Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203237373132.roa
File:                     3230302e3232302e3136342e302f32322d3232203d3e203237373132.roa (raw, json)
Hash identifier:          QAL67CjdTLJgtDgVOCc0jGUIiCUQS705UrJiArj+F5k=
Subject key identifier:   AC:FA:83:E1:EE:D1:1C:F7:10:72:44:D3:1B:A1:AF:D8:44:CF:81:FC
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       385A682C2726318495BB09C370844DEB534EFBC7
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203237373132.roa
Signing time:             Mon 01 Jul 2024 13:19:13 +0000
ROA not before:           Mon 01 Jul 2024 13:14:13 +0000
ROA not after:            Mon 30 Jun 2025 13:19:13 +0000
asID:                     27712
IP address blocks:        200.220.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5a:68:2c:27:26:31:84:95:bb:09:c3:70:84:4d:eb:53:4e:fb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 13:14:13 2024 GMT
            Not After : Jun 30 13:19:13 2025 GMT
        Subject: CN=ACFA83E1EED11CF7107244D31BA1AFD844CF81FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:01:73:5e:a7:28:43:5c:2e:ad:76:fb:a6:
                    52:75:f5:fd:c5:84:0f:2b:78:f4:6a:2e:3c:d9:8d:
                    fd:78:b2:bd:35:a4:d4:be:eb:cf:d9:9e:20:60:16:
                    d7:c2:a8:28:4a:8c:89:8f:09:49:52:f2:68:dc:a3:
                    1d:71:3e:d2:82:d5:c2:3e:f0:23:d6:bf:52:8c:42:
                    52:ff:5f:6d:f0:a1:aa:14:3b:1c:90:b3:08:12:95:
                    0b:8a:dd:21:89:47:b6:ae:a2:c4:c2:2b:3b:98:a3:
                    cf:b0:03:4c:10:72:44:8b:95:f3:78:f3:e6:81:ed:
                    60:a1:9e:eb:f4:60:dc:5a:73:c7:78:c7:8e:8a:73:
                    32:ff:63:c3:41:5a:25:9a:54:36:bc:50:44:3c:18:
                    d1:d2:18:2d:8d:e4:a8:e2:4d:e7:83:92:ca:23:ef:
                    bc:fe:9e:3d:47:7e:cd:55:cd:37:48:73:58:40:dc:
                    4e:6f:82:6f:af:62:43:67:c8:01:0f:1f:c0:02:35:
                    b4:fa:cd:8e:e0:62:c5:40:98:b8:be:df:01:64:14:
                    9d:2f:6a:b3:31:71:53:36:ed:ae:e3:08:60:95:0b:
                    b5:b1:52:94:44:ce:fd:0c:e5:a2:3f:0d:f6:51:f2:
                    9e:aa:90:a5:f9:c4:21:3c:ae:24:c8:d3:57:c7:9b:
                    61:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:83:E1:EE:D1:1C:F7:10:72:44:D3:1B:A1:AF:D8:44:CF:81:FC
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32322d3232203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:51:43:ed:cc:54:9f:e1:32:de:9f:e0:91:1c:05:82:a1:
         3a:c3:9a:6d:92:3c:76:37:57:46:87:3e:26:c6:ef:d5:d0:51:
         7d:7e:cc:77:67:54:e0:dd:23:94:2f:6f:66:03:93:a5:3b:bf:
         9c:14:20:ec:01:d2:b6:11:f8:a2:06:dd:74:a5:66:b3:39:a2:
         bd:6d:46:79:13:4b:50:40:47:d7:4d:a8:ee:d5:cc:ac:d8:63:
         9f:fa:48:16:ae:56:3b:6f:c6:e7:c2:cb:46:78:26:60:c6:aa:
         97:36:ca:6a:ba:29:f6:0f:59:22:10:49:9d:61:db:45:3f:19:
         84:6a:28:ff:e1:40:8a:1e:cf:06:d6:6c:17:e6:5a:1d:3f:7b:
         3f:5b:ea:29:5d:51:8e:72:c6:fc:ea:8d:bc:78:3f:7c:9a:e4:
         dc:17:c1:19:c5:4a:88:f0:7b:03:e5:4a:66:e4:89:66:8d:f2:
         93:24:a7:c4:b3:0a:50:b0:5c:eb:51:8b:d0:ce:11:e0:fb:d5:
         90:2f:38:39:a6:c7:ee:cc:93:ce:bc:c2:50:d9:2b:e0:ee:5c:
         17:97:10:14:d7:3d:55:fa:82:9f:c4:a8:a8:33:09:8a:df:6a:
         c9:0e:c8:ce:53:7a:c0:c5:9f:10:8a:1d:fb:4b:ba:d2:d6:f2:
         bc:31:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:45 2024 by rpki-client on console-fra.rpki-client.org