Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa
File:                     3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa (raw, json)
Hash identifier:          8jLTlW9iv6H9jJ7uJDGaYNpHI+HNHmsnptQ7XNIr0qY=
Subject key identifier:   57:3E:FA:B4:90:33:B4:30:E9:AC:86:76:8D:9B:CB:71:3C:D7:79:CA
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       0BF7E1BBEE66DEBC84082E4C67EAE2909BCB9BB9
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa
Signing time:             Tue 23 Sep 2025 19:38:00 +0000
ROA not before:           Tue 23 Sep 2025 19:33:00 +0000
ROA not after:            Tue 22 Sep 2026 19:38:00 +0000
asID:                     27712
IP address blocks:        200.220.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f7:e1:bb:ee:66:de:bc:84:08:2e:4c:67:ea:e2:90:9b:cb:9b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Sep 23 19:33:00 2025 GMT
            Not After : Sep 22 19:38:00 2026 GMT
        Subject: CN=573EFAB49033B430E9AC86768D9BCB713CD779CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:68:e8:27:f8:77:df:66:77:4c:91:bd:8c:
                    8e:1a:87:73:c4:a3:f9:f2:53:9c:6a:d2:99:30:87:
                    38:3f:a2:fd:42:02:fa:fb:97:fa:57:e5:d8:df:fe:
                    8d:f5:18:1b:f8:83:15:2d:27:b9:fa:9d:be:f3:35:
                    54:40:ed:23:47:b7:f3:54:20:cf:21:bd:1a:19:ec:
                    e7:2a:8a:00:6a:bb:da:cf:17:d4:80:68:b9:2d:dc:
                    22:04:dc:2f:4f:0b:16:db:80:b4:d0:8e:52:ba:2b:
                    b1:b0:3c:be:e8:46:34:49:15:21:be:8c:e6:cb:4e:
                    2f:d5:5b:c5:49:20:ea:04:d6:f2:29:96:a5:2b:65:
                    c4:f5:9c:7b:0a:f1:fc:5e:5a:aa:01:a0:2e:48:7d:
                    41:4b:7b:56:c6:59:f5:46:c3:9a:6e:3c:24:19:10:
                    23:3f:ad:d2:4f:2d:88:03:13:4f:b1:8e:5a:c2:6a:
                    4b:b7:f4:d8:fa:06:1c:93:11:7b:bb:ac:f7:d9:d8:
                    09:a7:01:c1:72:62:23:70:a4:3d:3c:36:b6:78:b4:
                    61:80:4a:91:26:85:06:7f:bf:67:b7:e6:73:93:13:
                    a8:ed:72:fa:fc:99:9d:84:48:fd:08:4a:71:cf:fd:
                    2d:a1:1e:1f:8d:ea:9a:20:7b:f0:75:f2:6e:25:5c:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:FA:B4:90:33:B4:30:E9:AC:86:76:8D:9B:CB:71:3C:D7:79:CA
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137342e302f32332d3233203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:a1:89:d6:56:01:2a:05:bb:63:f3:2d:87:86:d1:b0:08:
         de:da:25:de:f4:4a:ce:28:96:f0:46:32:d7:fa:ad:49:67:0d:
         b1:e4:43:7f:cb:7b:c0:ae:5c:d6:0d:eb:57:5f:73:6a:2c:24:
         60:01:af:64:12:88:08:7b:68:d7:77:51:bc:2e:e0:c8:36:ae:
         7e:51:91:fd:f2:9a:22:0d:b6:65:c1:ba:4d:88:60:da:fb:43:
         dd:7a:9b:2e:dc:06:ee:5a:a0:c9:ad:bf:0b:dc:ab:c5:cd:1f:
         d5:ae:41:73:f6:e3:f2:92:19:45:43:ac:b2:d7:32:d2:5a:d1:
         7e:f0:26:52:9e:33:0f:c8:15:74:8c:e1:48:eb:7d:68:69:ad:
         8d:92:b2:51:b9:e2:7d:30:af:73:d4:3d:5c:94:d6:db:d4:90:
         20:45:06:77:65:13:8b:70:20:e8:9b:b0:d3:9d:a7:b4:12:7c:
         19:80:23:72:91:d6:8f:e8:39:c7:32:33:b2:2a:6b:68:30:1d:
         e5:e0:d9:d4:2c:ff:57:a9:ad:80:7d:df:fe:a7:33:54:9c:e9:
         2f:99:57:f9:c0:6a:8d:04:8a:22:4d:4a:04:ae:35:a8:19:5e:
         1a:db:4b:45:1a:e2:ef:24:33:ab:7d:c4:a9:1c:fa:b7:41:b0:
         af:2d:d5:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC/fhu+5m3ryECC5MZ+rikJvLm7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNTA5MjMxOTMzMDBaFw0yNjA5MjIxOTM4MDBaMDMxMTAvBgNV
BAMTKDU3M0VGQUI0OTAzM0I0MzBFOUFDODY3NjhEOUJDQjcxM0NENzc5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdGjoJ/h332Z3TJG9jI4ah3PE
o/nyU5xq0pkwhzg/ov1CAvr7l/pX5djf/o31GBv4gxUtJ7n6nb7zNVRA7SNHt/NU
IM8hvRoZ7OcqigBqu9rPF9SAaLkt3CIE3C9PCxbbgLTQjlK6K7GwPL7oRjRJFSG+
jObLTi/VW8VJIOoE1vIplqUrZcT1nHsK8fxeWqoBoC5IfUFLe1bGWfVGw5puPCQZ
ECM/rdJPLYgDE0+xjlrCaku39Nj6BhyTEXu7rPfZ2AmnAcFyYiNwpD08NrZ4tGGA
SpEmhQZ/v2e35nOTE6jtcvr8mZ2ESP0ISnHP/S2hHh+N6poge/B18m4lXEvlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVz76tJAztDDprIZ2jZvLcTzXecowHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI3K4wDQYJKoZIhvcNAQELBQADggEBAHGuoYnW
VgEqBbtj8y2HhtGwCN7aJd70Ss4olvBGMtf6rUlnDbHkQ3/Le8CuXNYN61dfc2os
JGABr2QSiAh7aNd3Ubwu4Mg2rn5Rkf3ymiINtmXBuk2IYNr7Q916my7cBu5aoMmt
vwvcq8XNH9WuQXP24/KSGUVDrLLXMtJa0X7wJlKeMw/IFXSM4UjrfWhprY2SslG5
4n0wr3PUPVyU1tvUkCBFBndlE4twIOibsNOdp7QSfBmAI3KR1o/oOccyM7Iqa2gw
HeXg2dQs/1eprYB93/6nM1Sc6S+ZV/nAao0EiiJNSgSuNagZXhrbS0Ua4u8kM6t9
xKkc+rdBsK8t1fE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:02 2025 by rpki-client