Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139372e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          ftRciVVskVpLaEYj3aahBhg292f2pMgYdBONUxMVBKU=
Subject key identifier:   19:F6:6C:7D:A2:D8:A6:3A:34:70:05:3B:E2:92:FE:16:A1:14:B3:08
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       7D106F42E81979117E35BF87A34C7616FF060E5A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:06 +0000
ROA not before:           Thu 21 May 2026 21:23:06 +0000
ROA not after:            Thu 20 May 2027 21:28:06 +0000
asID:                     11802
IP address blocks:        200.19.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:6f:42:e8:19:79:11:7e:35:bf:87:a3:4c:76:16:ff:06:0e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:06 2026 GMT
            Not After : May 20 21:28:06 2027 GMT
        Subject: CN=19F66C7DA2D8A63A3470053BE292FE16A114B308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:3f:a3:8d:2f:92:d4:65:ff:02:a7:10:9a:
                    5d:66:5c:dd:6f:79:00:8f:ab:a9:75:d2:17:2e:f2:
                    36:2d:7f:06:2a:5f:e3:78:6a:93:47:fd:f5:38:e3:
                    cc:27:a1:91:24:00:24:85:28:14:0f:c0:fe:80:a5:
                    e2:42:9a:48:fa:4e:52:fb:f5:d0:28:cb:72:d5:eb:
                    66:d1:9d:4c:02:29:14:47:a3:f1:48:50:96:35:f6:
                    d8:23:3e:e8:5c:8a:1e:e6:48:c0:12:3a:80:97:df:
                    bb:82:66:ac:81:c5:14:f9:84:0b:03:13:b4:e8:2e:
                    3e:4c:0f:cf:12:66:3d:5b:da:74:bb:72:84:48:bc:
                    29:8b:b5:9f:a4:56:ca:92:0a:20:41:85:30:4b:a3:
                    07:ae:25:f4:91:5b:6e:4c:a2:fc:d7:e3:52:0b:63:
                    4b:0c:cf:c0:12:da:48:b0:bd:3b:16:ed:6b:2c:33:
                    f0:6e:02:4d:ae:85:2a:9e:43:0c:e6:ba:6c:44:1b:
                    f5:79:a4:3a:86:cd:96:72:60:be:8d:89:d0:2d:eb:
                    94:55:d3:b6:81:35:d6:1a:82:a4:ba:d3:b5:bc:40:
                    7f:b5:5f:cf:9e:aa:06:3c:0d:2e:be:09:83:94:cb:
                    4b:6f:1a:d5:33:b1:d7:41:30:a7:c5:c9:0a:bc:50:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:6C:7D:A2:D8:A6:3A:34:70:05:3B:E2:92:FE:16:A1:14:B3:08
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139372e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b4:e3:2a:fc:4c:95:52:43:a3:43:9e:b3:19:34:0f:99:b6:
         81:f2:87:32:4d:56:1c:f2:f2:21:d4:b9:70:65:6d:2a:3a:df:
         dc:36:b8:28:a9:a3:68:9b:26:d6:09:92:2f:88:d0:ad:30:6a:
         c4:c3:11:e8:8f:a2:61:e4:07:60:b9:f4:14:96:01:87:b4:a5:
         16:05:b2:24:d6:56:8c:38:b1:0a:d9:d2:d4:6d:ce:a5:e9:3a:
         d3:13:3a:c1:9c:2e:ed:bb:33:5a:ff:d6:cf:ad:65:de:e0:18:
         ce:4a:7a:d5:aa:04:0d:d1:e9:df:ab:7e:8b:e5:72:90:6d:13:
         0e:07:1b:3b:62:42:93:69:94:cd:52:c4:f9:3a:bc:4a:08:8b:
         e6:a7:fa:00:46:84:f3:75:d4:9c:15:6a:38:98:3d:19:b1:bd:
         ee:c1:82:ad:e9:10:fc:b1:6a:95:e2:4b:fe:f0:64:50:11:47:
         66:fb:bb:65:8b:3f:e5:ed:7d:dc:d4:e2:12:f6:da:3a:ea:8a:
         26:1a:f2:3d:c8:49:52:ae:d1:f4:ed:c2:7e:cd:f4:76:42:51:
         27:1b:2c:bb:2e:c2:34:3c:f2:ae:c9:6a:e6:47:07:43:77:22:
         c6:12:8a:01:78:83:7b:96:4a:07:0f:3c:df:b1:08:f4:2c:21:
         a5:75:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:33:57 2026 by rpki-client