Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203237373132.roa
File:                     3230302e3232302e3136392e302f32342d3234203d3e203237373132.roa (raw, json)
Hash identifier:          xWnAzprWTpMdWmICD4GzV3yaNFOtWjktZdZ6gI3lmY8=
Subject key identifier:   C0:6F:DC:8E:9F:26:06:29:60:17:51:98:6E:FD:E7:8A:C1:3C:E0:B2
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       4DBEBD23B4D32AF50BFE43E49EF18A2DB43CD468
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203237373132.roa
Signing time:             Tue 01 Sep 2026 17:17:46 +0000
ROA not before:           Tue 01 Sep 2026 17:12:46 +0000
ROA not after:            Tue 31 Aug 2027 17:17:46 +0000
asID:                     27712
IP address blocks:        200.220.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 12:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:be:bd:23:b4:d3:2a:f5:0b:fe:43:e4:9e:f1:8a:2d:b4:3c:d4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Sep  1 17:12:46 2026 GMT
            Not After : Aug 31 17:17:46 2027 GMT
        Subject: CN=C06FDC8E9F260629601751986EFDE78AC13CE0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:66:5d:04:68:b4:ea:97:96:27:4f:24:91:
                    96:01:ae:60:1b:d8:96:9b:27:a7:d8:77:3c:25:ea:
                    93:0e:25:a0:d1:4d:3a:cd:f2:28:83:70:6d:71:86:
                    fa:19:4f:8d:65:6f:b6:96:07:bf:0b:2b:48:04:14:
                    22:66:2a:45:e0:2f:05:64:a3:49:a8:43:4f:04:22:
                    31:45:4d:68:4a:e5:c9:ec:03:ad:9e:94:cc:7a:18:
                    0c:8a:8b:0a:7b:91:27:59:b8:41:c1:62:c1:79:08:
                    9c:b2:a3:ce:ca:20:ab:ac:9e:c2:58:92:69:dd:74:
                    c3:e0:12:ca:1b:f6:70:9d:58:10:b9:9e:24:0d:d1:
                    bb:88:d3:20:1f:74:b1:22:f4:cb:b3:2a:f1:0d:e4:
                    11:8b:20:8f:2e:a1:c6:54:98:f9:25:67:bc:83:4c:
                    21:00:2f:df:11:47:dd:47:7a:e6:f5:85:4c:2f:ae:
                    56:25:ca:de:23:25:71:3a:ef:3f:60:bf:4c:08:d9:
                    16:3c:0e:04:0b:3b:fa:73:dc:8c:e7:89:05:c2:cf:
                    00:ff:29:d0:62:77:da:79:40:07:3f:53:27:ff:f9:
                    77:9a:31:4b:67:a2:4f:32:74:2b:c0:9d:84:8c:71:
                    f8:f7:6e:d7:23:25:cd:23:9a:b4:a9:a6:c8:21:e0:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:DC:8E:9F:26:06:29:60:17:51:98:6E:FD:E7:8A:C1:3C:E0:B2
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203237373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:da:f9:c3:0c:79:4f:1e:bf:2e:c0:ac:fa:1c:d6:27:37:52:
         42:47:dc:a9:ca:5e:85:c1:12:67:ea:62:3d:c9:66:0b:db:fe:
         29:66:ae:34:33:78:2a:16:68:23:3f:e7:0f:cd:1a:b2:e9:3c:
         de:d1:79:c7:eb:50:de:77:bb:d6:76:e7:89:78:74:9a:56:ed:
         c3:6a:1b:d8:06:28:8f:90:51:72:8a:ca:72:43:e4:4c:da:6f:
         30:76:b6:bb:f2:a7:1a:15:6a:6a:5c:4c:5b:fe:3d:1e:e0:9c:
         33:07:6f:c4:f8:43:d2:73:77:b6:19:b3:eb:f2:e7:33:b2:bc:
         99:a7:a7:39:d9:58:fb:57:cd:75:40:fa:76:a2:5c:ae:de:3c:
         b8:f2:2d:87:4a:f8:fa:6f:93:fb:9e:39:53:05:1b:08:fd:5b:
         1c:bb:49:b7:91:1f:54:9b:2e:f5:5f:8a:65:26:0e:10:9d:b0:
         7e:60:d4:4b:21:dd:7a:c7:21:55:a0:f1:eb:c4:13:e7:67:ee:
         a5:84:23:91:44:12:e5:8b:b7:ce:4e:9e:a1:da:79:5b:1d:1a:
         cf:a5:3f:bc:0c:db:2d:b5:af:bf:32:4d:59:aa:77:75:02:05:
         6a:be:74:a0:82:ab:15:9c:99:18:94:ad:a6:a1:bc:5b:4f:de:
         6a:7b:35:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTb69I7TTKvUL/kPknvGKLbQ81GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxQzYyNzU2Q0VBQjE3RkEwMTUzQTI1NEU5NkQwNEQ4
RUE1NzBCMzAeFw0yNjA5MDExNzEyNDZaFw0yNzA4MzExNzE3NDZaMDMxMTAvBgNV
BAMTKEMwNkZEQzhFOUYyNjA2Mjk2MDE3NTE5ODZFRkRFNzhBQzEzQ0UwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/WZdBGi06peWJ08kkZYBrmAb
2JabJ6fYdzwl6pMOJaDRTTrN8iiDcG1xhvoZT41lb7aWB78LK0gEFCJmKkXgLwVk
o0moQ08EIjFFTWhK5cnsA62elMx6GAyKiwp7kSdZuEHBYsF5CJyyo87KIKusnsJY
kmnddMPgEsob9nCdWBC5niQN0buI0yAfdLEi9MuzKvEN5BGLII8uocZUmPklZ7yD
TCEAL98RR91Heub1hUwvrlYlyt4jJXE67z9gv0wI2RY8DgQLO/pz3IzniQXCzwD/
KdBid9p5QAc/Uyf/+XeaMUtnok8ydCvAnYSMcfj3btcjJc0jmrSppsgh4ONRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwG/cjp8mBilgF1GYbv3nisE84LIwHwYDVR0j
BBgwFoAUgBxidWzqsX+gFTolTpbQTY6lcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMS84MDFDNjI3NTZDRUFCMTdGQTAxNTNBMjU0RTk2RDA0RDhFQTU3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMUM2Mjc1NkNFQUIxN0ZB
MDE1M0EyNTRFOTZEMDREOEVBNTcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzEv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI3KkwDQYJKoZIhvcNAQELBQADggEBABja+cMM
eU8evy7ArPoc1ic3UkJH3KnKXoXBEmfqYj3JZgvb/ilmrjQzeCoWaCM/5w/NGrLp
PN7RecfrUN53u9Z254l4dJpW7cNqG9gGKI+QUXKKynJD5EzabzB2trvypxoVampc
TFv+PR7gnDMHb8T4Q9Jzd7YZs+vy5zOyvJmnpznZWPtXzXVA+naiXK7ePLjyLYdK
+Ppvk/ueOVMFGwj9Wxy7SbeRH1SbLvVfimUmDhCdsH5g1Esh3XrHIVWg8evEE+dn
7qWEI5FEEuWLt85OnqHaeVsdGs+lP7wM2y21r78yTVmqd3UCBWq+dKCCqxWcmRiU
raahvFtP3mp7NVk=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:48:20 2026 by rpki-client