Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          YSHZSaDhR0N3BT0OJUUD+Cb0Km8ILHb9XtEDJlEGvcA=
Subject key identifier:   E6:1E:C5:41:E2:52:4D:D9:7C:81:11:3C:D2:1B:4F:F0:BF:A6:83:B0
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       06FDBEBC8844129A0106149B7A8B314F0615CBA5
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
Signing time:             Mon 01 Jul 2024 13:28:49 +0000
ROA not before:           Mon 01 Jul 2024 13:23:49 +0000
ROA not after:            Mon 30 Jun 2025 13:28:49 +0000
asID:                     27712
IP address blocks:        200.220.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:be:bc:88:44:12:9a:01:06:14:9b:7a:8b:31:4f:06:15:cb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  1 13:23:49 2024 GMT
            Not After : Jun 30 13:28:49 2025 GMT
        Subject: CN=E61EC541E2524DD97C81113CD21B4FF0BFA683B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:70:1b:46:e7:da:15:19:01:07:91:f7:b9:
                    f9:47:63:39:cc:68:ac:d6:6f:d9:86:71:6b:6b:a3:
                    d6:64:86:af:f9:86:85:bb:f1:81:5f:a7:61:c6:49:
                    eb:db:ab:5b:a6:ec:f0:44:6d:cb:6d:0f:d1:5c:45:
                    26:e0:3e:bc:88:fd:5f:77:24:e8:10:4b:64:dc:1a:
                    8c:e8:39:b4:9e:d9:c3:85:b4:6b:49:1f:62:c0:c3:
                    b9:20:fd:1e:06:c4:69:a8:a1:1a:f1:7c:ac:29:a7:
                    ef:63:b0:79:98:e7:a0:ca:55:22:68:58:76:37:d1:
                    10:c4:b3:92:4c:e4:73:10:e6:0e:6a:95:aa:ea:3b:
                    c8:59:7e:8f:4a:e9:49:55:77:7f:2d:59:6b:f2:06:
                    51:46:12:30:49:cd:ce:26:c8:98:7e:5b:5a:4d:34:
                    20:7e:10:ec:c2:ab:7f:b3:f0:41:bd:4b:28:e1:3a:
                    40:e9:3e:3a:45:dc:b2:6a:a1:81:78:1f:2d:83:ad:
                    68:f4:07:58:af:bd:0c:0e:60:88:59:8e:ff:31:2a:
                    3a:99:89:9e:d1:cd:7a:2c:d1:3c:f9:1f:5c:9f:ba:
                    d1:de:95:1f:9d:ef:be:5f:d8:3c:56:db:6a:3c:9f:
                    0d:28:9b:b5:8a:4e:37:b3:ea:fb:a0:bd:07:66:5e:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1E:C5:41:E2:52:4D:D9:7C:81:11:3C:D2:1B:4F:F0:BF:A6:83:B0
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:28:df:6c:a4:ad:50:b3:2b:92:39:bd:26:47:23:70:f5:
         0f:5d:fc:09:cd:5b:43:98:7c:d4:4a:ce:e8:1d:33:7a:1a:2b:
         36:df:aa:57:3c:38:67:43:69:59:2d:76:18:e8:a1:74:73:6b:
         20:7d:b2:ba:f5:3e:c1:40:89:10:18:1d:ad:da:25:c6:bb:4b:
         31:8b:de:b0:ab:cb:66:36:a7:b3:06:92:31:3c:ab:5e:77:5f:
         ca:b1:2b:f4:2c:1e:82:5d:a0:5b:ab:66:8c:8d:c6:ef:75:22:
         07:61:51:9b:5c:c9:71:ae:a3:b6:eb:f6:f6:ad:8f:77:86:8f:
         99:04:90:0a:7b:f6:47:4b:c9:ed:3f:43:77:93:c2:eb:41:d8:
         84:c6:c3:4c:85:d1:af:d9:01:e4:e1:9e:38:d6:d2:9a:45:08:
         68:9d:ff:3b:ec:b9:bd:54:3d:00:4d:01:74:04:e6:f4:fd:75:
         f4:0b:21:05:ed:71:8f:d7:38:64:dc:98:7c:e9:0d:27:68:f7:
         bd:30:78:2f:11:c8:30:26:d4:6f:08:93:4d:91:76:96:ff:b9:
         da:9d:34:7a:ae:a1:7e:38:4b:a0:b0:81:cd:0c:f2:3c:a7:ba:
         58:bc:da:bb:d3:73:d6:df:02:1c:01:5b:0b:04:37:ef:76:06:
         7c:f1:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:12 2024 by rpki-client on console-ams.rpki-client.org