Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3136362e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          bh4YTK6voPLicVSzxbiLnbTfxvHZwZQQPU7PkSUOLWA=
Subject key identifier:   5A:AE:0A:2F:8E:7A:70:F4:41:91:7E:53:F3:45:D6:01:CD:CD:69:D6
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       1EE6F222F4531AF4F3E862BE9BDE8B622E76540A
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32332d3233203d3e203237373132.roa
Signing time:             Fri 04 Jul 2025 18:28:46 +0000
ROA not before:           Fri 04 Jul 2025 18:23:46 +0000
ROA not after:            Fri 03 Jul 2026 18:28:46 +0000
asID:                     27712
IP address blocks:        200.220.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e6:f2:22:f4:53:1a:f4:f3:e8:62:be:9b:de:8b:62:2e:76:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jul  4 18:23:46 2025 GMT
            Not After : Jul  3 18:28:46 2026 GMT
        Subject: CN=5AAE0A2F8E7A70F441917E53F345D601CDCD69D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:4b:d6:f0:90:96:f7:61:06:a7:9f:ef:25:
                    06:cd:c6:5d:ed:af:ed:15:7c:6e:43:ed:d5:9d:f7:
                    b9:b0:d4:77:3a:e5:e5:6d:60:c4:99:e1:89:12:5a:
                    d6:46:16:11:4f:ae:ae:8c:0e:71:cd:a8:5e:73:87:
                    d9:9d:f4:46:8c:68:d3:37:93:b1:b0:b1:7c:cb:ec:
                    d4:45:5c:66:a5:08:1b:26:8d:00:a5:bc:32:d7:cf:
                    79:82:c1:67:f5:30:53:30:fb:0f:cf:04:45:c7:3f:
                    90:82:cd:98:5e:f0:65:82:99:d2:5f:9e:39:6e:ed:
                    3b:d8:32:1c:69:e3:1e:52:1d:8a:ae:75:8c:87:d2:
                    6c:a2:20:ad:31:46:e8:0f:96:f0:fe:93:cc:9d:ac:
                    11:64:f2:1a:b1:c0:9b:b6:a2:ec:ab:96:0c:35:85:
                    ba:cc:95:3d:ff:40:d4:ac:27:57:e7:ea:0f:2d:e9:
                    26:d0:8a:2a:50:1b:5b:d2:68:93:20:1b:08:49:45:
                    a5:ae:38:0f:58:8e:bd:86:5c:69:c6:a2:42:17:d9:
                    1d:f4:75:81:6e:e2:d6:97:ef:7a:fe:cb:bf:b2:44:
                    b0:80:30:58:74:6e:66:3e:67:98:ef:4e:8f:ce:35:
                    60:82:76:37:78:16:74:63:a2:b4:02:25:62:c4:94:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:0A:2F:8E:7A:70:F4:41:91:7E:53:F3:45:D6:01:CD:CD:69:D6
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:96:20:c1:96:01:cc:e5:ca:71:07:a7:66:e8:03:f4:8a:
         d7:f5:c3:ce:bb:6c:ec:a9:2f:4c:06:ad:3e:a3:03:da:83:5f:
         a6:b3:e5:9a:dc:87:6a:e2:27:0d:36:59:5a:fa:ed:b0:91:2c:
         06:dc:3f:19:30:f3:8b:99:c9:8a:26:b8:57:07:0b:80:52:51:
         0e:6d:0c:f9:b7:75:3f:c0:55:d2:7d:1a:a0:de:97:7e:85:5d:
         bc:88:f1:cd:a7:e9:68:77:8c:94:1a:0d:e6:d5:a4:7c:d7:c9:
         c9:ba:15:1d:b8:46:18:26:0e:d3:29:65:29:8d:9b:39:22:77:
         c6:b0:32:b9:18:d7:46:25:c1:22:70:36:a8:91:58:ff:fc:51:
         1e:20:da:50:68:c2:bd:f7:6f:ab:dd:10:04:61:17:c8:43:d8:
         13:94:cb:3e:38:6a:a2:ec:05:f0:55:0d:da:35:f1:cc:54:a9:
         80:e3:e1:4b:86:e9:da:37:85:96:d7:e8:9c:cb:20:dd:e0:3f:
         2c:43:9f:55:25:10:92:9d:ac:e2:35:bc:1c:e9:db:d7:c6:9d:
         a3:22:ff:e5:cf:03:35:ad:55:aa:3c:94:f9:1b:d4:4f:35:dd:
         4a:36:4e:b6:87:12:2d:f0:e1:4c:42:c4:fd:b0:cb:14:2e:17:
         78:34:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:41 2025 by rpki-client