Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230332e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          0J7D3jJSsRGq7LqyJN+3tpF10hNagAInG8ETSWuxCYo=
Subject key identifier:   99:9E:72:78:DF:22:03:A8:F0:5C:81:11:63:BE:8E:D7:05:B9:32:4F
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       0C8C4D9C213FCB1DF44C7186230337172177EFF9
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:05 +0000
ROA not before:           Thu 21 May 2026 21:23:05 +0000
ROA not after:            Thu 20 May 2027 21:28:05 +0000
asID:                     11802
IP address blocks:        200.19.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:4d:9c:21:3f:cb:1d:f4:4c:71:86:23:03:37:17:21:77:ef:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:05 2026 GMT
            Not After : May 20 21:28:05 2027 GMT
        Subject: CN=999E7278DF2203A8F05C811163BE8ED705B9324F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:6a:64:cd:ba:7a:e9:10:52:22:4c:8f:b1:
                    bb:09:7c:c0:b2:f1:5a:be:d8:f3:da:e0:e6:f9:11:
                    ba:77:43:fd:8f:bb:61:10:5f:da:19:2c:5b:f3:45:
                    ef:47:cc:de:c4:0b:ef:e2:dd:19:4d:47:8a:34:d3:
                    66:96:a7:fd:18:5f:e6:94:9e:db:69:8a:c4:42:13:
                    a2:e3:81:55:e0:d4:a0:4c:6f:0f:28:c0:1d:fb:00:
                    61:b9:11:5a:78:52:b1:37:d4:c9:b1:e4:58:d6:27:
                    7e:54:7a:96:4d:32:21:bd:92:82:3d:77:d4:79:ee:
                    19:5e:38:9a:1b:30:69:c1:fa:38:6e:ae:93:d5:bf:
                    c4:90:4d:03:af:3b:8a:be:9e:d1:d8:d6:49:98:9f:
                    a3:23:bc:46:26:2f:57:7b:4f:01:7a:f4:ed:06:85:
                    05:6f:0b:41:d3:f5:01:c4:d6:2c:d2:41:43:d4:06:
                    3a:fd:55:c1:bf:44:61:ca:7b:16:4d:27:44:33:50:
                    1d:7f:7b:18:08:33:bd:69:c5:38:26:0e:82:00:95:
                    2e:2b:36:1d:10:92:c9:3c:3e:ad:e9:dc:98:6c:5e:
                    15:c8:f6:1a:92:eb:9a:f8:e3:ec:75:dc:52:25:a6:
                    c6:01:b7:f4:61:0f:40:04:e7:a8:e3:eb:cd:9c:10:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:72:78:DF:22:03:A8:F0:5C:81:11:63:BE:8E:D7:05:B9:32:4F
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230332e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:a3:d0:57:f5:01:ef:1d:c2:02:71:cb:43:aa:57:86:2a:
         0c:fe:69:49:7f:00:e7:ab:2b:23:8e:65:da:b0:bb:2c:9c:40:
         9c:8a:c7:11:6f:fc:23:f4:40:50:16:7d:bf:ea:32:17:15:db:
         0b:64:ba:b2:06:5a:7c:7b:e5:24:4a:12:45:a0:3b:de:0b:18:
         9e:71:50:67:67:05:b0:85:13:0f:47:3d:76:a4:fc:2f:3c:50:
         d3:a1:38:03:8b:60:94:34:8b:83:b1:c1:7e:ea:a6:64:73:67:
         fc:b0:74:f3:ac:d6:29:11:ba:fb:0c:a5:c5:97:57:11:b8:41:
         12:d1:00:f8:7b:d8:3e:80:be:26:a8:c7:96:cf:b1:26:6c:41:
         05:9e:11:37:9c:38:07:72:4d:00:9b:b9:15:96:a4:de:13:e9:
         b6:f1:cc:6e:71:8d:c3:7a:24:22:a4:ce:0a:a6:66:9f:d1:16:
         f0:65:c8:ba:ba:87:d8:22:6c:d3:5e:71:6d:e4:c0:54:e3:8d:
         bd:52:6b:35:60:9f:18:49:09:ef:a2:a7:5b:c2:ca:3c:b8:80:
         eb:f4:74:d8:c6:0e:7d:96:3f:ba:58:6e:25:07:20:33:f5:be:
         51:ac:13:2c:25:a3:24:1f:0a:34:02:c7:7c:a2:8d:cc:82:3f:
         f0:98:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:32:54 2026 by rpki-client