Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          WPo9VKzz8Qc/mYSAaoFJQuBUUFII4EVdLvLKntJa20g=
Subject key identifier:   63:27:2D:4E:2C:4D:DA:A3:8D:5B:EE:61:8F:16:80:E9:92:80:48:5E
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       4CE46088DC0236974A8F99B7D5443FAB8EE75E2F
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:05 +0000
ROA not before:           Thu 21 May 2026 21:23:05 +0000
ROA not after:            Thu 20 May 2027 21:28:05 +0000
asID:                     11802
IP address blocks:        200.19.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e4:60:88:dc:02:36:97:4a:8f:99:b7:d5:44:3f:ab:8e:e7:5e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:05 2026 GMT
            Not After : May 20 21:28:05 2027 GMT
        Subject: CN=63272D4E2C4DDAA38D5BEE618F1680E99280485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:aa:fc:94:bc:44:c5:d8:1e:b6:c7:81:3b:
                    cc:25:89:27:17:25:43:29:63:37:db:01:15:3f:51:
                    7b:a8:2f:e7:1e:51:95:79:f6:02:2c:d2:67:a8:d2:
                    7e:d7:39:89:bf:c2:f3:d7:79:90:c5:95:91:b1:42:
                    2e:89:47:7a:80:41:ed:0a:d1:c8:29:d4:f6:c2:e0:
                    20:29:78:f4:19:49:7c:d4:03:5f:82:cc:22:64:f8:
                    2e:71:fd:c1:55:52:80:94:c2:3e:b3:ed:e5:f9:39:
                    02:57:7f:bb:87:bb:6a:66:13:0b:99:a1:bc:dc:79:
                    5a:ef:5b:7d:2b:df:2c:b3:ed:bb:bb:bb:a1:cd:34:
                    3c:5c:43:ea:b3:c3:0d:2a:58:87:1f:0b:3a:19:95:
                    e0:73:77:ce:c2:00:92:97:23:45:34:d9:15:1c:3a:
                    6c:ec:23:4e:c0:bc:48:e9:9f:91:d3:84:ce:9e:d7:
                    bb:6d:5d:b9:d9:0e:7b:66:53:f4:b1:b1:ac:30:62:
                    89:a5:a5:d1:50:b9:d0:0c:43:ca:4c:3f:a5:b6:f8:
                    81:a1:6a:59:7b:c1:6a:34:79:d4:f0:de:c2:1f:9e:
                    10:ba:62:d0:0d:ed:c3:19:dc:10:11:e5:27:a7:bd:
                    65:07:41:d9:fb:ad:50:53:7f:9e:b5:f4:6b:12:07:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:2D:4E:2C:4D:DA:A3:8D:5B:EE:61:8F:16:80:E9:92:80:48:5E
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:36:8d:9c:aa:8c:80:cd:98:d9:31:9a:11:83:b7:9f:ff:
         3f:a9:d8:c0:fe:67:93:1f:a7:21:7a:3f:69:75:02:3a:a3:cd:
         8c:4e:e4:8e:4b:59:2e:d5:bc:c7:04:c4:73:77:c9:0f:3d:af:
         14:1a:c6:c0:fb:37:c4:a8:f7:cf:14:c0:6f:68:92:0f:53:bf:
         25:d5:68:48:54:96:8c:8f:a8:12:9a:d8:13:a8:30:2b:79:58:
         18:6f:e1:ac:40:24:67:bc:cb:4e:e9:64:2a:bf:27:a1:bb:ed:
         52:69:9b:48:fb:2a:86:67:6d:ad:40:ae:db:73:73:e9:30:51:
         41:fd:41:78:2d:d8:20:66:16:d1:75:90:d1:04:96:9f:f1:58:
         47:45:02:56:6b:66:bb:ac:27:55:5d:dc:9f:db:c8:af:dc:52:
         9c:96:c6:9b:3b:5d:58:f3:40:1f:71:dc:f4:93:cd:49:af:ef:
         30:33:d7:4b:35:cb:1e:58:9b:49:7f:89:2b:16:e7:d6:41:ae:
         37:62:58:ff:84:64:38:17:9f:56:b0:49:01:50:92:c6:22:55:
         13:1d:cf:b0:97:96:04:b2:48:bd:3b:22:f4:10:e7:8e:aa:f3:
         bb:80:18:bb:ae:51:0b:ab:20:f4:1c:6e:6b:53:bd:94:06:46:
         20:9e:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:34:07 2026 by rpki-client