Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          fFFiYNJQ7DNbDJ6h6p5l6TthFGZx/INMsns0dirwXaI=
Subject key identifier:   75:5E:5D:6F:27:2B:63:2F:5D:37:DF:CF:38:29:77:92:60:E2:93:44
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       55BD2CFE8B02CC537E5250891B1642336D03DAAD
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa
Signing time:             Fri 22 May 2026 17:23:14 +0000
ROA not before:           Fri 22 May 2026 17:18:14 +0000
ROA not after:            Fri 21 May 2027 17:23:14 +0000
asID:                     27712
IP address blocks:        200.220.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:2c:fe:8b:02:cc:53:7e:52:50:89:1b:16:42:33:6d:03:da:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May 22 17:18:14 2026 GMT
            Not After : May 21 17:23:14 2027 GMT
        Subject: CN=755E5D6F272B632F5D37DFCF3829779260E29344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:f5:a3:51:18:cd:00:99:c2:9a:7b:b8:2d:
                    2c:6a:d5:fc:b2:54:a0:e3:d5:02:cb:87:8c:cb:60:
                    b9:09:87:1c:34:8b:a6:a5:53:78:1e:4e:89:70:dd:
                    c2:7f:a2:a9:a9:4f:9d:d4:c1:df:b9:5d:cc:c1:aa:
                    ec:d2:54:06:76:1d:de:a1:76:a6:b7:d6:de:37:04:
                    dd:36:d7:97:ca:2c:d6:39:aa:f4:44:07:b0:0a:22:
                    e9:ff:9e:a0:c4:82:62:96:60:99:8d:2d:77:b3:1d:
                    b0:72:da:6b:c8:d0:cb:2c:ea:bf:3c:44:9a:2b:92:
                    ed:13:9e:70:90:d1:01:f6:74:75:0d:5a:7b:bc:4e:
                    aa:70:3d:f3:b4:26:7d:fc:b3:23:c1:ea:60:7b:b8:
                    a6:3a:cb:af:be:72:4e:23:eb:d0:18:77:97:fb:54:
                    51:2a:f9:0a:3c:15:4b:0b:36:be:52:ad:29:4a:d8:
                    54:0a:34:c3:17:ed:39:51:55:94:3c:f9:c3:f8:b6:
                    0c:e6:d1:23:73:bf:96:9b:7d:c6:ee:2d:49:7e:ab:
                    b8:82:41:eb:62:c0:9f:89:4a:78:ba:ec:8a:a2:a2:
                    84:2c:dc:07:ab:c3:70:1e:4d:b9:f1:67:d4:54:52:
                    63:c1:bf:30:59:53:44:b9:52:7a:b0:ac:d6:ca:39:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5E:5D:6F:27:2B:63:2F:5D:37:DF:CF:38:29:77:92:60:E2:93:44
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:dd:19:fe:73:6d:80:cc:9e:53:a1:42:52:fc:ce:76:74:
         de:16:65:a2:dc:f8:8b:96:bb:21:80:57:f0:2d:d4:a5:78:fe:
         b8:14:05:b0:70:23:bb:84:86:f8:f0:92:fc:05:8e:54:1a:a8:
         0b:7f:4a:af:6b:d1:ee:2c:a6:de:b4:8f:f3:53:05:50:78:3c:
         4d:8c:54:5f:e1:ac:d1:12:3c:52:e1:d7:a5:8a:de:5f:1c:db:
         1f:10:79:63:0f:a7:30:78:9e:77:78:67:aa:b7:35:6b:7a:3d:
         8f:84:92:9d:7d:1c:8b:c7:42:65:8c:b4:b4:0d:bb:cb:a4:30:
         47:e6:41:ad:fa:0e:e0:10:51:0c:d0:dd:9b:29:cf:1f:aa:50:
         01:9e:b1:06:f1:fd:10:d3:56:02:08:10:f7:8c:5b:3a:3b:36:
         4c:50:b2:11:eb:2f:14:34:5d:a3:8a:d5:f9:e4:2a:0d:d0:b9:
         15:59:7c:e2:7a:e0:8c:9e:5b:05:cf:85:09:19:49:49:08:dd:
         ec:18:11:8d:22:bd:f3:d5:20:c3:9f:ad:01:7a:eb:01:25:4e:
         7b:f2:cf:6d:82:1d:65:3c:5d:cb:ef:db:c3:c2:37:99:87:0c:
         41:f9:74:52:a0:96:4e:a4:a4:79:a1:83:d7:32:5b:9f:17:9d:
         fe:1b:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:58:31 2026 by rpki-client