Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          uNkqnXqSeTV3KP6jx7ZaM6v5PeyR4jqVjETW0Pw2jWQ=
Subject key identifier:   82:0D:D6:2E:24:04:88:EA:4F:10:1D:52:64:5C:7D:9A:43:47:8F:03
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       32869910C1B1559199A751BFE93B546CA64F17F0
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:86:99:10:c1:b1:55:91:99:a7:51:bf:e9:3b:54:6c:a6:4f:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=820DD62E240488EA4F101D52645C7D9A43478F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:44:2f:6c:02:e2:bc:8b:19:6d:c5:16:ec:
                    c8:33:ff:54:fc:cd:c7:cd:d9:a2:22:53:90:5a:ca:
                    b6:d4:5a:e1:25:94:c2:0e:2b:41:5b:98:90:00:bc:
                    89:7a:e8:96:f3:34:77:d0:20:97:fd:43:c6:57:50:
                    e0:d6:bb:6e:b0:02:67:fd:8d:9f:f5:10:73:4b:05:
                    2d:e6:5d:d3:02:23:42:8d:5c:6f:49:43:1b:a0:6e:
                    b4:9d:53:75:10:c7:7b:2d:25:e1:4e:38:5b:6b:bf:
                    2d:f9:fd:1e:57:24:f9:02:c0:a0:84:97:ac:06:37:
                    d5:18:77:10:f3:57:f1:4c:5a:a2:46:c6:bd:8d:c0:
                    1c:bf:c2:4a:04:91:e7:49:b3:8b:3e:a5:74:ae:8f:
                    d1:b4:8a:d2:2c:97:fe:4b:4a:b0:57:19:89:68:5a:
                    bd:7d:bf:6d:80:83:1f:32:03:bf:9b:73:98:89:be:
                    95:57:b5:84:5b:9b:cc:1e:40:13:dc:bc:c5:b1:3f:
                    29:5b:c2:f2:33:68:c6:90:87:52:21:88:a9:d1:b0:
                    a2:1c:2c:b0:ff:fc:0d:80:6d:5c:e3:61:bd:27:33:
                    f1:f6:c1:8c:44:cc:f8:d6:8f:60:4a:d0:9a:35:db:
                    e5:84:13:76:ff:b9:78:bc:8b:08:58:47:93:aa:e4:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:D6:2E:24:04:88:EA:4F:10:1D:52:64:5C:7D:9A:43:47:8F:03
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:b0:3d:ce:7c:97:eb:95:f1:83:61:17:f8:81:43:8d:22:
         c5:71:27:46:d1:9e:f7:e2:9a:40:29:fa:65:53:69:f6:21:55:
         9a:f2:06:cb:29:a4:30:0d:ed:b2:28:ac:ee:e4:36:ec:10:1b:
         2e:d7:7a:55:34:84:f9:a6:19:3d:cd:d6:68:2a:ec:63:2e:0b:
         eb:c3:e3:c5:d5:05:74:da:07:0f:78:46:a6:fe:72:71:87:18:
         1f:6b:96:8f:b4:8b:bf:d8:c9:49:64:7e:da:9b:eb:21:db:30:
         40:96:f7:2e:10:86:85:bb:dd:94:07:26:27:41:22:29:d3:e7:
         23:29:ab:46:9e:9c:2d:34:5a:b9:d8:4b:c0:80:49:af:a2:8a:
         1c:c6:41:0c:33:ac:2f:73:a5:31:fc:77:cb:81:0c:60:36:7d:
         dd:6d:72:c0:30:6b:d5:d7:89:42:6d:bb:3c:97:2a:56:63:fd:
         fa:bb:ac:dc:c5:db:99:0a:f9:23:69:46:5c:46:76:af:0e:6c:
         54:5b:66:3e:93:e6:d1:c2:8a:f3:50:fe:83:68:94:75:95:55:
         29:44:cc:a6:8a:b2:cd:b7:bd:59:e9:20:4c:c0:aa:3d:3a:db:
         7c:cc:67:44:5a:ac:fe:19:2e:5f:9a:6c:92:0a:da:42:5c:be:
         9f:da:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:18:01 2025 by rpki-client