Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230352e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          agwTNH6MzRjJ9Hb0OH7ohvHYnjbihljwWb/tNj/omMU=
Subject key identifier:   01:CC:7A:1E:56:D2:4C:3B:86:B7:CD:C0:5C:40:C7:3F:D9:35:A3:B0
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       6C982BCBA3DF9F8115BBD59FFFB531ECDEABFD59
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:06 +0000
ROA not before:           Thu 21 May 2026 21:23:06 +0000
ROA not after:            Thu 20 May 2027 21:28:06 +0000
asID:                     11802
IP address blocks:        200.19.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:98:2b:cb:a3:df:9f:81:15:bb:d5:9f:ff:b5:31:ec:de:ab:fd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:06 2026 GMT
            Not After : May 20 21:28:06 2027 GMT
        Subject: CN=01CC7A1E56D24C3B86B7CDC05C40C73FD935A3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:36:45:af:ff:18:53:52:db:65:f2:ef:51:
                    3c:f0:1f:fb:e7:dc:70:d3:24:3b:67:14:91:cb:73:
                    d1:a5:02:3b:a1:66:df:a0:9e:cd:e6:65:6f:4a:8f:
                    37:01:28:5c:3b:46:47:0c:b5:57:5a:c5:70:09:9d:
                    e5:49:f8:6e:1c:5b:ba:65:33:5b:37:a9:8a:66:47:
                    b2:06:93:e0:e9:52:39:fa:1c:3f:2e:96:ca:b6:5b:
                    35:c6:41:87:47:7e:a2:5c:a6:bf:14:dc:b5:ac:0a:
                    dc:a8:82:8e:ff:88:92:3f:0f:c6:bf:01:0c:d2:4c:
                    ff:ad:d0:62:a7:a5:ac:f2:f7:e5:a0:13:c5:8d:19:
                    5a:4f:15:00:de:a5:8e:96:59:9a:3b:e1:a6:a4:e7:
                    cd:3a:10:a2:7b:c2:7a:f5:10:84:c9:78:84:c2:61:
                    c3:37:6c:93:20:85:7c:0f:7e:80:65:73:51:46:93:
                    ff:65:18:25:71:ca:98:e1:df:16:f0:9d:ab:e8:89:
                    63:10:a4:7d:b7:87:7d:a8:4c:8a:ae:a8:33:87:13:
                    8a:87:45:3a:af:31:87:ba:19:08:ee:e9:e4:8d:13:
                    7f:ac:25:07:c0:9e:1c:1d:bc:49:47:40:67:89:c6:
                    a5:0b:96:f9:10:eb:cd:a7:9d:00:67:ab:ca:fe:6b:
                    93:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:7A:1E:56:D2:4C:3B:86:B7:CD:C0:5C:40:C7:3F:D9:35:A3:B0
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:b3:f1:02:fb:db:c1:fc:d2:78:04:3c:ec:3c:74:f6:93:
         59:f5:75:8c:43:8c:6f:9e:ed:4c:08:84:a6:fc:31:8f:1d:6e:
         76:a3:50:21:d1:74:1c:6e:39:5c:d2:aa:2c:50:cc:92:33:5e:
         43:d7:1e:55:9d:a9:55:70:5b:94:bb:49:ff:63:2b:e1:6c:1e:
         ef:f3:3e:b6:09:4a:9b:27:da:e9:d2:f2:d8:61:40:92:cc:b6:
         08:f9:a8:96:ea:59:4a:04:18:f3:67:02:20:55:a9:81:16:16:
         26:07:5b:cd:4f:d9:95:56:dd:88:81:37:3b:19:5e:ef:28:b8:
         57:9c:6b:33:b3:a1:fc:57:d6:e0:fd:00:3f:04:50:e3:24:36:
         c4:bb:b8:7b:2e:2e:07:4f:ea:af:90:26:98:2b:96:0d:0e:68:
         09:d1:5e:0d:e2:42:67:b3:3f:fd:f3:78:f0:30:52:9b:b5:37:
         3b:06:5c:62:d0:c9:6f:a8:6b:24:bf:64:68:9d:83:af:b2:93:
         7b:18:ce:5f:50:90:37:63:a7:be:27:d8:61:0a:d5:79:f7:3e:
         b0:7c:d7:12:6a:10:00:56:c3:0e:59:bd:be:70:38:3a:0f:88:
         fe:1e:64:62:20:98:c5:48:80:fd:84:59:ce:d7:90:05:c0:fa:
         43:09:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:59:49 2026 by rpki-client