Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139382e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          HY1eP1yznV4b3oqdw5OwIjGRg+dADkFhqRnXh9fsC/g=
Subject key identifier:   7B:D9:67:DF:B6:DB:6E:2A:39:D0:31:85:27:A7:70:D9:D3:A0:46:54
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       49C0D9B01AC062AFE5EBC08DA96920E9CC1B883E
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:05 +0000
ROA not before:           Thu 21 May 2026 21:23:05 +0000
ROA not after:            Thu 20 May 2027 21:28:05 +0000
asID:                     11802
IP address blocks:        200.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:d9:b0:1a:c0:62:af:e5:eb:c0:8d:a9:69:20:e9:cc:1b:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:05 2026 GMT
            Not After : May 20 21:28:05 2027 GMT
        Subject: CN=7BD967DFB6DB6E2A39D0318527A770D9D3A04654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:26:af:4d:69:e7:d3:fb:2e:a4:38:dd:ce:
                    08:39:2e:40:0a:d1:bd:c7:44:39:d1:8d:5d:5f:7b:
                    d7:10:b2:bc:57:c7:4e:7b:ee:fd:68:6c:1e:aa:b5:
                    70:50:1e:30:dd:5d:44:50:0a:bb:d7:e3:9f:de:3c:
                    55:fa:49:84:c8:a4:4b:03:6c:4c:c9:3f:fe:7c:d1:
                    76:ca:25:f4:17:3e:98:73:de:d3:98:96:0d:76:37:
                    1e:ca:79:df:c3:1a:77:de:b6:2c:57:f8:84:be:e6:
                    e1:d9:6d:c4:cd:55:dc:7f:2a:29:83:9a:b0:36:26:
                    8e:41:28:14:c7:da:01:e9:77:04:db:95:5a:2e:86:
                    25:36:1f:94:be:2b:27:5b:d7:b5:61:53:f5:1b:cc:
                    87:72:c2:61:a5:ce:60:d0:a0:a7:cf:d2:2d:be:3f:
                    83:9d:50:f6:88:8d:45:14:57:ed:06:5f:3d:43:f5:
                    07:3c:19:3c:92:80:61:73:99:f8:6c:44:ef:dd:0e:
                    5a:9b:c8:dc:87:7e:fb:10:a9:fc:db:a2:74:d6:64:
                    15:2f:cc:de:18:64:26:6c:e2:15:ab:43:6d:b2:7a:
                    c2:dd:5a:46:e8:17:a4:44:5d:22:ca:3a:50:59:be:
                    fe:8a:3d:fc:42:e2:73:f7:6f:e2:fb:e5:fc:44:98:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:67:DF:B6:DB:6E:2A:39:D0:31:85:27:A7:70:D9:D3:A0:46:54
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c8:a1:49:ad:0c:93:15:00:52:20:26:29:e8:6c:cc:5e:73:
         95:6c:bb:c2:8d:a8:d0:d0:d5:5d:c1:58:c5:31:6b:0b:32:73:
         02:d3:78:23:9b:3e:ca:c2:fe:33:58:f8:07:ed:c7:f9:27:f0:
         34:7c:f6:7f:bc:98:22:49:45:d7:63:78:9b:4f:c2:c3:8b:d0:
         a8:c2:08:2b:c4:8c:b3:ce:85:e5:af:83:ab:eb:99:28:f6:76:
         54:d7:a1:0b:fe:7a:1f:e5:b7:e4:7b:15:a2:2b:de:87:f4:88:
         7f:1d:65:6d:bb:3c:15:65:60:b0:ea:c2:47:93:1c:4b:a8:d1:
         27:68:fb:37:f1:83:89:80:66:52:74:73:9a:e1:11:ec:31:0c:
         a4:75:cc:7d:29:65:00:fb:68:19:d6:30:07:b9:b1:a4:70:4b:
         3a:f9:09:8c:41:68:a5:a8:e8:29:85:f3:b8:9f:72:52:4e:50:
         47:3b:97:1a:6c:fd:1f:f1:8d:d3:15:ec:fe:81:2d:bf:2f:d5:
         21:be:be:6b:5a:dc:c1:1f:d2:59:3c:1e:ff:9d:6b:aa:1c:7b:
         80:b4:af:29:2b:c6:bb:c5:3e:ec:cf:a1:00:f0:7b:1d:b4:d2:
         0a:88:30:a0:c5:fd:b7:6a:4e:c6:56:67:cd:8e:82:be:e8:20:
         91:03:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:35:40 2026 by rpki-client