6:78:63:8b:4a:74:04:71:33:50:ec:43:be:49:38:
                    8f:c3:2c:82:d4:68:65:7f:f4:39:15:cc:a1:55:e4:
                    0a:5e:db:55:bb:f8:b3:08:2f:35:da:a2:1d:81:e1:
                    df:b9:29:83:81:d7:d5:bd:a9:0e:c2:5d:9e:e7:04:
                    74:54:a2:e7:19:bf:3d:cb:d6:15:75:02:d9:50:92:
                    13:c3:1f:b6:e6:34:4e:af:9a:24:aa:11:31:97:15:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:F3:63:86:44:1B:D1:C9:D2:56:39:09:CA:90:11:2E:91:D9:75
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:c8:d5:fc:20:16:5d:0d:cd:4f:e2:3b:13:67:dc:de:39:
         18:fe:6c:bf:e1:09:9c:e5:d2:20:59:56:c1:87:b5:92:57:ce:
         c8:4a:f3:92:46:71:f6:c4:dd:51:a7:cf:38:6a:46:41:f3:3d:
         b9:d7:e8:7b:8c:dd:c8:ee:ec:79:26:88:8c:9b:e8:ca:ca:66:
         ed:d3:cd:9e:ad:67:9d:13:dc:83:f8:1e:a7:37:3e:e5:7f:04:
         56:cf:1b:5a:a5:16:2b:44:14:e8:8b:2a:ac:b3:d5:18:10:28:
         6b:fd:71:76:7a:82:18:ed:c1:6b:84:9a:05:9d:a2:5b:eb:76:
         38:dd:51:8d:e3:73:88:aa:05:cc:36:5e:96:36:ca:86:02:31:
         cc:f9:81:b9:a1:11:db:c5:15:72:06:55:b2:fa:66:aa:2b:1c:
         c5:37:f8:30:3c:b2:37:1d:30:30:15:77:ec:70:95:d1:ae:ac:
         03:9a:99:8c:ad:ce:a7:14:a1:b5:ff:27:c6:86:ca:96:d9:f9:
         a1:eb:7f:f5:70:ab:a4:b2:96:e5:ee:62:c3:e4:7e:3c:3c:82:
         e8:fe:65:a2:d8:08:56:59:20:51:10:22:40:4b:37:78:a5:d4:
         50:6f:6c:02:95:72:76:4b:14:7f:84:8a:cc:9b:a8:84:15:71:
         b3:dd:dd:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbjHAu3fT+AAVvRsoH6DL5CAWcIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNDA0MDQxNDEyMjJaFw0yNTA0MDMxNDE3MjJaMDMxMTAvBgNV
BAMTKDZCMENGMzYzODY0NDFCRDFDOUQyNTYzOTA5Q0E5MDExMkU5MUQ5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDggGXTEGxJe0fcnM2aRj/RlnS
N0iK0mFoQFa6FuCwYaQ1U8dp3n28n6PnNXO2iYBCcJ4d7SlKmeZT3x/7fKQi0iZm
YNzuWbZHIcutHNNXdH9qMwXjcebVAODNAErz0zzXhitS71+R7BEuaIM+KTgKkP6l
004E5UMYh/t9jyR+ea57BSgm7t7GQ0y6/+Ryegw9BYy9iuRPOeSYyF7bCKXR+MvM
UuZ4Y4tKdARxM1DsQ75JOI/DLILUaGV/9DkVzKFV5Ape21W7+LMILzXaoh2B4d+5
KYOB19W9qQ7CXZ7nBHRUoucZvz3L1hV1AtlQkhPDH7bmNE6vmiSqETGXFQzPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUawzzY4ZEG9HJ0lY5CcqQES6R2XUwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KQwDQYJKoZIhvcNAQELBQADggEBAK2pyNX8
IBZdDc1P4jsTZ9zeORj+bL/hCZzl0iBZVsGHtZJXzshK85JGcfbE3VGnzzhqRkHz
PbnX6HuM3cju7HkmiIyb6MrKZu3TzZ6tZ50T3IP4Hqc3PuV/BFbPG1qlFitEFOiL
Kqyz1RgQKGv9cXZ6ghjtwWuEmgWdolvrdjjdUY3jc4iqBcw2XpY2yoYCMcz5gbmh
EdvFFXIGVbL6ZqorHMU3+DA8sjcdMDAVd+xwldGurAOamYytzqcUobX/J8aGypbZ
+aHrf/Vwq6SyluXuYsPkfjw8guj+ZaLYCFZZIFEQIkBLN3il1FBvbAKVcnZLFH+E
isybqIQVcbPd3bw=
-----END CERTIFICATE-----
Generated at Sun Apr 28 19:05:00 2024 by rpki-client on console-ams.rpki-client.org