Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139382e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          ofrN6glS+aL//6WVzosW4DCr5ADmIUy7zPDByMQ1Wsg=
Subject key identifier:   13:A2:30:77:BE:62:A3:68:71:CB:B1:9E:8A:3A:C9:7D:68:50:9B:0A
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       483F737D18D81F778A87FD80B78BF263E8CA319A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3f:73:7d:18:d8:1f:77:8a:87:fd:80:b7:8b:f2:63:e8:ca:31:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=13A23077BE62A36871CBB19E8A3AC97D68509B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:5d:37:fb:ab:04:0a:fa:b0:4d:f8:4c:b9:
                    83:18:c8:0c:1a:b6:e9:b0:b8:6b:f9:75:f2:6a:4c:
                    3d:39:6e:f9:2f:e8:df:69:a1:73:39:9d:5b:9c:f8:
                    7c:b2:14:17:c8:9d:53:fa:41:5b:38:6f:18:24:a1:
                    d1:2d:3b:40:ec:45:c4:73:57:8c:7b:b4:dd:a6:14:
                    cb:21:a5:76:31:07:b9:a1:ab:19:9f:89:6f:7f:f1:
                    f9:67:5c:35:52:cb:9d:10:f8:da:8f:8c:c9:05:2e:
                    72:e1:e2:a7:4b:3a:fe:c6:d4:60:4e:80:db:c2:15:
                    99:09:e0:65:e1:fb:31:1f:8a:0e:35:1d:f3:1f:53:
                    b9:cd:94:9c:53:01:51:c7:c7:39:bb:34:91:7a:95:
                    eb:cc:b9:41:71:2d:82:3d:88:fd:f7:2d:d5:29:20:
                    63:cd:31:f9:75:ed:25:19:3a:d4:c3:fa:17:4d:27:
                    d6:e9:53:e7:89:c0:30:4d:e3:9a:19:a1:9b:2f:25:
                    bc:eb:d7:f7:ac:5b:3a:25:67:fd:70:62:81:90:ca:
                    8f:87:8a:c5:c3:13:62:8c:d9:5f:6d:27:6a:09:d9:
                    88:80:e2:01:4c:29:38:a3:73:17:f2:83:bc:0e:9a:
                    ac:19:55:e8:51:b0:bb:58:35:68:fa:75:10:f4:e5:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A2:30:77:BE:62:A3:68:71:CB:B1:9E:8A:3A:C9:7D:68:50:9B:0A
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9f:12:e3:a3:d1:6f:11:ea:86:2e:a1:de:67:19:e1:e3:b6:
         d7:a8:91:b5:3f:13:b1:9e:3e:06:9a:27:54:af:bb:2f:2f:f6:
         8d:c4:88:c8:20:1e:f6:2c:d1:e5:8f:6b:2b:2e:29:41:56:5d:
         0c:ec:55:6e:4a:8d:13:46:93:7b:34:bc:ef:b8:5c:ec:83:45:
         50:7e:ba:fe:a3:84:d0:39:81:40:db:bc:97:b2:01:e4:5d:5c:
         1e:87:64:a7:c1:c7:94:9d:dc:e1:f0:48:a1:9a:c4:c4:d0:ea:
         a0:bf:9d:49:2a:9a:78:be:21:c4:9a:06:15:df:0d:59:df:fe:
         d4:86:26:de:2d:bc:b9:a8:4e:b6:f2:d0:b4:86:c0:35:78:0e:
         11:c5:4b:2c:51:13:8c:99:5c:df:31:23:e0:50:af:3c:55:24:
         36:32:62:14:05:26:31:ac:d5:39:f9:a6:09:bf:30:a5:56:e7:
         42:2e:d6:e2:9d:65:9b:85:bf:79:c3:63:b0:61:09:65:ea:14:
         1a:06:de:7a:13:38:fb:0a:7a:93:23:5d:e5:53:10:90:a3:b7:
         10:a6:4d:94:57:23:37:8c:5b:9f:c6:27:1e:ca:e3:3e:12:89:
         ae:72:f8:04:51:da:e2:8d:e0:2f:c5:0d:c4:4f:95:81:6f:2e:
         b2:18:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:01:13 2025 by rpki-client