Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          kZ4QB8TEJ9MOtHeJytbHeNiOQoC9vsJGov4Nqoyw6JI=
Subject key identifier:   84:CD:56:15:2C:AD:D6:09:AE:0F:18:74:E3:B3:C1:0A:5C:FD:52:D5
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       1FF53CA333C73195D1EF9F72A3F4BFE791CA0DD1
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa
Signing time:             Fri 08 May 2026 01:20:15 +0000
ROA not before:           Fri 08 May 2026 01:15:15 +0000
ROA not after:            Fri 07 May 2027 01:20:15 +0000
asID:                     27712
IP address blocks:        200.220.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f5:3c:a3:33:c7:31:95:d1:ef:9f:72:a3:f4:bf:e7:91:ca:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May  8 01:15:15 2026 GMT
            Not After : May  7 01:20:15 2027 GMT
        Subject: CN=84CD56152CADD609AE0F1874E3B3C10A5CFD52D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:ee:0a:34:37:c7:dc:c8:7e:86:5b:ff:0d:
                    86:45:c6:73:c6:3c:7d:63:fe:ce:b3:45:55:60:4c:
                    16:e7:07:91:b3:c2:26:69:6a:9d:5b:4f:eb:bd:24:
                    26:28:03:81:d9:33:23:88:d2:6d:e9:9f:a2:84:a8:
                    ae:78:c8:cf:e2:c5:01:73:c1:61:03:79:d3:68:f9:
                    6a:ba:4c:b4:62:9c:50:51:d8:20:34:47:f5:89:5f:
                    90:e4:72:a3:d1:e8:f3:da:2c:db:ba:37:f8:78:d8:
                    24:8b:82:1b:c2:f7:06:8e:9e:3c:cb:fd:f8:07:c5:
                    ff:72:27:6f:0f:fe:c8:af:93:cd:7d:96:83:56:15:
                    7f:a8:e5:88:cf:55:e3:4b:97:ce:7b:91:e3:f1:cf:
                    b6:c6:cd:e8:59:da:d9:e2:91:de:17:a9:cc:0c:0a:
                    70:78:17:2f:22:8b:27:6b:c2:31:ab:61:c1:e7:bf:
                    80:b7:27:79:99:2d:13:aa:81:5e:ae:99:3b:54:cb:
                    e8:75:30:d3:fc:05:35:83:97:9d:55:6d:8a:73:65:
                    4f:25:09:30:25:7b:33:d2:12:33:e8:7a:d8:48:dc:
                    06:3c:3f:54:ab:90:e7:a9:fb:35:6d:7c:aa:40:42:
                    d8:97:9c:41:ce:7f:d1:78:2b:e7:79:db:cf:aa:64:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:56:15:2C:AD:D6:09:AE:0F:18:74:E3:B3:C1:0A:5C:FD:52:D5
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136362e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:c5:fb:79:b5:60:f0:74:e5:ce:0c:3f:70:e5:32:d2:88:
         6d:09:d5:79:72:72:78:db:7c:66:bd:19:f5:07:ae:d8:d8:9f:
         c2:c0:8b:1d:58:c7:b8:2c:8b:81:50:f9:33:3e:b9:3a:02:17:
         f6:a1:20:ef:a6:06:07:ab:99:a7:6b:59:98:8e:06:dd:06:59:
         88:b7:a7:be:d6:13:b4:a7:38:04:92:74:60:a0:ab:2b:c8:1c:
         73:ad:28:23:ea:9d:1a:1a:c0:c5:16:1e:c4:71:4a:84:21:74:
         a5:7d:60:7a:d7:bc:08:e5:84:cd:a0:49:8d:99:a3:25:69:49:
         4d:f5:e2:49:a4:56:7b:df:0d:20:20:ff:b1:99:bf:bd:77:41:
         7c:c8:e8:ca:3e:fd:9f:98:32:be:45:73:a9:7a:4d:1b:47:ee:
         6d:40:24:b3:dc:65:52:8d:4f:39:0e:eb:91:a0:02:a6:04:34:
         6d:00:31:27:80:15:7b:6c:ab:99:ee:3e:79:ad:18:c1:d9:f2:
         32:cf:0e:cf:21:fe:b5:6a:e8:77:bc:d9:32:df:21:f7:24:51:
         ea:d1:9c:ec:29:ca:51:fd:49:53:99:5b:0d:64:74:94:3a:bd:
         f4:a7:3a:33:63:89:ef:a3:0e:95:d0:d5:92:da:68:80:63:8d:
         d1:85:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:16:00 2026 by rpki-client