Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
File:                     3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          9BA9R04/kIDfse3QDlUmHrZvZEr4sNgTLDg3xlY7qME=
Subject key identifier:   EE:E2:BE:8C:A9:C2:CD:C0:9E:DE:F5:D1:97:65:BA:0B:C5:0F:56:AF
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       5AB05E2584A6D2FE22A16043639F2414FA0456A1
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 04 Apr 2024 14:17:22 +0000
ROA not before:           Thu 04 Apr 2024 14:12:22 +0000
ROA not after:            Thu 03 Apr 2025 14:17:22 +0000
asID:                     61317
IP address blocks:        200.220.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 13:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:5e:25:84:a6:d2:fe:22:a1:60:43:63:9f:24:14:fa:04:56:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr  4 14:12:22 2024 GMT
            Not After : Apr  3 14:17:22 2025 GMT
        Subject: CN=EEE2BE8CA9C2CDC09EDEF5D19765BA0BC50F56AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:ac:b5:a5:47:ee:65:75:f1:6d:07:0d:60:
                    0b:df:a6:10:bc:30:c7:82:0a:6e:b6:c0:8f:92:ea:
                    38:5d:bc:41:8c:e0:48:ab:6e:75:b6:0d:bf:72:dd:
                    07:31:8e:a1:23:9d:a3:6e:f5:86:44:2f:14:23:8d:
                    98:a4:32:db:d7:11:c0:04:43:8f:79:4b:31:bf:48:
                    82:15:c8:9e:6f:2a:9a:2b:1c:f1:a6:72:47:5d:d1:
                    92:73:93:a0:4d:d3:ef:73:8b:3a:7f:e8:ac:94:cc:
                    ad:52:df:f2:cb:32:fb:06:f0:f0:93:ee:3b:d2:8b:
                    71:fe:9d:a6:d5:31:19:ab:f9:2c:ae:ce:89:73:48:
                    e5:26:4e:de:85:0c:b0:1b:54:94:9d:2a:9b:04:9b:
                    63:86:29:0b:c5:86:3a:6e:3f:b4:f4:ee:5a:85:3f:
                    d3:50:45:19:95:1d:03:63:d6:5f:7b:2a:03:4a:5a:
                    ca:8d:49:5c:d2:9e:d0:f5:c6:7b:fe:c0:d4:ff:41:
                    23:91:14:9d:65:dc:bf:4c:25:12:d4:96:16:f3:a7:
                    96:52:e4:b3:e5:b2:94:b5:bf:b3:c5:b6:05:9b:9a:
                    09:ef:54:f1:b5:bc:5d:b4:cf:c6:9e:cb:cb:b2:c1:
                    c2:95:76:0f:87:8e:95:50:d9:b5:59:8f:cd:cf:05:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:BE:8C:A9:C2:CD:C0:9E:DE:F5:D1:97:65:BA:0B:C5:0F:56:AF
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:bb:14:ca:27:a6:99:7f:29:cf:55:6e:e2:68:83:c4:e9:
         94:19:1b:01:23:3e:15:73:ca:ee:19:26:d4:48:e2:34:ab:77:
         af:71:6d:b6:63:85:78:6c:6c:b7:2c:4f:dc:69:d1:7b:59:d0:
         9a:17:fa:4d:fc:e3:e6:36:7c:d2:5e:aa:0c:48:bf:89:80:c3:
         ed:0a:ab:a6:11:12:ab:36:4d:43:97:63:17:13:4f:68:c7:61:
         77:28:9b:b1:9b:7d:e8:2e:94:c6:ba:75:c4:8d:fa:82:df:2a:
         15:ba:fc:fc:2a:5f:26:cd:de:b7:e3:14:8f:a9:fd:d7:21:b8:
         80:ea:79:cd:9e:f3:1f:85:83:ca:7f:fc:87:4c:9d:d0:63:ac:
         e6:fa:6c:28:71:fd:0e:91:59:4e:73:eb:76:9f:ef:12:46:50:
         35:57:b7:d2:6a:3b:7e:62:ab:d5:23:d2:21:2a:c0:35:99:52:
         b3:66:1e:59:d2:c6:e8:92:b6:18:70:f8:bf:5c:1f:65:c8:5f:
         56:f9:af:8b:b6:9b:cd:1a:1f:b8:2e:ed:81:e5:26:d9:62:6f:
         ef:2a:be:42:cb:35:e2:56:cb:7f:e6:e1:74:41:5b:23:13:dd:
         45:fe:51:47:82:2b:e7:9e:c6:1a:7f:a7:40:f1:48:8f:21:34:
         1c:af:62:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWrBeJYSm0v4ioWBDY58kFPoEVqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNDA0MDQxNDEyMjJaFw0yNTA0MDMxNDE3MjJaMDMxMTAvBgNV
BAMTKEVFRTJCRThDQTlDMkNEQzA5RURFRjVEMTk3NjVCQTBCQzUwRjU2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiay1pUfuZXXxbQcNYAvfphC8
MMeCCm62wI+S6jhdvEGM4EirbnW2Db9y3QcxjqEjnaNu9YZELxQjjZikMtvXEcAE
Q495SzG/SIIVyJ5vKporHPGmckdd0ZJzk6BN0+9zizp/6KyUzK1S3/LLMvsG8PCT
7jvSi3H+nabVMRmr+SyuzolzSOUmTt6FDLAbVJSdKpsEm2OGKQvFhjpuP7T07lqF
P9NQRRmVHQNj1l97KgNKWsqNSVzSntD1xnv+wNT/QSORFJ1l3L9MJRLUlhbzp5ZS
5LPlspS1v7PFtgWbmgnvVPG1vF20z8aey8uywcKVdg+HjpVQ2bVZj83PBT+5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7uK+jKnCzcCe3vXRl2W6C8UPVq8wHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KgwDQYJKoZIhvcNAQELBQADggEBAD1ruxTK
J6aZfynPVW7iaIPE6ZQZGwEjPhVzyu4ZJtRI4jSrd69xbbZjhXhsbLcsT9xp0XtZ
0JoX+k384+Y2fNJeqgxIv4mAw+0Kq6YREqs2TUOXYxcTT2jHYXcom7GbfegulMa6
dcSN+oLfKhW6/PwqXybN3rfjFI+p/dchuIDqec2e8x+Fg8p//IdMndBjrOb6bChx
/Q6RWU5z63af7xJGUDVXt9JqO35iq9Uj0iEqwDWZUrNmHlnSxuiSthhw+L9cH2XI
X1b5r4u2m80aH7gu7YHlJtlib+8qvkLLNeJWy3/m4XRBWyMT3UX+UUeCK+eexhp/
p0DxSI8hNByvYpA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:06 2024 by rpki-client on console-ams.rpki-client.org