Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136352e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136352e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          ifJh4SGEXJFz+xrxYHjTu1IxAfG6rZfO0oXiuM40Kwo=
Subject key identifier:   A9:5C:2B:BA:2D:BA:CF:E5:3F:9A:0C:D5:B4:65:79:A4:6B:B4:D4:21
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       6D9FCB22194319623B41D9E9A02533DA48FCB61E
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136352e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:cb:22:19:43:19:62:3b:41:d9:e9:a0:25:33:da:48:fc:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=A95C2BBA2DBACFE53F9A0CD5B46579A46BB4D421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:1e:48:30:c1:fb:73:60:c0:3e:97:d7:30:
                    a1:f4:87:2e:66:43:8a:b8:80:33:03:da:ec:89:ae:
                    58:a4:01:88:2f:cf:0c:73:92:bf:a7:bd:c3:eb:d3:
                    94:da:e1:da:23:bb:b9:9d:82:d3:57:18:4a:a1:96:
                    2a:36:f2:26:95:1c:8f:c3:65:05:ed:78:ba:17:36:
                    f7:5e:5a:49:2d:84:2d:a0:65:d4:39:e4:75:49:6e:
                    92:10:8b:2c:d6:0c:c6:a8:d9:59:02:d4:67:32:6e:
                    a0:57:ce:ee:73:0c:f4:f7:2b:7f:3c:e3:d6:e1:52:
                    87:79:1a:22:8b:8e:f6:c0:64:f0:06:b4:90:c9:54:
                    09:58:14:50:7a:26:d1:dd:51:97:be:ed:18:38:4b:
                    54:92:c6:83:68:ca:a2:da:82:8e:23:80:e1:cb:91:
                    42:67:8e:48:1e:e4:ad:cf:92:20:f6:cb:b5:8a:b0:
                    9d:22:e7:e6:66:e9:19:2b:77:16:bd:e8:71:da:ff:
                    f5:30:81:f9:3d:27:53:1d:c8:26:c9:d3:f1:10:72:
                    17:3d:6b:56:4e:e3:6f:0f:14:5a:1b:70:17:5d:a4:
                    29:57:e9:72:0a:a3:f4:1b:dd:ff:cf:38:0b:a8:ef:
                    0e:53:d3:56:8d:e9:3a:ed:84:75:53:30:b5:a2:9a:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5C:2B:BA:2D:BA:CF:E5:3F:9A:0C:D5:B4:65:79:A4:6B:B4:D4:21
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136352e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:4f:ca:31:ac:08:89:75:ae:45:3a:17:36:60:f2:c2:30:
         e8:c6:e9:92:bb:06:18:88:eb:4c:89:05:14:42:66:d1:88:2f:
         bd:5a:c5:2a:6d:7c:be:44:0e:e4:3f:d3:be:c4:22:3c:6f:78:
         c2:e0:3c:6b:e3:2f:79:90:c9:81:bc:a5:60:76:85:66:e6:ae:
         4e:b3:6b:23:0e:8f:a4:df:2d:d6:62:5f:1e:41:96:93:38:54:
         42:d1:ef:b0:8c:ad:a5:09:70:80:53:2c:eb:2e:6c:dc:95:67:
         9f:25:f3:75:64:3b:51:d5:c8:b2:41:f6:d7:3f:18:5b:8d:a2:
         9e:62:4a:08:7d:2e:14:fe:d6:8b:64:57:57:24:3b:d2:39:65:
         b6:d3:85:50:d4:c2:a8:4b:02:67:dd:e2:fe:c6:93:24:42:6e:
         24:38:2a:2f:ac:57:20:0e:6f:6a:de:64:8b:44:5d:36:41:2f:
         db:55:bb:03:1a:64:4c:5c:50:d2:24:f7:8a:7d:25:b3:5e:eb:
         bf:30:86:4a:08:7f:e8:ec:8c:9b:27:66:99:c1:cb:fd:eb:38:
         ed:bb:81:75:b3:33:2c:f4:8c:ba:e4:d5:36:ac:7a:56:44:85:
         09:ef:53:f3:40:bf:4d:7d:1c:b5:50:b0:b5:99:3a:4f:b3:be:
         1c:c6:68:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbZ/LIhlDGWI7QdnpoCUz2kj8th4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNTA2MDUxNDIyMzdaFw0yNjA2MDQxNDI3MzdaMDMxMTAvBgNV
BAMTKEE5NUMyQkJBMkRCQUNGRTUzRjlBMENENUI0NjU3OUE0NkJCNEQ0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXx5IMMH7c2DAPpfXMKH0hy5m
Q4q4gDMD2uyJrlikAYgvzwxzkr+nvcPr05Ta4doju7mdgtNXGEqhlio28iaVHI/D
ZQXteLoXNvdeWkkthC2gZdQ55HVJbpIQiyzWDMao2VkC1GcybqBXzu5zDPT3K388
49bhUod5GiKLjvbAZPAGtJDJVAlYFFB6JtHdUZe+7Rg4S1SSxoNoyqLago4jgOHL
kUJnjkge5K3PkiD2y7WKsJ0i5+Zm6Rkrdxa96HHa//Uwgfk9J1MdyCbJ0/EQchc9
a1ZO428PFFobcBddpClX6XIKo/Qb3f/POAuo7w5T01aN6TrthHVTMLWimuCLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqVwrui26z+U/mgzVtGV5pGu01CEwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3KUwDQYJKoZIhvcNAQELBQADggEBADW8T8ox
rAiJda5FOhc2YPLCMOjG6ZK7BhiI60yJBRRCZtGIL71axSptfL5EDuQ/077EIjxv
eMLgPGvjL3mQyYG8pWB2hWbmrk6zayMOj6TfLdZiXx5BlpM4VELR77CMraUJcIBT
LOsubNyVZ58l83VkO1HVyLJB9tc/GFuNop5iSgh9LhT+1otkV1ckO9I5ZbbThVDU
wqhLAmfd4v7GkyRCbiQ4Ki+sVyAOb2reZItEXTZBL9tVuwMaZExcUNIk94p9JbNe
678whkoIf+jsjJsnZpnBy/3rOO27gXWzMyz0jLrk1TaselZEhQnvU/NAv019HLVQ
sLWZOk+zvhzGaD4=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:55 2025 by rpki-client