Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139372e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          scnwEY4qNx0AkLHhqG8F/lGqxlJ+gdz922Yz32gCxq0=
Subject key identifier:   9D:39:AC:92:73:9C:5C:A5:48:BE:17:11:13:35:2C:FF:50:D0:B8:43
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       13E3C9A800B5850AE748AF85404920DC5F4014D9
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:46 +0000
ROA not before:           Thu 19 Jun 2025 20:41:46 +0000
ROA not after:            Thu 18 Jun 2026 20:46:46 +0000
asID:                     11802
IP address blocks:        200.19.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e3:c9:a8:00:b5:85:0a:e7:48:af:85:40:49:20:dc:5f:40:14:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:46 2025 GMT
            Not After : Jun 18 20:46:46 2026 GMT
        Subject: CN=9D39AC92739C5CA548BE171113352CFF50D0B843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:5b:a9:6a:76:7b:6b:e5:ae:c9:7d:c4:e3:
                    3d:a3:c7:66:0e:e8:19:ff:34:a8:78:e9:7f:ad:0a:
                    9e:4c:a6:0e:44:8c:97:eb:b8:17:08:94:c4:76:83:
                    b0:fa:af:16:35:83:5b:e5:c1:c3:cd:49:58:be:73:
                    5b:96:41:f9:86:55:f1:e9:7c:31:c1:9f:27:b2:1f:
                    4c:e0:24:2a:a6:da:e7:5b:a7:6a:cb:6f:af:79:09:
                    93:d2:45:bc:36:ef:d5:23:5d:11:0b:b9:b5:e1:31:
                    65:a4:7f:ce:fb:e3:9e:f2:7b:90:c3:e5:0e:da:a0:
                    31:af:13:6d:d5:27:04:a6:52:0f:d3:07:01:28:3e:
                    dd:22:3c:0c:40:72:49:61:fe:ae:16:3a:f6:85:ef:
                    4a:36:49:3b:e1:1d:61:52:0c:7e:17:26:70:55:48:
                    d9:ce:1c:5d:9e:c0:45:14:d2:41:67:1c:d9:48:a3:
                    af:76:cd:54:5d:ba:15:f5:2e:12:4c:19:be:86:c2:
                    5e:12:cf:ad:38:9b:28:bb:7e:82:64:9f:f4:15:fa:
                    60:54:d5:f5:b0:5f:a7:0a:71:0d:09:c3:dd:9f:1d:
                    ca:bf:df:01:b3:52:63:48:4b:23:7d:30:2f:a4:a0:
                    c6:ce:bd:7a:6c:2e:f1:90:53:47:74:fd:2a:93:08:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:AC:92:73:9C:5C:A5:48:BE:17:11:13:35:2C:FF:50:D0:B8:43
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:73:a4:b9:6d:9a:5a:d1:bd:b3:e3:8e:00:2d:f7:af:ef:3e:
         ba:22:87:7e:eb:ed:99:f6:3c:e9:64:0b:2a:a3:07:40:3f:f1:
         77:0f:3e:89:51:de:80:64:3d:58:7c:f6:72:cc:ff:05:9d:60:
         1f:f5:1d:04:b4:53:ac:29:8c:1e:73:95:79:39:7e:18:17:2f:
         ef:1b:f9:2d:0f:98:60:f3:aa:a6:aa:dd:8b:8b:3b:11:4d:3d:
         ea:78:42:b0:a1:53:fa:fa:1b:17:53:7a:c4:8d:60:e5:55:93:
         d0:0b:18:6c:cd:35:b6:cb:5e:fa:df:6f:a7:33:bf:73:ab:79:
         fb:ef:8b:1e:6a:e3:0b:19:91:2f:43:18:20:78:ce:0c:64:9a:
         d3:04:3c:de:3b:c9:73:1a:09:09:d2:f6:96:89:67:4e:85:8d:
         13:d6:23:86:3a:44:22:5a:d8:ee:59:4b:60:3c:bd:3c:a3:d3:
         d5:3d:b7:83:fa:ec:82:fb:48:85:a2:47:4f:7e:98:45:54:fb:
         19:e6:cf:b5:5e:12:ad:0a:09:5c:53:81:3f:57:a3:03:56:42:
         d4:19:a6:3a:24:9e:ee:a2:20:30:0e:ac:60:29:45:13:91:05:
         2e:e2:85:1b:10:9e:57:2e:65:7e:43:56:5b:a8:f5:da:6e:3f:
         30:36:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:23:41 2025 by rpki-client