Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139332e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139332e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          ZSneaXh6Gq/IxDYt868M1yATwrWzWTU8lyxkYptQw1I=
Subject key identifier:   E5:58:22:49:21:BB:A0:2C:20:1D:01:25:65:5F:8E:B3:B8:7F:2F:2D
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       6E78D3F46F394AECE2DAC008E40489607F67E7E8
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139332e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:48 +0000
ROA not before:           Thu 19 Jun 2025 20:41:48 +0000
ROA not after:            Thu 18 Jun 2026 20:46:48 +0000
asID:                     11802
IP address blocks:        200.19.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:d3:f4:6f:39:4a:ec:e2:da:c0:08:e4:04:89:60:7f:67:e7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:48 2025 GMT
            Not After : Jun 18 20:46:48 2026 GMT
        Subject: CN=E558224921BBA02C201D0125655F8EB3B87F2F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:b3:73:ae:74:8a:e0:c2:de:b0:f9:4a:ff:
                    f4:5c:2c:a6:5f:45:98:de:bf:27:f8:e4:d1:a6:6d:
                    09:fe:e7:86:01:81:3a:c0:95:29:b5:25:63:89:d4:
                    5a:01:21:5b:51:26:0b:bf:a6:b7:24:91:42:85:d9:
                    2c:e7:44:45:2e:46:ca:bd:89:14:5c:83:2a:88:50:
                    ce:1a:9f:79:d7:6c:35:3a:8c:ff:bb:6e:3d:ef:0a:
                    e9:31:6a:86:ab:24:91:ad:64:27:55:40:0b:02:2d:
                    45:87:83:5f:c4:c6:9a:09:2f:a2:1a:e4:7f:87:81:
                    75:8e:05:b9:33:a1:db:dd:fd:a9:89:0f:81:be:a5:
                    08:a0:b1:4e:a7:4c:c0:a2:06:ba:b6:a6:41:0d:ca:
                    82:35:6e:45:86:f2:84:d6:d7:7d:e2:c4:2b:dd:10:
                    8e:8f:4b:ef:62:0f:98:57:ca:09:d0:d4:2f:b9:8a:
                    27:79:2a:13:3c:e9:4a:e9:6e:d0:e9:a9:27:fd:c5:
                    8e:30:01:10:7c:d1:e0:2b:bd:f9:cc:45:c8:8c:d4:
                    0e:1e:9c:21:dc:0f:61:e4:9f:db:e0:a8:08:a6:8c:
                    32:42:0a:9e:2b:68:04:2f:c4:ad:b9:f7:5f:b2:01:
                    9c:e0:9f:95:75:17:3c:85:1e:ce:9e:24:6a:b5:29:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:58:22:49:21:BB:A0:2C:20:1D:01:25:65:5F:8E:B3:B8:7F:2F:2D
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139332e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:e1:5f:59:73:fe:94:fe:fe:44:eb:25:bf:06:60:ef:f5:
         e0:cb:de:87:9b:21:b0:45:86:da:6e:5b:ca:07:92:b9:a4:ff:
         10:5a:81:af:27:a3:88:48:20:a3:1d:4f:03:d6:c0:8f:b2:66:
         a5:1d:a8:81:17:ba:41:21:fc:b2:c4:57:6e:e3:b2:a7:4d:fa:
         14:14:13:65:63:94:cb:64:de:c0:83:71:d3:a0:a9:4a:93:f3:
         33:5d:70:9a:12:62:70:8f:f4:58:55:c7:04:9a:64:49:08:24:
         f9:96:37:53:3e:09:fb:85:e2:44:79:4c:c1:06:fc:d0:2d:14:
         5f:cf:40:2e:b7:95:bc:74:eb:13:98:8c:3a:90:7c:2a:81:60:
         d2:90:aa:53:a1:a3:e7:99:d2:57:58:a6:d3:c7:dc:5e:10:9a:
         62:89:d1:11:27:f4:56:e3:59:9d:f9:ce:5b:c1:cd:7a:dc:33:
         5b:e2:77:eb:d9:e2:70:0e:3a:5c:e8:2d:bc:bf:ca:17:17:6c:
         91:c2:bd:49:f7:cc:92:b6:d2:a8:c0:34:e6:cc:27:f4:1d:81:
         d9:34:0b:e3:27:a5:07:d8:8f:17:cf:6f:d1:a9:9b:3b:3e:81:
         8f:1e:94:6a:40:38:8b:3c:3d:2a:73:67:f6:1c:0c:f0:40:b1:
         53:d4:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:00:53 2025 by rpki-client