Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          qjPxn0sCFRePRogGSjY+OiF8P5umwka4JhYNpZIEo8M=
Subject key identifier:   16:9A:A8:16:5B:A6:4F:9A:72:A2:A1:A4:57:24:35:BD:04:75:B1:9D
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       7F1F51689AF097C371971F88F093A74882F1FCA8
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa
Signing time:             Tue 06 Aug 2024 18:44:04 +0000
ROA not before:           Tue 06 Aug 2024 18:39:04 +0000
ROA not after:            Tue 05 Aug 2025 18:44:04 +0000
asID:                     27712
IP address blocks:        200.220.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1f:51:68:9a:f0:97:c3:71:97:1f:88:f0:93:a7:48:82:f1:fc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Aug  6 18:39:04 2024 GMT
            Not After : Aug  5 18:44:04 2025 GMT
        Subject: CN=169AA8165BA64F9A72A2A1A4572435BD0475B19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:d5:39:c1:f3:82:f5:00:b5:7b:b0:8e:2f:
                    46:2c:49:1e:e7:c9:71:fa:50:e9:24:9b:4a:75:7d:
                    28:9a:39:70:b8:59:07:33:c9:24:08:e0:d6:f7:de:
                    23:0c:0f:68:1f:f7:48:41:fa:65:96:9a:d7:85:ef:
                    55:7b:0d:93:6f:db:6a:10:12:3b:4f:dd:4c:39:93:
                    b4:b5:d3:13:49:dc:2f:96:ee:cc:e0:3e:6c:39:32:
                    fc:07:6d:23:a6:e1:51:84:af:a5:f6:63:ce:42:b7:
                    dd:49:d2:17:f0:69:e3:cd:68:d2:32:a3:ed:70:bd:
                    d4:33:9f:55:19:8c:60:75:9d:5b:24:de:90:8f:4a:
                    47:86:2c:48:3e:8a:35:c2:c0:86:e0:58:bf:41:b9:
                    c4:8c:c9:1c:c6:b4:4a:7e:44:7b:48:19:3f:4c:f7:
                    05:66:b4:ee:69:1f:26:0a:93:e8:4f:16:38:7c:91:
                    3d:b2:5e:f9:45:48:f1:10:cf:e4:ae:8f:df:f0:4d:
                    42:1b:e3:ab:7c:e4:e6:8e:2a:59:2f:cb:43:66:3f:
                    f0:02:28:57:54:66:14:f8:c1:4c:40:4e:52:af:8b:
                    f7:1d:0a:9a:3a:aa:18:a5:b0:d5:7b:65:bc:92:df:
                    1f:63:7e:a3:1f:c1:c5:f4:46:80:ca:73:80:f6:13:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:A8:16:5B:A6:4F:9A:72:A2:A1:A4:57:24:35:BD:04:75:B1:9D
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:08:b0:ef:45:b8:39:c2:66:6e:07:9d:85:be:59:c2:8a:
         b8:01:05:33:41:3d:ef:d3:ad:ca:52:ce:0e:20:4c:c8:3b:bc:
         a5:46:7a:8c:28:3f:1e:20:fb:c2:63:0d:3c:13:72:e8:72:0c:
         92:e5:e8:ec:77:f7:28:e4:db:2b:99:43:d6:07:f4:63:37:5f:
         71:2e:73:f9:25:a4:cb:29:4f:77:2a:be:5c:72:4a:0f:90:66:
         68:2e:45:f9:65:21:f2:42:d9:03:ce:39:83:24:ea:ba:ea:20:
         17:8d:03:78:e6:b5:de:d3:fd:eb:27:fc:c4:15:83:3f:ec:f3:
         6f:0a:b2:2f:25:b6:f1:f0:b0:41:12:85:aa:10:30:56:8d:13:
         25:21:f5:a9:1e:47:3d:3c:31:36:e7:c5:1d:6e:29:49:74:95:
         e4:e4:85:b6:1e:f5:f1:fc:56:2c:bd:9e:25:cb:b9:ff:65:df:
         46:e9:b0:3d:e6:86:ec:0f:66:0d:21:a4:d6:69:28:97:65:6f:
         9e:63:6e:05:c8:00:e4:f7:5e:0c:d9:7e:95:a6:c6:fc:03:e1:
         42:cd:c8:6c:f9:5d:ed:82:bc:dc:d6:78:34:8f:e8:ac:09:60:
         31:f0:68:c0:1b:74:af:0d:67:c0:03:c1:41:f2:be:a5:78:e0:
         6a:ca:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:55 2025 by rpki-client