Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139342e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          F86+p6oRxFso/tm279XIbvBo/1ytWjF39m9akWk1hF8=
Subject key identifier:   CB:B4:B0:2E:18:DB:9E:32:7B:16:1D:FF:EC:F8:77:D0:19:E5:8E:57
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       35F476422FFB19BC8A56916995DFCE1B9836D46D
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:46 +0000
ROA not before:           Thu 19 Jun 2025 20:41:46 +0000
ROA not after:            Thu 18 Jun 2026 20:46:46 +0000
asID:                     11802
IP address blocks:        200.19.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:76:42:2f:fb:19:bc:8a:56:91:69:95:df:ce:1b:98:36:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:46 2025 GMT
            Not After : Jun 18 20:46:46 2026 GMT
        Subject: CN=CBB4B02E18DB9E327B161DFFECF877D019E58E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:e6:a5:d0:1a:56:50:3d:22:7d:4b:07:0b:
                    a1:6e:24:98:29:aa:2e:a3:88:15:0f:1c:e5:8a:83:
                    14:4e:aa:65:12:ce:ea:24:90:36:04:fa:3a:03:de:
                    81:93:c1:a1:31:7a:bf:49:a2:e7:57:55:21:92:9d:
                    b7:78:56:32:ee:da:ea:db:f1:ee:c1:cc:33:40:24:
                    9c:7f:17:93:b8:97:90:4a:92:fe:6d:65:06:66:6d:
                    e0:47:00:69:18:ce:ce:5e:9e:ed:86:f3:01:0c:84:
                    c2:49:c5:8c:88:a4:92:c9:9f:b5:c6:20:ba:99:be:
                    8b:35:29:f5:73:14:15:50:91:ce:17:e6:84:38:b5:
                    df:45:1b:29:50:64:5f:46:92:9c:9a:62:e0:af:6b:
                    8c:95:5e:90:f5:43:7b:00:69:3f:3d:d9:2b:a6:26:
                    78:38:6f:a4:ad:f3:62:ec:e9:99:4d:4f:32:7d:d6:
                    d6:ca:6c:0b:c5:43:6e:51:bd:6f:66:24:b8:4c:83:
                    24:9f:2a:5a:3c:e9:71:88:e6:52:6c:99:f7:49:80:
                    56:63:98:f1:85:2d:18:16:2d:2c:b0:75:2c:ca:78:
                    d5:79:2a:17:0d:aa:1c:da:49:a2:f8:27:f5:25:06:
                    f4:98:f5:62:9a:54:13:20:06:b8:4d:ed:43:9e:9c:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:B0:2E:18:DB:9E:32:7B:16:1D:FF:EC:F8:77:D0:19:E5:8E:57
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:31:35:9c:af:af:87:fe:8b:97:cf:ea:e9:f6:95:26:71:a7:
         ec:20:0e:78:07:dc:5c:c9:9c:11:f8:1c:80:76:7d:bd:4a:fe:
         5e:55:b8:cd:48:1f:fb:e7:c4:5d:f5:8b:08:e0:94:aa:6f:7b:
         83:4c:95:3e:c0:94:05:ba:4a:e6:7b:a8:a1:7a:0e:c3:1c:79:
         59:cf:86:89:09:5b:7a:14:2c:e3:d2:0b:54:c8:4f:63:40:8a:
         96:3b:47:f6:e2:8f:58:6e:a1:30:2e:9b:45:6b:08:4c:d8:7f:
         f3:c3:3c:3f:88:66:8b:54:45:75:04:9c:58:7b:52:64:02:99:
         57:25:f7:6a:be:5b:1c:eb:2d:45:ee:1e:e1:50:d9:0b:1c:be:
         0f:21:03:0d:da:66:b2:1e:73:3f:c8:2a:91:87:60:8b:62:5e:
         8a:16:6e:6e:25:72:58:99:9b:c7:4d:c5:94:49:1a:39:74:a5:
         da:af:06:3f:36:ff:32:69:42:84:89:a0:e2:4d:0c:37:e0:78:
         08:62:4d:e2:a9:79:a3:bb:54:57:ec:62:34:e0:ee:8b:47:07:
         ca:a0:10:38:76:22:f2:a8:b7:a0:71:32:8d:91:fa:4f:04:40:
         f9:58:42:b2:0a:67:9d:35:3a:40:75:b5:cf:a9:f8:a5:9c:9b:
         f7:98:91:26
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNfR2Qi/7GbyKVpFpld/OG5g21G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNTA2MTkyMDQxNDZaFw0yNjA2MTgyMDQ2NDZaMDMxMTAvBgNV
BAMTKENCQjRCMDJFMThEQjlFMzI3QjE2MURGRkVDRjg3N0QwMTlFNThFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5x+al0BpWUD0ifUsHC6FuJJgp
qi6jiBUPHOWKgxROqmUSzuokkDYE+joD3oGTwaExer9JoudXVSGSnbd4VjLu2urb
8e7BzDNAJJx/F5O4l5BKkv5tZQZmbeBHAGkYzs5enu2G8wEMhMJJxYyIpJLJn7XG
ILqZvos1KfVzFBVQkc4X5oQ4td9FGylQZF9GkpyaYuCva4yVXpD1Q3sAaT892Sum
Jng4b6St82Ls6ZlNTzJ91tbKbAvFQ25RvW9mJLhMgySfKlo86XGI5lJsmfdJgFZj
mPGFLRgWLSywdSzKeNV5KhcNqhzaSaL4J/UlBvSY9WKaVBMgBrhN7UOenDBPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy7SwLhjbnjJ7Fh3/7Ph30BnljlcwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPCMA0GCSqGSIb3DQEBCwUAA4IBAQCBMTWcr6+H
/ouXz+rp9pUmcafsIA54B9xcyZwR+ByAdn29Sv5eVbjNSB/758Rd9YsI4JSqb3uD
TJU+wJQFukrme6iheg7DHHlZz4aJCVt6FCzj0gtUyE9jQIqWO0f24o9YbqEwLptF
awhM2H/zwzw/iGaLVEV1BJxYe1JkAplXJfdqvlsc6y1F7h7hUNkLHL4PIQMN2may
HnM/yCqRh2CLYl6KFm5uJXJYmZvHTcWUSRo5dKXarwY/Nv8yaUKEiaDiTQw34HgI
Yk3iqXmju1RX7GI04O6LRwfKoBA4diLyqLegcTKNkfpPBED5WEKyCmedNTpAdbXP
qfilnJv3mJEm
-----END CERTIFICATE-----
Generated at Fri Jun 20 18:56:16 2025 by rpki-client