Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3136342e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          Ze4acXBWjaoGmSbLZuuAXA9T6zeckREEMuylM/+8nw4=
Subject key identifier:   1D:27:53:C6:5B:1B:9D:94:81:38:AE:D9:42:98:29:CE:4B:53:6B:E9
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       381693836A30728333B8D77205B416555AFD7FB9
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32332d3233203d3e203237373132.roa
Signing time:             Tue 01 Jul 2025 00:56:25 +0000
ROA not before:           Tue 01 Jul 2025 00:51:25 +0000
ROA not after:            Tue 30 Jun 2026 00:56:25 +0000
asID:                     27712
IP address blocks:        200.220.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:93:83:6a:30:72:83:33:b8:d7:72:05:b4:16:55:5a:fd:7f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 00:51:25 2025 GMT
            Not After : Jun 30 00:56:25 2026 GMT
        Subject: CN=1D2753C65B1B9D948138AED9429829CE4B536BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:4e:c7:9f:a0:77:9c:de:77:5e:dc:db:13:
                    1c:c1:3e:15:42:96:29:ef:dc:a4:01:11:9d:de:55:
                    75:5d:ff:f9:e1:73:76:51:59:3e:00:b3:e2:4a:0b:
                    67:2f:bd:1d:b4:9d:bb:7f:cf:4e:ef:4c:9a:48:85:
                    a4:37:e7:3c:53:4c:ef:58:77:7e:a2:5c:e7:cd:ad:
                    73:2b:a4:02:29:3d:67:9d:bf:04:f9:36:8e:79:d0:
                    5b:0a:28:72:47:25:e0:8e:71:3b:11:eb:38:4b:69:
                    ea:f6:c1:6f:4a:13:f8:75:19:7c:3e:9e:31:5a:df:
                    55:8f:c5:88:8c:e7:f2:b6:52:e2:c3:8b:2d:ba:f5:
                    14:3a:55:eb:9e:75:80:f5:fd:49:45:b5:06:a3:2a:
                    35:31:e4:2c:9b:f5:9d:0f:b2:f4:c9:8b:d5:b9:44:
                    7f:25:25:32:56:be:49:0e:e8:dd:2a:d0:ae:ff:99:
                    c4:9c:55:61:11:67:fa:05:2c:bc:62:2d:c3:aa:55:
                    cc:fd:30:ae:0e:3d:74:0a:a7:6a:ce:c9:43:70:23:
                    a8:0d:6e:49:20:61:3c:c1:c2:e8:4f:ba:b6:0c:8e:
                    da:55:ea:e8:40:40:f9:e9:f3:9c:28:85:f7:29:78:
                    f8:0a:e5:5d:e2:db:28:8d:a0:70:cb:c2:f7:dd:38:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:27:53:C6:5B:1B:9D:94:81:38:AE:D9:42:98:29:CE:4B:53:6B:E9
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:15:a8:d7:eb:db:bb:6e:f6:13:56:15:1c:ba:af:19:18:
         f2:89:1b:ed:bb:8b:c7:24:83:fb:08:6d:b6:94:81:a5:67:21:
         c4:d3:82:e9:bc:e5:ab:e0:e4:28:8f:77:8b:f6:2d:a9:53:23:
         3b:93:5f:5c:92:5f:c1:0c:49:b3:a9:c9:12:7a:84:80:6a:ac:
         e8:b5:92:6b:d7:73:f8:22:23:2f:d2:fb:86:88:4a:ea:18:c4:
         7a:4d:fd:03:47:62:9d:57:28:67:52:65:e2:84:ad:6e:98:f5:
         28:3b:31:40:0f:41:0e:99:1e:cc:1d:7b:d9:db:cc:cf:69:ea:
         67:98:16:cc:cf:f0:a5:49:6b:05:cb:77:4b:00:a6:19:8f:c3:
         01:19:7c:94:ef:a1:8b:c2:bb:9b:58:1d:84:60:60:ee:6b:4b:
         3e:89:d5:2b:75:00:6c:2c:31:3b:58:a2:95:5f:b0:0e:40:4d:
         1b:d2:12:3d:f6:57:87:f3:1d:87:a2:75:16:49:0b:40:ee:05:
         d0:f4:92:22:ac:1d:8f:c8:4c:60:32:7d:36:74:5d:87:e7:46:
         a4:1d:06:03:2a:76:53:b5:22:9e:46:8c:73:f7:2e:03:5c:de:
         62:12:b6:83:17:15:d5:c9:22:82:55:96:50:54:32:1e:e5:23:
         70:18:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:50 2025 by rpki-client