Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          Tk+Z5JSzKPeGq5C30ZeMsqS0KMRtsO+VmxnWClTNXdg=
Subject key identifier:   BA:1C:CC:2B:DA:9B:A8:56:10:1E:2A:17:77:4B:5C:1F:DE:E3:11:25
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       574CBE682536D480805CB1843C8F9121E26DC00F
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa
Signing time:             Fri 08 May 2026 01:20:15 +0000
ROA not before:           Fri 08 May 2026 01:15:15 +0000
ROA not after:            Fri 07 May 2027 01:20:15 +0000
asID:                     27712
IP address blocks:        200.220.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:be:68:25:36:d4:80:80:5c:b1:84:3c:8f:91:21:e2:6d:c0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: May  8 01:15:15 2026 GMT
            Not After : May  7 01:20:15 2027 GMT
        Subject: CN=BA1CCC2BDA9BA856101E2A17774B5C1FDEE31125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:1a:63:a5:20:bc:a2:c6:b7:fe:55:85:38:
                    3a:ea:f1:a5:0d:52:6e:9c:ab:ba:fa:9f:9e:e7:2c:
                    69:72:e1:81:8a:d3:ca:dc:cb:0a:a7:67:68:39:68:
                    28:ce:19:60:28:46:1c:ad:ef:eb:74:38:7e:2e:c8:
                    fe:74:d8:17:ca:92:bb:2a:6d:5d:f9:99:f4:b3:a6:
                    3e:23:6d:f0:b5:ce:df:a1:0b:ed:09:ea:5b:ab:6a:
                    b2:94:f6:f1:f2:e7:2b:84:19:c5:ac:5b:8f:9f:b9:
                    97:79:1f:2f:63:f3:a6:ec:4c:fe:2d:80:ae:cd:0e:
                    39:a1:9b:64:e0:99:c4:0d:bd:b0:be:60:a8:91:c4:
                    1a:46:e1:86:d7:c9:bf:ce:26:cc:e9:8c:cf:6d:ff:
                    0d:b7:b1:24:d6:b9:f8:18:c4:4c:0c:90:bd:fe:47:
                    d5:2d:35:41:da:5f:df:9a:d4:20:47:37:b1:63:f3:
                    3c:c9:d7:60:f4:07:bd:b5:34:11:7a:98:6b:16:93:
                    08:a6:ef:24:72:24:77:7d:d0:bc:15:84:c4:bd:8b:
                    a5:f6:a8:07:9e:c6:62:56:c9:f6:ab:27:31:6e:cd:
                    8a:af:75:e5:b5:15:03:2f:aa:18:bc:ce:f1:32:15:
                    e5:03:5f:91:8d:44:27:24:74:c3:a2:fc:97:33:ad:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:CC:2B:DA:9B:A8:56:10:1E:2A:17:77:4B:5C:1F:DE:E3:11:25
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137352e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:08:ea:fc:a0:2b:77:ec:eb:85:ff:cc:5c:5b:47:25:a2:d2:
         70:e8:0d:e2:25:7b:d1:48:32:57:53:1a:49:74:15:4f:ab:08:
         bd:a6:47:ee:63:e2:16:fd:a5:ea:c8:bc:4b:cf:63:ce:b6:bc:
         28:3a:3a:1d:f5:d9:1f:8d:02:61:a8:5d:1b:1a:b6:60:1b:98:
         89:08:57:21:54:9e:90:d6:47:4f:47:09:75:07:59:c6:d2:75:
         d8:ee:45:2f:cf:7d:c9:6e:da:54:95:28:c8:16:6c:09:b3:1f:
         8a:b8:9c:6d:97:74:fb:00:a5:8b:40:d6:8c:dd:3f:7f:86:3f:
         7d:8a:ed:09:3a:08:a9:48:19:79:a1:77:94:78:de:fa:7e:c0:
         6c:d8:5c:80:66:08:8c:74:ea:ce:04:48:30:09:20:02:b6:d5:
         c7:85:f6:85:bd:e2:62:9f:43:70:f7:c2:9b:af:e7:59:76:03:
         f1:1b:7b:61:ac:27:7d:28:56:7a:5d:22:34:47:97:74:0e:38:
         c6:d4:0d:48:d7:ad:dd:87:ec:a6:10:7a:64:9e:d4:3d:08:e7:
         c7:29:9b:65:55:c0:d6:0e:8b:1a:cb:4f:95:01:ec:5d:87:05:
         3e:1b:bf:0a:2e:d3:c0:f1:a1:7d:0f:39:d9:7d:2c:0e:ba:98:
         84:39:6d:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV0y+aCU21ICAXLGEPI+RIeJtwA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNjA1MDgwMTE1MTVaFw0yNzA1MDcwMTIwMTVaMDMxMTAvBgNV
BAMTKEJBMUNDQzJCREE5QkE4NTYxMDFFMkExNzc3NEI1QzFGREVFMzExMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xRpjpSC8osa3/lWFODrq8aUN
Um6cq7r6n57nLGly4YGK08rcywqnZ2g5aCjOGWAoRhyt7+t0OH4uyP502BfKkrsq
bV35mfSzpj4jbfC1zt+hC+0J6lurarKU9vHy5yuEGcWsW4+fuZd5Hy9j86bsTP4t
gK7NDjmhm2TgmcQNvbC+YKiRxBpG4YbXyb/OJszpjM9t/w23sSTWufgYxEwMkL3+
R9UtNUHaX9+a1CBHN7Fj8zzJ12D0B721NBF6mGsWkwim7yRyJHd90LwVhMS9i6X2
qAeexmJWyfarJzFuzYqvdeW1FQMvqhi8zvEyFeUDX5GNRCckdMOi/JczrRJTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuhzMK9qbqFYQHioXd0tcH97jESUwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3K8wDQYJKoZIhvcNAQELBQADggEBAGcI6vyg
K3fs64X/zFxbRyWi0nDoDeIle9FIMldTGkl0FU+rCL2mR+5j4hb9perIvEvPY862
vCg6Oh312R+NAmGoXRsatmAbmIkIVyFUnpDWR09HCXUHWcbSddjuRS/Pfclu2lSV
KMgWbAmzH4q4nG2XdPsApYtA1ozdP3+GP32K7Qk6CKlIGXmhd5R43vp+wGzYXIBm
CIx06s4ESDAJIAK21ceF9oW94mKfQ3D3wpuv51l2A/Ebe2GsJ30oVnpdIjRHl3QO
OMbUDUjXrd2H7KYQemSe1D0I58cpm2VVwNYOixrLT5UB7F2HBT4bvwou08DxoX0P
Odl9LA66mIQ5bSg=
-----END CERTIFICATE-----
Generated at Wed May 13 18:19:37 2026 by rpki-client