Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139342e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          q6xz+wxIqyIWAg7xuyzJ0HmA3sSXvK/iLHPR2tfMsOE=
Subject key identifier:   C9:A9:0A:DA:FE:67:8C:67:73:FD:C5:B4:C9:3A:BC:F3:A1:4F:F1:F9
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       6E4EE679A4CE65FBC7819ABC49FA778618FFD1CF
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:05 +0000
ROA not before:           Thu 21 May 2026 21:23:05 +0000
ROA not after:            Thu 20 May 2027 21:28:05 +0000
asID:                     11802
IP address blocks:        200.19.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4e:e6:79:a4:ce:65:fb:c7:81:9a:bc:49:fa:77:86:18:ff:d1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:05 2026 GMT
            Not After : May 20 21:28:05 2027 GMT
        Subject: CN=C9A90ADAFE678C6773FDC5B4C93ABCF3A14FF1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:7f:f8:d7:90:61:9c:9e:d6:55:24:1b:52:
                    92:17:e6:bb:d3:81:98:72:6a:3c:df:c4:c8:53:0c:
                    b4:08:d0:30:65:6b:49:6a:d4:aa:7b:63:49:67:24:
                    56:d8:e0:19:46:20:01:91:44:0d:9d:d2:47:8d:96:
                    1f:57:4d:b1:dd:43:93:43:03:cf:b1:b7:0a:16:df:
                    0c:4f:d4:61:9f:19:a5:3c:4c:77:eb:c2:a1:f4:04:
                    79:3a:bf:e4:84:a1:f0:0d:76:df:15:c9:b8:0e:64:
                    5f:13:95:3c:81:a3:af:9a:6d:b9:f7:bb:12:2e:fa:
                    08:ab:6f:52:b4:5c:b2:dd:4d:6d:88:0b:30:94:70:
                    9c:d3:4e:68:a7:70:95:0d:50:8e:f8:82:e5:89:61:
                    02:ea:c2:b4:e1:4b:45:fc:43:78:ff:f9:f9:4a:3d:
                    99:55:f5:74:e7:8e:36:bf:70:61:5d:93:53:22:29:
                    88:d2:16:2b:eb:e2:cf:ae:75:d7:67:d5:d9:4b:55:
                    7a:92:da:c3:f1:01:dd:39:c8:c9:a0:e8:cf:cc:e8:
                    00:e4:a7:c5:e8:99:bd:9f:a9:19:fa:55:84:ed:08:
                    b7:cf:52:5a:3f:02:a3:4d:0e:4c:78:1c:33:fc:2e:
                    39:89:b3:02:09:f6:60:26:3e:b5:29:4a:52:a9:e5:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:0A:DA:FE:67:8C:67:73:FD:C5:B4:C9:3A:BC:F3:A1:4F:F1:F9
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:61:6c:fc:84:47:b7:34:63:6c:5e:26:17:e6:9b:b3:30:
         85:84:6e:da:e4:9a:4c:79:2f:0f:85:46:26:39:a4:d6:61:01:
         4b:b7:51:78:22:c9:a3:e3:8e:eb:be:78:44:44:a0:06:14:3a:
         b2:20:1e:52:e4:b7:b8:7a:e1:04:43:7c:49:2d:3c:71:79:e8:
         98:5d:e2:4e:a8:a1:2c:48:33:bd:f8:aa:83:97:e1:d6:e8:ba:
         ce:f0:ca:f3:ce:52:f3:d8:c1:3f:1c:89:48:5f:17:ef:1f:81:
         9e:3e:71:22:89:fe:5a:50:ce:21:b3:c2:ea:f2:9e:be:ce:63:
         b0:44:46:57:4e:06:13:33:25:63:ca:02:29:b6:89:da:6b:66:
         df:91:e4:9e:b6:f3:c2:8e:eb:17:2b:0d:54:36:f6:6d:77:5d:
         a7:f1:15:30:f3:bf:4b:29:2e:ad:b9:34:66:78:cf:ad:3e:12:
         49:a0:a5:36:ee:f3:ea:42:1e:7f:78:a4:03:ad:b0:08:50:a3:
         94:60:bb:68:fb:88:a0:71:f2:23:d6:c6:c8:15:f1:20:21:47:
         8f:aa:c8:d5:9e:90:06:6c:5b:2f:f8:dc:85:1e:a4:95:49:ff:
         44:fc:ae:b8:8c:cd:34:94:c4:1d:56:b1:ae:ec:f7:a6:5b:fc:
         39:94:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:35:07 2026 by rpki-client