Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          hP3zAJAsFH133ORKm2f45dkB/qIf/aKg6onQhTKD2kI=
Subject key identifier:   64:CB:91:80:B4:02:FE:18:C6:BC:52:43:7B:FA:5F:D6:BF:9D:4B:12
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       79D821EFCB16ACF70EFB8F4C537CF7BE01A93BB4
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:48 +0000
ROA not before:           Thu 19 Jun 2025 20:41:48 +0000
ROA not after:            Thu 18 Jun 2026 20:46:48 +0000
asID:                     11802
IP address blocks:        200.19.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:21:ef:cb:16:ac:f7:0e:fb:8f:4c:53:7c:f7:be:01:a9:3b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:48 2025 GMT
            Not After : Jun 18 20:46:48 2026 GMT
        Subject: CN=64CB9180B402FE18C6BC52437BFA5FD6BF9D4B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:dd:5f:97:55:b6:9b:a6:77:02:5b:b3:7e:
                    4f:d9:2f:88:8e:b3:56:95:65:6f:89:b0:05:59:c0:
                    ad:b2:38:13:5d:ae:64:94:87:a5:c4:97:13:e7:94:
                    28:77:71:fd:de:bd:b9:8b:51:69:99:88:ba:d9:47:
                    9b:e3:f8:f1:28:8b:33:be:1b:30:07:2a:c8:05:ff:
                    db:2d:40:eb:11:23:44:c1:fc:d5:0b:90:c3:24:78:
                    dc:48:6a:15:dd:8a:8b:8c:6f:ef:7a:85:e1:68:17:
                    32:38:b5:5a:11:b7:10:de:26:6c:6a:1e:49:b4:30:
                    85:9d:3f:f5:f5:d5:89:ec:ea:b0:a5:7b:48:ca:3b:
                    61:bf:19:1a:c6:d8:12:db:5a:59:98:dc:1e:b9:41:
                    e6:08:39:6d:8c:5f:7d:35:7d:c2:9e:b7:89:30:01:
                    4e:62:e3:5c:66:d3:b7:e2:d6:cc:26:ec:56:9b:4f:
                    72:79:dc:cf:64:4e:70:b7:f4:99:cf:f7:ee:86:a5:
                    f5:c5:27:73:ab:38:76:42:23:54:b0:ae:50:74:a6:
                    05:81:03:54:ba:1b:15:11:ff:6f:09:b0:77:ea:36:
                    dc:5f:22:d9:21:7a:e2:b3:fc:bd:8e:36:cc:fa:17:
                    41:57:e0:32:b0:34:f8:8e:84:af:2b:0b:5f:3d:62:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CB:91:80:B4:02:FE:18:C6:BC:52:43:7B:FA:5F:D6:BF:9D:4B:12
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:4c:79:6c:d7:37:d3:cc:8e:2b:6e:5e:1d:e9:11:94:a2:55:
         7d:0b:0f:19:d0:f4:65:f4:44:e9:05:f0:cf:8a:00:19:84:1f:
         e7:73:b7:8b:8a:ac:8f:dc:96:30:c2:be:dc:2d:e1:1f:30:cf:
         8f:57:82:5a:1a:86:d1:45:42:31:19:12:4c:16:83:47:ab:7e:
         9c:ea:6c:a1:68:cb:68:5d:b0:9d:9f:5e:7b:b7:78:6a:07:e7:
         58:c0:84:96:68:3f:fb:03:da:47:3f:8e:b8:b7:5a:1e:da:f1:
         48:c2:21:eb:4b:f8:85:68:cc:b5:03:b4:e7:29:a1:72:56:7b:
         28:ee:eb:f0:a6:83:c7:4d:f3:e3:f7:27:45:d3:d7:d6:31:68:
         76:e0:55:ea:3e:ed:de:f9:92:01:55:7d:73:65:77:c7:c5:f5:
         b7:db:5f:ad:1c:0a:29:87:a3:4a:d6:4c:1e:71:46:b1:de:01:
         a9:a9:b0:5e:e1:1a:d1:25:d4:44:17:89:c9:0a:b6:81:f5:1b:
         37:9b:0c:56:ce:8e:5f:48:bc:ee:60:cb:71:aa:6d:7a:e3:a6:
         a2:ad:f0:25:a6:52:5a:6c:c3:2c:f0:db:c0:8c:e8:37:1e:df:
         d1:a0:bf:d2:46:f4:5c:2b:0d:a2:38:33:9c:8f:29:26:66:70:
         be:75:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:13:00 2025 by rpki-client