Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139352e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139352e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          wokY0tCdf2lPU77m5NMLr7ozWj21mzD6790Sj0V06SM=
Subject key identifier:   26:6E:F2:18:3E:E7:6E:A2:4B:5F:16:BA:ED:E1:A7:06:63:B8:9A:9F
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       58A19968B670A7E1A1250FCCFDABA9940DDE413F
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139352e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:05 +0000
ROA not before:           Thu 21 May 2026 21:23:05 +0000
ROA not after:            Thu 20 May 2027 21:28:05 +0000
asID:                     11802
IP address blocks:        200.19.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:99:68:b6:70:a7:e1:a1:25:0f:cc:fd:ab:a9:94:0d:de:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:05 2026 GMT
            Not After : May 20 21:28:05 2027 GMT
        Subject: CN=266EF2183EE76EA24B5F16BAEDE1A70663B89A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:38:1f:0d:9a:09:09:f0:36:8f:bd:a6:11:
                    12:5b:bb:81:94:6e:e3:84:db:7e:bb:8c:c1:60:69:
                    10:8f:90:d6:8f:ef:55:29:f0:84:58:b7:3c:c1:ad:
                    1e:15:ec:1d:dd:b9:ea:6d:87:5d:fc:0d:e2:5d:8d:
                    74:02:4f:b2:ba:6b:c3:51:d7:b4:93:0f:77:3d:4b:
                    4d:49:ac:4e:3a:99:5a:eb:ce:10:77:8b:1e:37:05:
                    90:09:3c:78:b5:dc:94:94:18:49:ea:57:bf:b1:7a:
                    5c:1e:86:04:4e:89:fa:f7:fc:e4:03:1b:45:c0:5d:
                    6b:95:69:eb:af:ae:19:ae:26:a4:c5:cc:06:2e:dc:
                    e5:f7:cf:c3:43:51:1f:ed:87:fd:98:e6:6a:fe:2d:
                    8e:e8:07:a6:87:9d:5e:e7:1e:a2:5e:22:fa:55:e7:
                    d6:71:3d:72:74:ad:16:8d:bf:8c:34:e5:92:4e:f6:
                    5d:15:83:a8:3f:8b:57:b7:74:5b:e4:06:ce:0b:1f:
                    70:be:11:4b:57:c5:a2:1d:ea:d9:cf:5f:82:03:d7:
                    e8:1e:92:c4:5c:f6:fb:f3:22:24:d0:84:cf:03:28:
                    37:cf:90:b9:fa:f3:61:7b:6f:9e:71:a6:d0:ae:c1:
                    e9:a6:f2:70:92:17:89:df:77:1f:94:ff:fb:42:1f:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:F2:18:3E:E7:6E:A2:4B:5F:16:BA:ED:E1:A7:06:63:B8:9A:9F
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139352e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:90:e5:66:3b:28:4a:a8:3c:69:89:e8:bf:3c:dc:61:b4:
         e2:b9:16:ee:6b:cc:ed:30:71:61:8b:bf:9a:6a:47:83:85:2c:
         20:6d:7f:8f:13:b2:f3:78:11:1c:d4:69:b8:93:2a:2c:9a:97:
         e7:c1:f8:9e:e3:dc:f7:92:bd:f4:fb:87:34:7d:2c:a7:8f:d4:
         a7:e2:54:8e:5d:90:97:ea:cf:dc:fe:26:07:1c:1e:05:dd:55:
         c0:2a:0a:25:fa:a5:e6:46:07:b3:a2:c6:6c:94:c3:1f:5e:9d:
         71:71:49:44:b1:e1:4f:c7:fe:d8:8b:73:db:1d:44:ae:a0:7f:
         39:25:fb:1b:0c:a5:f7:b9:44:55:c0:0b:ca:49:cc:1a:e9:86:
         b2:92:80:ec:69:6c:0e:60:50:86:19:58:bd:3d:6d:34:07:fb:
         c8:a9:8a:18:30:43:cd:2c:04:24:ab:b1:dc:9c:a2:31:24:c1:
         6f:2d:0b:68:34:fc:f1:5a:91:c0:fb:56:1d:36:07:c1:45:9b:
         77:f1:ed:bc:48:92:50:41:1b:24:7c:f5:30:35:c1:ef:d4:29:
         76:1a:27:f5:3b:d1:79:e2:c2:b9:18:15:d1:61:83:e6:49:27:
         6a:88:4f:5f:80:22:08:bb:0b:ef:e9:c2:e1:21:58:3a:43:03:
         dc:d3:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:35:13 2026 by rpki-client