Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136322e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136322e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          T0VFGUuJ+ZYFAtsi7WOEAYT+lrE7WGGC3WZHSlq1LB8=
Subject key identifier:   DC:FE:8C:AA:27:CC:2A:C2:93:D5:91:E4:F5:78:F2:B4:AB:7D:EC:D2
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       1F5E166689CEAC5995A7B45981E2D040E513C03B
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136322e302f32342d3234203d3e203237373132.roa
Signing time:             Fri 08 May 2026 01:20:15 +0000
ROA not before:           Fri 08 May 2026 01:15:15 +0000
ROA not after:            Fri 07 May 2027 01:20:15 +0000
asID:                     27712
IP address blocks:        200.220.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:16:66:89:ce:ac:59:95:a7:b4:59:81:e2:d0:40:e5:13:c0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May  8 01:15:15 2026 GMT
            Not After : May  7 01:20:15 2027 GMT
        Subject: CN=DCFE8CAA27CC2AC293D591E4F578F2B4AB7DECD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:54:6e:97:90:d0:54:45:36:6a:9c:f9:4c:
                    75:40:02:c3:1a:97:bf:a6:a3:54:e0:33:35:7c:33:
                    7e:9a:3f:0a:9f:19:7b:4d:40:2f:e3:78:e9:af:b1:
                    77:31:c5:47:b8:f2:6a:4f:83:a7:b5:52:10:ed:ec:
                    ff:2d:94:57:b4:18:2e:41:5c:9c:ff:f0:75:a6:1f:
                    ad:0e:80:5c:24:ca:b8:ee:35:4e:7f:5a:2b:1a:a3:
                    9d:5c:a0:3c:50:eb:60:07:27:aa:12:19:c0:9c:c2:
                    b1:e0:22:a6:46:d8:28:d9:4b:dd:d3:44:b6:b8:e1:
                    46:46:02:b5:0c:81:bd:a2:da:b1:d7:ec:0e:9b:d9:
                    e5:52:f8:79:6a:79:47:b7:c6:76:39:e4:2e:65:62:
                    66:48:36:5e:2f:41:61:36:c6:26:e1:ee:3b:5b:8f:
                    58:70:cc:a6:a4:6b:84:47:14:cb:cc:fe:40:93:02:
                    d6:bd:90:a6:81:1b:16:e4:88:cb:28:8f:03:ec:db:
                    49:cd:0c:64:9e:30:11:77:49:54:05:56:50:b6:8c:
                    22:b0:25:c4:1f:dc:cb:ed:84:04:6a:4c:a0:7e:cf:
                    d3:f8:9e:99:7c:af:48:d7:46:c1:84:8c:ff:b9:8e:
                    ea:72:10:0f:74:56:60:c5:a8:8c:80:02:70:3d:9e:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:8C:AA:27:CC:2A:C2:93:D5:91:E4:F5:78:F2:B4:AB:7D:EC:D2
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136322e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:44:2d:61:59:32:34:74:a1:b2:45:94:39:af:21:de:ba:
         30:c1:75:ee:33:56:89:b8:7e:d4:2e:92:f3:e9:77:db:25:95:
         bb:83:83:a3:ba:fe:a3:48:ae:2d:04:76:b2:89:ef:7e:2e:7b:
         81:b9:7d:cc:d0:a7:3a:bf:f9:8b:87:39:72:a0:dc:46:42:ad:
         57:af:d0:cf:3f:59:f3:b6:bc:b4:0a:23:ce:29:33:36:5c:33:
         4d:5e:0d:27:d0:5b:7a:6c:35:0b:ff:f1:f4:8c:f6:23:7b:36:
         89:1c:7e:c9:cb:65:65:75:05:2c:74:19:fe:d4:2a:b3:f2:bf:
         6f:4c:79:ea:c8:88:61:d7:eb:e3:0f:12:d7:c0:30:2a:1e:b5:
         2e:ca:04:7f:da:d8:33:e2:fa:a4:be:61:8f:2d:76:17:8b:e4:
         9d:aa:f3:f0:08:15:e7:e0:d8:75:20:9d:67:97:ce:5b:cb:55:
         eb:0d:24:84:ac:15:d6:bd:18:27:ca:f1:19:bc:3d:c4:fa:f6:
         81:bb:47:21:64:46:38:f4:c6:31:09:16:27:49:ec:82:2d:64:
         0e:dd:19:28:f6:af:76:b0:d2:cb:0c:87:87:d7:28:7f:bb:66:
         bb:43:4e:c2:92:3b:55:ee:f6:db:b3:61:1b:24:00:2d:3d:9b:
         42:5b:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:35 2026 by rpki-client