Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3137342e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          1dPVaRyHU9MvZ21vN464GG12WmzoOvUiqnGsU6wxl0s=
Subject key identifier:   9C:EA:AF:DA:D5:81:F3:44:79:C5:D2:9A:78:0F:D7:08:1C:6B:E2:78
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       733D8F0BB1C717EE45991DA1B605DB0DDEF08E7C
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:8f:0b:b1:c7:17:ee:45:99:1d:a1:b6:05:db:0d:de:f0:8e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=9CEAAFDAD581F34479C5D29A780FD7081C6BE278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:02:6b:c2:9a:aa:f9:97:58:0b:bb:cf:33:
                    83:f1:e9:0f:c1:2f:cb:17:66:09:cb:05:15:e4:03:
                    df:45:41:12:1e:56:0f:d9:7f:12:af:84:14:0d:fa:
                    3f:98:91:42:fd:31:51:48:c5:75:7c:a4:ca:ff:a7:
                    57:16:24:f6:bf:64:97:11:ef:25:fb:53:59:f1:c9:
                    84:64:f9:6a:27:23:29:98:97:1c:38:6f:f7:ea:c4:
                    fb:5b:b3:8c:b6:e7:e4:82:33:fc:43:c8:46:63:e8:
                    38:b9:18:a8:b4:6a:84:5e:40:1a:46:00:06:d9:c5:
                    21:6c:9c:3c:87:17:2f:ec:88:96:15:1c:f3:d6:6c:
                    b8:74:dc:ee:c8:28:9d:cb:57:00:9d:0c:b0:51:d1:
                    3b:b0:83:80:f8:16:01:0a:34:15:16:32:f6:b3:fd:
                    74:cf:12:12:33:32:84:f8:d1:8e:b0:b5:9e:b3:16:
                    c4:9d:67:fd:3b:d6:bb:ac:79:14:91:59:75:12:66:
                    9d:9f:0c:7a:87:4b:1e:df:4c:e1:15:2e:ce:c0:32:
                    36:47:02:ce:5a:86:9e:f5:e4:b8:7d:7e:b7:66:d9:
                    24:60:2d:a9:3f:86:5b:08:a1:27:d9:b9:d2:8a:57:
                    2e:4a:c4:a5:a2:e2:a5:97:77:8c:27:27:13:60:df:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:AF:DA:D5:81:F3:44:79:C5:D2:9A:78:0F:D7:08:1C:6B:E2:78
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:9a:70:67:2b:4f:5d:78:d5:e2:76:92:f7:10:90:f0:8a:
         6f:af:ea:64:94:0b:8a:db:ef:89:86:37:39:9c:d6:be:e4:c2:
         32:63:0d:f6:eb:c7:07:1e:1a:a4:b3:ec:5a:15:2b:92:86:b9:
         66:84:4a:1f:80:8a:d6:5b:31:ec:93:9b:0b:43:37:d4:25:53:
         d7:bd:7d:73:b5:e9:b5:9b:30:69:78:2c:d4:6c:83:5a:e5:4d:
         fd:e0:9c:d6:67:20:5c:a5:89:54:12:2e:49:ca:9e:9f:11:f3:
         ae:5a:9d:1f:e8:fa:c3:9b:2a:1f:5f:5e:4f:3f:e6:03:9a:36:
         f3:f2:20:29:47:1a:b7:8a:62:47:2d:d4:ed:06:65:8b:a7:4b:
         3b:27:30:b4:59:a4:ac:2f:7b:3b:4a:5d:05:ce:9f:95:d0:29:
         3a:cf:04:89:b1:52:48:71:64:39:50:dd:08:01:c0:49:4f:89:
         a2:86:98:b6:42:22:53:a1:a4:e5:f5:7e:e6:d2:1c:e1:86:8d:
         25:fb:a1:ea:15:06:d9:56:23:9e:d5:14:c3:4c:7f:21:73:93:
         7f:53:ea:5d:24:5c:6f:15:19:93:d1:16:73:ee:48:e7:07:00:
         92:d4:60:a4:d1:2c:39:25:ec:a1:ed:bb:ca:c5:ac:8f:dd:23:
         ec:c2:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:40 2025 by rpki-client