Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230332e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          RPTkzKPd1+KPNbWYQA20m/5ZD4T6jCvibASH1TDJFgs=
Subject key identifier:   58:C5:D0:88:B2:D7:D3:17:02:C2:47:B6:74:3B:29:98:71:CD:BF:C8
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       5302B7298B6C5ACBFB6943DCE922E257E88546EB
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:48 +0000
ROA not before:           Thu 19 Jun 2025 20:41:48 +0000
ROA not after:            Thu 18 Jun 2026 20:46:48 +0000
asID:                     11802
IP address blocks:        200.19.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:02:b7:29:8b:6c:5a:cb:fb:69:43:dc:e9:22:e2:57:e8:85:46:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:48 2025 GMT
            Not After : Jun 18 20:46:48 2026 GMT
        Subject: CN=58C5D088B2D7D31702C247B6743B299871CDBFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:3f:0e:c5:14:1e:8b:87:f5:9f:4c:f3:bf:
                    e9:2c:11:bd:cb:4f:c9:50:dc:28:f5:ec:15:3d:3d:
                    35:96:0d:0d:69:e5:2a:eb:22:aa:3e:f2:58:72:60:
                    51:70:3d:e6:a1:4f:29:66:de:70:61:87:32:90:1d:
                    61:86:f5:fb:e7:46:78:d3:d0:78:31:b1:b5:6a:01:
                    d3:50:e4:69:36:75:3f:66:58:26:ec:c4:ba:ee:6d:
                    76:51:8f:0e:c2:02:0b:dc:28:97:fb:91:af:8c:15:
                    c0:cc:63:bd:33:47:18:4b:77:4f:c4:4a:71:29:04:
                    93:09:13:a6:46:51:9e:a0:38:73:1e:62:38:c0:bc:
                    2b:d7:76:80:6f:06:8a:a4:c8:84:b8:6b:ec:a3:65:
                    c6:b3:b3:b9:57:4a:2c:e9:ca:90:2e:35:38:c1:84:
                    9b:5b:14:c3:6c:2b:f3:1d:29:c9:8d:0f:22:11:89:
                    6e:23:0a:cb:f7:3a:98:3f:0c:2c:0d:99:42:e2:e4:
                    1c:f3:80:ea:af:24:e4:7d:3e:55:53:cc:49:1a:b0:
                    78:8c:78:b4:f3:76:cc:e5:f4:6b:81:d8:4f:6a:20:
                    38:ee:ac:7a:16:82:f9:4e:87:e6:be:08:a0:72:2d:
                    bb:95:4e:3e:34:a4:05:18:b2:99:d3:7a:3f:60:d6:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:D0:88:B2:D7:D3:17:02:C2:47:B6:74:3B:29:98:71:CD:BF:C8
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:ca:e5:fa:ff:17:38:b5:f0:d8:83:6d:1c:f3:17:e7:39:
         88:7e:62:be:e5:12:b1:0d:6c:1a:8b:c9:cd:85:52:a0:05:8b:
         1e:38:a7:dc:2e:28:1a:fd:80:1b:54:c1:d4:df:41:b5:82:fc:
         ea:50:a4:9c:08:4d:47:94:55:6f:d2:f0:91:60:66:ba:24:d9:
         09:86:be:c2:e7:39:2a:d2:d9:c8:e9:99:c3:6c:86:13:b3:bd:
         84:66:54:4a:06:1d:7c:cf:63:d1:af:15:24:a2:81:3d:fb:f4:
         69:e1:25:9d:d2:6f:10:79:73:a5:c7:1a:89:9c:f6:e8:a1:3f:
         d7:d0:b3:65:bc:a6:18:54:35:c9:ce:50:f3:2d:68:05:0d:db:
         b3:50:40:0b:83:fe:fa:ea:8b:ac:d1:01:07:4a:a0:46:fd:8b:
         74:d0:15:9d:e9:c1:28:7a:a6:0a:14:bb:6f:54:e9:05:55:f4:
         b7:2a:d8:34:1f:f4:cd:c9:da:92:1c:26:27:76:c4:f0:6e:95:
         b5:58:a4:57:a1:23:5a:07:1e:e3:80:1e:42:c3:4f:00:52:30:
         55:06:25:fc:51:d1:16:8c:7e:da:92:b3:44:00:33:81:16:67:
         94:90:f3:cf:67:17:44:65:e4:1c:87:f7:ba:2c:86:55:26:2e:
         5f:ee:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:24:14 2025 by rpki-client