Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230372e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230372e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          d4ZPePzlc2ZbBFNt3B/nBiiCRBB17Noe/nRe9zovGsc=
Subject key identifier:   B1:37:04:25:78:41:EB:99:78:9D:36:14:C3:9C:54:F0:78:A3:69:32
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       2275C97E8B1CDB3387417F1694EAD263979EB93A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230372e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 04:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:c9:7e:8b:1c:db:33:87:41:7f:16:94:ea:d2:63:97:9e:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=B13704257841EB99789D3614C39C54F078A36932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:c2:c3:05:80:f3:d0:83:80:36:f7:4d:2d:
                    f3:e5:fe:b5:5a:dd:67:1d:13:8d:da:29:af:3b:97:
                    1b:63:a1:9a:df:07:d1:1b:4f:22:13:aa:76:83:c1:
                    8d:80:d6:c2:d8:02:84:c6:be:6a:99:ba:97:fa:14:
                    5d:aa:a9:6e:ae:d5:a4:ba:4c:8c:25:1f:dc:d2:56:
                    12:8d:85:32:54:41:a3:a5:7c:11:5d:e4:a6:79:85:
                    9c:17:e0:21:b2:d4:ac:1f:49:f0:71:d8:de:02:9c:
                    53:e1:b6:c3:01:b5:49:a7:0c:59:7f:c1:41:65:97:
                    74:6f:91:c2:30:91:d5:40:e7:9f:e2:fb:da:ba:de:
                    64:f7:81:89:f9:b0:7a:bc:bd:78:ca:e0:35:e1:49:
                    5c:e1:19:17:66:b6:d7:7e:ed:4b:b0:fe:64:f5:2c:
                    e5:3d:8a:1e:52:d6:b4:d5:34:c4:02:ae:8b:c0:a6:
                    14:f2:16:20:6d:19:19:ee:25:49:9d:8c:e2:a8:72:
                    e6:2c:4b:2f:68:ea:89:dc:69:0d:9c:95:5c:96:5e:
                    39:dc:6a:db:2f:36:35:02:70:13:c2:f3:a5:14:39:
                    00:c5:a9:cf:0b:76:b2:12:4a:fb:92:1d:22:55:8c:
                    a6:f7:27:1e:78:0e:18:d4:08:16:a0:ab:fc:f5:d5:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:37:04:25:78:41:EB:99:78:9D:36:14:C3:9C:54:F0:78:A3:69:32
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230372e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:8e:c5:67:a8:d7:63:2a:b0:93:23:64:bf:8b:aa:45:ac:
         57:70:0c:cf:90:5b:01:0c:b6:1c:9c:20:4f:37:35:07:0d:0e:
         bd:b6:23:9b:33:f1:e5:8e:68:28:f7:d5:34:bd:0c:97:7d:37:
         37:58:26:d5:09:af:a6:21:eb:42:9e:7d:9c:8b:d7:c3:66:63:
         c4:30:10:da:eb:e8:76:b1:6d:5f:45:92:1a:66:57:47:b0:d6:
         aa:6a:94:c2:13:0d:8a:56:fd:8b:32:bd:43:4f:93:97:1b:b3:
         ce:31:ba:d5:c2:cd:33:13:1b:7c:88:33:28:fa:39:e2:58:36:
         ce:9e:cc:5f:17:fc:f9:c9:d4:90:a9:08:55:84:f6:af:9c:ca:
         88:6b:f5:4f:a7:52:5f:ac:98:2f:51:7e:40:39:7a:f5:8a:2a:
         b2:4a:a5:64:97:63:eb:c0:19:54:68:d4:5c:ff:e5:68:08:25:
         30:42:9f:31:5a:da:03:31:66:27:76:9f:99:91:2a:6a:63:dd:
         7c:f8:76:f2:56:d3:96:87:77:b4:14:24:df:41:d1:86:8d:55:
         62:fd:4c:62:3b:02:4a:70:56:3f:1b:2d:47:ed:12:55:0f:e6:
         44:c0:0d:b9:2e:90:ca:66:bf:c3:74:f0:17:3d:5d:28:ab:18:
         03:06:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:59:33 2025 by rpki-client