Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          vduibIoLUi7kz6REt3152r7PGM4rFkU0W0DN8++WW0Y=
Subject key identifier:   93:D9:7D:02:EC:69:9B:B6:BF:FC:E0:22:04:9B:39:F3:C4:FC:FF:F6
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       34BC9601F718FC62E8A2CBF2A10313442CFB887E
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bc:96:01:f7:18:fc:62:e8:a2:cb:f2:a1:03:13:44:2c:fb:88:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=93D97D02EC699BB6BFFCE022049B39F3C4FCFFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:3b:df:48:3d:47:d0:e6:81:4f:d7:de:e6:
                    a2:d6:a6:7b:89:7b:dd:47:b9:68:6e:7c:3b:63:5b:
                    03:cd:fd:99:1d:f9:b3:e9:18:8b:b9:ca:ce:fe:8b:
                    79:34:55:8e:e0:9c:25:cd:4c:52:db:2a:a2:5b:4f:
                    3a:b8:fa:2d:f9:79:e7:6b:b5:48:11:33:62:0a:83:
                    0f:8c:95:73:2d:d2:a5:4e:9e:f8:55:c7:ed:60:00:
                    e3:6f:d0:7e:5f:92:e1:c6:fc:50:59:12:c9:3b:2b:
                    d0:9f:e4:74:60:34:a0:c8:b0:f4:6d:a7:f9:72:55:
                    50:86:42:f7:fe:63:91:21:ad:14:48:a7:e7:ca:60:
                    61:ef:d3:b5:83:d2:4d:4b:e8:07:26:4b:ab:ab:3c:
                    69:c7:ae:26:ef:f1:f0:a8:85:59:f8:75:4a:52:37:
                    55:21:9f:41:49:02:a8:2b:59:8b:2d:9b:ad:58:42:
                    4e:f6:72:10:90:92:c6:ba:85:da:13:76:34:94:27:
                    ca:25:81:7f:43:9a:26:42:95:ac:cc:19:5a:e7:84:
                    f1:01:83:d3:4a:48:24:12:b2:0e:c4:45:d4:96:e3:
                    38:0d:5f:60:4c:23:42:3b:4c:1d:b4:49:7c:1b:07:
                    9b:fa:0a:3c:c2:82:4e:7c:4f:2a:68:53:86:f7:e2:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:7D:02:EC:69:9B:B6:BF:FC:E0:22:04:9B:39:F3:C4:FC:FF:F6
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:f9:d9:81:37:98:c3:91:be:12:56:41:86:46:d3:c0:a8:
         d7:b5:fd:76:09:00:8a:45:92:2e:3d:35:b2:fd:27:fc:87:a3:
         7b:ed:f5:c9:07:a9:03:9a:44:69:3c:dd:78:4c:4b:dd:e2:ee:
         4d:df:04:19:d4:dc:c7:ad:58:80:c0:cc:0c:a5:37:a3:68:a5:
         ff:44:87:fa:8d:a9:3c:77:7d:c1:24:e0:f4:92:33:12:e0:a8:
         f8:bd:7b:cd:c2:ae:69:9a:78:01:58:4c:35:16:bd:5d:d2:b2:
         7a:e8:02:72:de:4f:79:6b:d9:14:0c:9f:b7:30:3d:78:a7:56:
         17:f5:f8:c9:50:51:75:0d:1a:e2:6f:5c:7e:6c:53:7d:c1:f4:
         b1:24:02:4e:88:e1:97:bc:54:27:8c:d1:0b:7f:53:63:0d:8d:
         70:5f:18:0b:61:a0:15:26:96:e8:12:02:4a:5c:30:81:55:a7:
         30:cc:e8:24:55:8a:c1:1f:c4:37:a0:ec:44:13:29:63:26:21:
         62:f8:3e:59:c3:35:c5:16:93:4c:ed:cc:e8:b6:84:ad:47:ad:
         cc:df:19:4d:f1:9d:8c:64:47:13:6f:60:86:1b:50:fd:81:0f:
         8c:cc:f9:4a:af:c6:fb:36:69:9d:a8:ed:0f:84:58:21:0c:53:
         e1:52:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:35 2025 by rpki-client