Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136382e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          BrQc07y02F4ZgVvMMuo+mNmdTD9KvESSxOgRNzWKS+8=
Subject key identifier:   64:09:88:B1:65:E5:3D:67:94:FE:AC:51:B3:8B:3A:45:5F:50:CF:C3
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       56E3685D3E69C3A8B7F6FC15B6B6D0421A9058A5
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203237373132.roa
Signing time:             Tue 01 Sep 2026 16:59:31 +0000
ROA not before:           Tue 01 Sep 2026 16:54:31 +0000
ROA not after:            Tue 31 Aug 2027 16:59:31 +0000
asID:                     27712
IP address blocks:        200.220.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:68:5d:3e:69:c3:a8:b7:f6:fc:15:b6:b6:d0:42:1a:90:58:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Sep  1 16:54:31 2026 GMT
            Not After : Aug 31 16:59:31 2027 GMT
        Subject: CN=640988B165E53D6794FEAC51B38B3A455F50CFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7b:90:fa:83:e8:51:d6:bc:4a:66:c7:4b:2b:
                    4c:f8:85:c0:b8:1b:13:4e:e2:49:e3:03:cf:f9:e7:
                    89:44:fb:69:80:3f:12:7f:aa:49:2d:6d:7b:ca:69:
                    1d:75:82:97:0c:25:98:70:f7:ab:d4:ff:26:6e:92:
                    1d:44:f8:f1:60:cb:eb:1b:c4:39:b2:cf:2e:29:11:
                    3e:10:17:db:80:23:75:1d:9d:8e:e2:bb:fd:eb:75:
                    3c:5d:db:32:8a:d2:27:85:d4:55:f8:f1:8a:44:45:
                    e2:8d:b1:49:47:9d:e4:c3:55:32:ae:0e:b4:20:5d:
                    c0:96:e1:65:ae:50:6d:5e:db:e8:9b:06:cc:a0:90:
                    45:4a:d3:eb:63:34:4c:f7:70:1a:ec:79:0a:40:74:
                    b1:05:80:ae:bd:ea:6c:ed:00:30:82:22:a8:b1:d2:
                    10:2d:84:61:16:d4:0e:55:4c:3e:1f:e2:fd:3c:4e:
                    dc:5c:84:f7:50:34:f8:48:f6:22:a8:e1:58:3f:a9:
                    02:f0:dc:80:a9:aa:20:01:28:f6:5b:66:76:90:76:
                    e6:8d:ca:e0:99:e3:c5:c5:17:4a:ef:20:ac:78:4a:
                    42:97:2f:81:85:fa:1a:c3:4e:6c:e8:96:ac:5f:56:
                    96:e5:17:f3:02:e7:c9:a9:6b:d8:1e:bd:95:7b:a6:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:88:B1:65:E5:3D:67:94:FE:AC:51:B3:8B:3A:45:5F:50:CF:C3
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:6a:f9:78:9d:36:28:15:81:a2:8c:77:e4:a0:1f:b4:bd:
         7d:34:f2:70:c1:a6:39:44:4f:67:62:8d:d9:08:03:66:ab:15:
         1d:a2:53:68:39:57:20:7f:f2:ec:84:86:bc:ad:9c:36:b9:d0:
         1d:d6:93:95:12:1a:53:b9:f2:11:03:02:a4:26:8f:8c:9c:97:
         8d:36:62:f8:67:4d:04:ec:9c:bc:16:76:6f:85:4e:b0:0c:1c:
         03:d7:d9:2f:b8:81:06:18:98:c9:89:05:64:01:03:27:92:86:
         e1:b2:bf:d4:d6:aa:da:2f:6e:23:96:84:b4:eb:6e:b3:96:1c:
         95:3d:5b:a8:00:ca:c8:93:c6:86:f9:1a:87:01:17:0a:de:de:
         2c:84:34:46:00:11:8b:62:62:02:ea:91:87:91:0e:d4:31:2a:
         28:85:14:0d:21:74:0d:e0:25:14:05:f1:ca:b8:03:3d:ca:2e:
         90:35:33:b6:38:21:c3:2b:f4:f8:92:4d:1c:2e:fb:21:d0:1a:
         6c:ae:58:1c:06:e7:7c:58:b7:9d:1d:34:e9:51:90:eb:9e:4a:
         8b:4c:f4:e3:b2:ba:a1:e8:bd:a5:cd:2d:0c:15:22:96:85:d6:
         21:8f:ce:7f:08:fd:4d:77:97:03:ee:55:00:e1:53:20:85:c8:
         4b:7d:f0:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVuNoXT5pw6i39vwVtrbQQhqQWKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNjA5MDExNjU0MzFaFw0yNzA4MzExNjU5MzFaMDMxMTAvBgNV
BAMTKDY0MDk4OEIxNjVFNTNENjc5NEZFQUM1MUIzOEIzQTQ1NUY1MENGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDre5D6g+hR1rxKZsdLK0z4hcC4
GxNO4knjA8/554lE+2mAPxJ/qkktbXvKaR11gpcMJZhw96vU/yZukh1E+PFgy+sb
xDmyzy4pET4QF9uAI3UdnY7iu/3rdTxd2zKK0ieF1FX48YpEReKNsUlHneTDVTKu
DrQgXcCW4WWuUG1e2+ibBsygkEVK0+tjNEz3cBrseQpAdLEFgK696mztADCCIqix
0hAthGEW1A5VTD4f4v08TtxchPdQNPhI9iKo4Vg/qQLw3ICpqiABKPZbZnaQduaN
yuCZ48XFF0rvIKx4SkKXL4GF+hrDTmzolqxfVpblF/MC58mpa9gevZV7pvXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZAmIsWXlPWeU/qxRs4s6RV9Qz8MwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3KgwDQYJKoZIhvcNAQELBQADggEBAIIaavl4
nTYoFYGijHfkoB+0vX008nDBpjlET2dijdkIA2arFR2iU2g5VyB/8uyEhrytnDa5
0B3Wk5USGlO58hEDAqQmj4ycl402YvhnTQTsnLwWdm+FTrAMHAPX2S+4gQYYmMmJ
BWQBAyeShuGyv9TWqtovbiOWhLTrbrOWHJU9W6gAysiTxob5GocBFwre3iyENEYA
EYtiYgLqkYeRDtQxKiiFFA0hdA3gJRQF8cq4Az3KLpA1M7Y4IcMr9PiSTRwu+yHQ
GmyuWBwG53xYt50dNOlRkOueSotM9OOyuqHovaXNLQwVIpaF1iGPzn8I/U13lwPu
VQDhUyCFyEt98DA=
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:58:40 2026 by rpki-client