Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          GbNUqyfKlXeZcyUYFJZyjQV46brrZamIuaqLSzN/eNc=
Subject key identifier:   6E:85:8A:42:2B:84:30:E8:46:A3:55:88:BF:2B:07:CA:76:CB:EE:B0
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       4F05CDC11C95886FC03EB9190F9613BB971AC38C
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa
Signing time:             Thu 05 Jun 2025 14:27:37 +0000
ROA not before:           Thu 05 Jun 2025 14:22:37 +0000
ROA not after:            Thu 04 Jun 2026 14:27:37 +0000
asID:                     27712
IP address blocks:        200.220.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:cd:c1:1c:95:88:6f:c0:3e:b9:19:0f:96:13:bb:97:1a:c3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Jun  5 14:22:37 2025 GMT
            Not After : Jun  4 14:27:37 2026 GMT
        Subject: CN=6E858A422B8430E846A35588BF2B07CA76CBEEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:8e:17:eb:d9:4d:9a:c0:e9:d0:b4:4f:c2:
                    8d:f9:79:0e:fe:96:d6:4f:c4:02:4c:48:1b:94:e5:
                    30:10:c8:e6:0e:f2:21:86:da:cb:13:ea:9d:28:07:
                    9e:18:8a:0e:02:39:8f:91:35:15:7b:8a:63:e6:5e:
                    f1:e9:9f:62:84:fd:5a:08:ca:a3:b8:56:11:1d:e6:
                    70:37:1d:de:76:af:83:cb:4e:96:a7:29:2e:81:f0:
                    20:49:99:aa:ad:05:4a:42:69:cc:34:2e:58:e4:9e:
                    4c:9c:d8:64:55:f0:1a:31:05:d9:8c:48:37:58:aa:
                    8c:3d:ef:63:db:87:b5:1d:48:73:7e:29:ba:97:5a:
                    e1:18:c8:08:9f:84:82:e2:f5:01:83:f3:f3:4b:69:
                    74:1c:6b:90:34:c2:01:8e:8f:b8:a4:bb:c9:e2:fa:
                    da:62:8a:13:af:e7:9a:32:d4:27:b8:70:84:0c:88:
                    15:1e:1a:3f:26:ab:b1:27:f0:9f:10:d8:03:1e:1e:
                    67:cb:1d:e3:3f:26:62:1f:33:36:6f:46:5b:b1:a1:
                    70:ce:64:dd:1c:41:33:8a:69:3e:58:11:d4:fb:b1:
                    43:87:ba:13:95:24:7f:d4:4b:55:1e:a9:ff:d7:d5:
                    7c:1b:64:b3:79:00:55:11:f8:2d:c1:d7:ba:59:ac:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:8A:42:2B:84:30:E8:46:A3:55:88:BF:2B:07:CA:76:CB:EE:B0
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:4f:4f:18:4f:43:fb:aa:df:8b:c3:17:c0:d2:13:3b:04:
         cc:46:a2:82:50:1d:c0:f8:96:d5:c7:93:1e:b9:3f:f1:32:04:
         df:31:cf:e9:90:63:f4:29:78:4e:5e:60:9a:23:b2:a8:da:5c:
         af:8b:40:0a:07:72:bf:bf:a6:00:05:7b:4c:06:0b:f1:7d:e4:
         3e:f8:05:86:17:3b:62:a6:62:b3:42:8f:a4:b0:06:5f:c4:eb:
         bd:02:8f:ce:87:6d:b7:4c:6c:02:d6:ab:df:e5:5b:0b:4a:8c:
         98:38:4a:f5:04:22:07:8a:6a:0f:f2:d0:21:44:59:69:f1:f9:
         b4:72:a4:a6:31:ad:ef:69:92:ad:5f:96:38:4d:af:1c:a9:e2:
         74:18:fb:37:38:db:63:21:97:7b:06:87:4c:16:29:e5:81:43:
         74:1a:d7:07:43:85:b6:b6:5c:47:2b:a4:67:e7:db:48:db:2a:
         a7:94:8d:00:49:ca:d0:b8:d9:68:a1:66:57:a8:f1:8d:bc:6e:
         86:9b:6d:ad:50:25:f6:28:34:91:16:51:22:50:41:3b:ea:d8:
         e4:fe:db:e2:2f:e0:8d:94:c3:77:91:7c:e1:4a:bc:86:9c:e5:
         8a:f9:97:85:e1:b1:15:59:1b:4a:6b:38:ac:32:72:ea:16:f9:
         91:7e:54:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTwXNwRyViG/APrkZD5YTu5caw4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNTA2MDUxNDIyMzdaFw0yNjA2MDQxNDI3MzdaMDMxMTAvBgNV
BAMTKDZFODU4QTQyMkI4NDMwRTg0NkEzNTU4OEJGMkIwN0NBNzZDQkVFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafY4X69lNmsDp0LRPwo35eQ7+
ltZPxAJMSBuU5TAQyOYO8iGG2ssT6p0oB54Yig4COY+RNRV7imPmXvHpn2KE/VoI
yqO4VhEd5nA3Hd52r4PLTpanKS6B8CBJmaqtBUpCacw0Lljknkyc2GRV8BoxBdmM
SDdYqow972Pbh7UdSHN+KbqXWuEYyAifhILi9QGD8/NLaXQca5A0wgGOj7iku8ni
+tpiihOv55oy1Ce4cIQMiBUeGj8mq7En8J8Q2AMeHmfLHeM/JmIfMzZvRluxoXDO
ZN0cQTOKaT5YEdT7sUOHuhOVJH/US1Ueqf/X1XwbZLN5AFUR+C3B17pZrI4zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUboWKQiuEMOhGo1WIvysHynbL7rAwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3K8wDQYJKoZIhvcNAQELBQADggEBAEzwT08Y
T0P7qt+LwxfA0hM7BMxGooJQHcD4ltXHkx65P/EyBN8xz+mQY/QpeE5eYJojsqja
XK+LQAoHcr+/pgAFe0wGC/F95D74BYYXO2KmYrNCj6SwBl/E670Cj86HbbdMbALW
q9/lWwtKjJg4SvUEIgeKag/y0CFEWWnx+bRypKYxre9pkq1fljhNrxyp4nQY+zc4
22Mhl3sGh0wWKeWBQ3Qa1wdDhba2XEcrpGfn20jbKqeUjQBJytC42WihZleo8Y28
boabba1QJfYoNJEWUSJQQTvq2OT+2+Iv4I2Uw3eRfOFKvIac5Yr5l4XhsRVZG0pr
OKwycuoW+ZF+VFE=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:29 2025 by rpki-client