Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          umSrj851UfZMUSLNPrRC+nI2S4tDHA9pp7FE3X1xlOM=
Subject key identifier:   C6:3A:56:1C:BB:20:52:B5:39:A3:2D:08:22:DC:79:DB:D4:0A:0A:EC
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       5841B822C6B01E3BC456A61998E36FB8A1913D26
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa
Signing time:             Fri 20 Jun 2025 17:16:12 +0000
ROA not before:           Fri 20 Jun 2025 17:11:12 +0000
ROA not after:            Fri 19 Jun 2026 17:16:12 +0000
asID:                     27712
IP address blocks:        200.220.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:41:b8:22:c6:b0:1e:3b:c4:56:a6:19:98:e3:6f:b8:a1:91:3d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun 20 17:11:12 2025 GMT
            Not After : Jun 19 17:16:12 2026 GMT
        Subject: CN=C63A561CBB2052B539A32D0822DC79DBD40A0AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:05:d5:61:84:19:15:be:69:76:c0:d7:62:
                    cc:d8:09:4a:90:2a:ad:33:38:06:63:55:d2:7c:d7:
                    b0:2c:20:10:a3:e1:82:63:79:71:05:f0:59:84:b8:
                    f8:10:4b:a0:38:16:bd:66:28:35:ec:4b:25:51:45:
                    ec:a0:9f:c7:e7:4c:cd:81:5a:59:9a:1a:f6:28:5b:
                    ef:ea:05:6d:16:a7:c8:35:83:30:88:ff:97:d7:1b:
                    08:21:63:c5:55:dd:05:eb:bf:58:f7:34:db:7d:03:
                    ed:76:74:37:a3:c9:a7:2c:77:aa:c4:cb:38:fe:ba:
                    ea:50:48:30:78:84:9e:8e:fa:82:72:2a:02:60:db:
                    2f:38:5b:3c:91:a1:5c:66:cc:b9:bd:37:56:65:a2:
                    08:87:5a:aa:d4:e0:74:58:27:e7:8d:10:76:d8:05:
                    27:13:7b:7b:c9:4b:46:f2:18:10:cf:77:52:3e:e1:
                    76:ab:e2:be:22:22:2d:eb:eb:4d:1d:4f:c7:89:90:
                    8b:86:a8:2e:54:b4:9a:79:6f:a5:45:9c:94:fd:e4:
                    53:8f:35:b9:c0:4d:09:90:b1:35:06:74:07:36:3b:
                    cb:4b:44:9b:be:75:21:37:c2:db:4f:01:eb:f8:91:
                    6d:c6:79:ea:79:b9:2c:0f:40:2a:01:e6:a2:32:6c:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3A:56:1C:BB:20:52:B5:39:A3:2D:08:22:DC:79:DB:D4:0A:0A:EC
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:bf:25:0f:78:d2:21:01:ee:6b:e2:9c:8a:81:79:3b:73:
         30:2b:00:7a:d9:c2:c7:76:a6:f3:36:6f:a2:b6:94:ad:2a:4b:
         34:b5:43:d3:41:18:91:27:6e:c3:21:ef:08:96:c6:40:c3:04:
         08:c4:85:89:3f:09:2e:1d:89:3a:98:9e:e3:ad:c5:82:e1:ec:
         19:a2:cc:30:c2:01:54:e9:c4:bd:d1:b1:80:ea:7a:6a:ef:19:
         68:6a:25:5a:68:57:67:b1:0d:84:ab:df:d3:0f:72:55:a1:5e:
         c0:4a:40:a9:02:3e:29:54:1d:c8:f2:60:a3:6f:9f:a5:e8:55:
         e8:0d:6d:7f:35:db:f3:32:10:fc:65:df:8f:fc:25:9c:13:08:
         d7:ba:53:2c:fe:67:57:2e:fa:7f:c6:cf:46:cb:03:94:6e:d7:
         b7:07:20:a9:10:81:6e:f1:aa:eb:c4:9e:47:10:a5:bf:58:cb:
         e6:3c:8f:19:70:77:9e:e3:47:4d:85:83:8e:06:78:d9:d0:42:
         a6:a6:5f:b2:00:16:89:2f:f9:65:d2:4a:f8:51:9f:88:cd:a1:
         06:50:3d:3f:64:2f:34:c0:ff:40:0c:f5:42:1a:ac:11:d9:fd:
         3b:0d:1b:ea:85:a8:27:e2:e3:45:81:4c:cf:a6:0e:f0:00:42:
         23:b1:1f:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWEG4IsawHjvEVqYZmONvuKGRPSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNTA2MjAxNzExMTJaFw0yNjA2MTkxNzE2MTJaMDMxMTAvBgNV
BAMTKEM2M0E1NjFDQkIyMDUyQjUzOUEzMkQwODIyREM3OURCRDQwQTBBRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmwXVYYQZFb5pdsDXYszYCUqQ
Kq0zOAZjVdJ817AsIBCj4YJjeXEF8FmEuPgQS6A4Fr1mKDXsSyVRReygn8fnTM2B
WlmaGvYoW+/qBW0Wp8g1gzCI/5fXGwghY8VV3QXrv1j3NNt9A+12dDejyacsd6rE
yzj+uupQSDB4hJ6O+oJyKgJg2y84WzyRoVxmzLm9N1ZlogiHWqrU4HRYJ+eNEHbY
BScTe3vJS0byGBDPd1I+4Xar4r4iIi3r600dT8eJkIuGqC5UtJp5b6VFnJT95FOP
NbnATQmQsTUGdAc2O8tLRJu+dSE3wttPAev4kW3Geep5uSwPQCoB5qIybJ19AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxjpWHLsgUrU5oy0IItx529QKCuwwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI3KwwDQYJKoZIhvcNAQELBQADggEBAFFfvyUP
eNIhAe5r4pyKgXk7czArAHrZwsd2pvM2b6K2lK0qSzS1Q9NBGJEnbsMh7wiWxkDD
BAjEhYk/CS4diTqYnuOtxYLh7BmizDDCAVTpxL3RsYDqemrvGWhqJVpoV2exDYSr
39MPclWhXsBKQKkCPilUHcjyYKNvn6XoVegNbX812/MyEPxl34/8JZwTCNe6Uyz+
Z1cu+n/Gz0bLA5Ru17cHIKkQgW7xquvEnkcQpb9Yy+Y8jxlwd57jR02Fg44GeNnQ
QqamX7IAFokv+WXSSvhRn4jNoQZQPT9kLzTA/0AM9UIarBHZ/TsNG+qFqCfi40WB
TM+mDvAAQiOxH1E=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:42 2025 by rpki-client