Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          tpiqRQi8x/zwyHzqb3g0xKYlQx9BO7kKszsDPdJQ+w4=
Subject key identifier:   8F:93:44:5E:F5:1F:22:5C:27:37:92:89:61:B6:F0:D3:57:7B:8C:9F
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       6E8CFB4034CD22CDDF2C999F86D499985421A214
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa
Signing time:             Fri 08 May 2026 01:20:15 +0000
ROA not before:           Fri 08 May 2026 01:15:15 +0000
ROA not after:            Fri 07 May 2027 01:20:15 +0000
asID:                     27712
IP address blocks:        200.220.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:fb:40:34:cd:22:cd:df:2c:99:9f:86:d4:99:98:54:21:a2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May  8 01:15:15 2026 GMT
            Not After : May  7 01:20:15 2027 GMT
        Subject: CN=8F93445EF51F225C2737928961B6F0D3577B8C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:ce:a2:e7:78:c1:6c:0a:2f:83:17:28:a6:
                    93:a0:a1:60:c9:e0:61:87:ef:fe:ea:43:f0:28:9c:
                    c6:e8:38:2a:1e:0c:3f:0f:d3:a5:f0:e4:cc:f8:53:
                    49:dc:80:6f:c1:98:14:ad:b8:15:b9:af:87:ea:88:
                    61:88:ab:22:ac:4d:89:5b:47:8f:db:6b:6a:b6:e0:
                    9a:7b:2b:60:e9:4e:36:1a:f0:3f:af:27:cf:80:e4:
                    78:e1:9e:dd:93:96:14:e9:27:90:6e:b3:0e:00:53:
                    d8:8b:75:f0:f9:3a:cb:06:e3:54:b2:5b:74:8d:a8:
                    d6:a3:70:46:80:e6:05:37:b9:71:05:40:7d:f5:04:
                    cf:ae:d9:4e:73:6e:95:c8:54:45:4e:ba:a6:b8:11:
                    08:0c:16:9a:73:80:fb:55:e6:0b:a2:29:6c:26:7d:
                    d9:60:c8:4f:56:03:b6:82:b2:70:66:c6:01:76:2e:
                    de:1e:cf:de:db:ce:af:ea:30:68:9d:87:21:19:00:
                    26:0d:e4:03:0e:89:9e:ee:be:49:2f:c6:09:22:4d:
                    f1:f3:03:89:8c:72:ec:a9:5c:6c:30:57:af:08:51:
                    17:21:e5:5c:79:4c:ed:95:cf:71:b6:c0:73:2c:d3:
                    2f:f9:60:5e:d2:de:90:be:f5:d2:ea:27:94:e9:29:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:93:44:5E:F5:1F:22:5C:27:37:92:89:61:B6:F0:D3:57:7B:8C:9F
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136342e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:17:00:a1:31:7f:cf:8e:46:07:c7:e3:69:bb:cb:9e:d8:
         cf:79:4c:65:28:ad:6e:93:c1:77:bb:7f:50:e8:38:58:57:69:
         0b:19:36:c1:28:05:98:9e:30:e3:84:1b:60:ca:32:38:ea:f7:
         45:42:b6:82:55:cf:4a:0c:1e:bf:b1:db:1e:b3:4b:27:c4:84:
         40:05:8b:1b:3c:a5:8f:f7:9a:10:77:75:af:0b:0b:37:64:d3:
         f5:fe:fb:67:ca:6c:02:fe:e3:00:c0:40:0b:bf:44:4d:37:72:
         23:ce:c0:c3:d9:6b:9b:c7:7f:98:08:71:24:1b:84:3a:71:86:
         46:6d:9b:64:6f:26:b6:fd:fe:7b:eb:8e:2f:47:7c:a7:82:f4:
         8b:5d:a8:e3:d8:4d:3a:ad:d5:c9:4a:3c:e2:4a:af:64:66:3a:
         68:f5:a8:d2:c1:a1:c7:e4:73:83:34:cb:2a:ce:0a:af:c5:bc:
         14:64:1e:7a:05:64:84:1e:ad:f1:ca:de:3a:15:dc:9d:c9:42:
         c1:f0:07:1b:84:07:13:b1:17:bf:e0:3a:8b:86:97:99:01:5b:
         d5:81:3b:f2:f3:67:df:3e:e8:42:d2:87:97:3c:47:39:ed:d9:
         be:7e:07:32:3f:30:bd:15:74:a3:5f:32:0b:ae:3e:1e:91:d6:
         a9:56:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:24:50 2026 by rpki-client