Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          BRqWwRprBdoNNBlft74WJNyY/y2DAlcg0IWUaUHKN+Y=
Subject key identifier:   18:E6:24:C6:C7:AC:CF:FE:E8:09:A0:6D:D6:EF:69:14:CC:43:2D:A1
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       7F451475A36CCB6309A70F5AA5B066132401B134
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:46 +0000
ROA not before:           Thu 19 Jun 2025 20:41:46 +0000
ROA not after:            Thu 18 Jun 2026 20:46:46 +0000
asID:                     11802
IP address blocks:        200.19.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:45:14:75:a3:6c:cb:63:09:a7:0f:5a:a5:b0:66:13:24:01:b1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:46 2025 GMT
            Not After : Jun 18 20:46:46 2026 GMT
        Subject: CN=18E624C6C7ACCFFEE809A06DD6EF6914CC432DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:7e:c2:74:5b:c3:bd:9a:ef:80:44:5b:3a:
                    5e:db:ee:0e:3d:9a:11:a6:5c:f4:db:6a:fe:4f:d1:
                    1c:d6:d4:6a:6f:c5:39:60:2a:e4:f5:42:bb:da:f9:
                    fa:8b:52:77:35:96:9a:5d:5f:68:01:27:76:e2:2f:
                    a9:9a:7f:5f:a0:bb:66:5a:bc:92:ef:ab:24:f3:3c:
                    58:29:b0:d6:09:e8:ed:d5:d7:78:3f:c1:bf:e1:84:
                    23:b3:6b:bb:31:bf:a5:ed:61:bf:a1:c8:82:1d:3f:
                    ee:a2:aa:af:b2:71:1b:98:4a:00:06:38:d5:44:f6:
                    97:22:90:41:82:1f:39:5f:e2:73:e1:e7:78:57:c8:
                    f3:a7:22:7b:72:9d:d0:a5:79:90:90:8a:fa:2a:76:
                    ce:fb:42:ff:bb:d8:3d:15:09:f5:4b:f6:7c:c8:e7:
                    64:bd:f6:81:d2:c8:8d:3d:fa:f1:57:a3:0b:f0:32:
                    0d:f0:78:3a:56:95:2b:4d:4a:90:b4:5d:6f:75:46:
                    a6:26:b7:10:0e:4c:79:db:c1:f8:96:5c:83:2e:55:
                    39:d7:f3:07:9c:4b:93:43:ff:f5:d1:f6:8b:49:98:
                    ee:7d:56:dd:16:96:27:aa:52:3c:18:8d:6a:cb:26:
                    d9:c5:af:8a:ca:cd:fd:0f:12:f4:1a:97:24:31:57:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:24:C6:C7:AC:CF:FE:E8:09:A0:6D:D6:EF:69:14:CC:43:2D:A1
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:44:f5:b4:07:5a:81:37:a5:01:bd:17:3e:87:7d:5d:72:
         dd:f3:89:9e:73:0c:9b:e9:01:9b:25:73:aa:e2:9a:f0:a5:f3:
         de:23:95:cd:7b:ff:d0:06:b0:72:d4:3a:5b:79:12:15:6f:0b:
         2b:bb:2a:3c:71:ec:d7:eb:80:bd:3a:b1:f5:69:8e:e7:b1:1e:
         05:de:d0:6c:80:a3:d4:e2:12:6e:1e:29:b6:80:83:28:b7:93:
         e4:28:5d:63:f3:2f:f0:df:06:e2:ba:31:e3:9e:9b:61:f5:dd:
         6b:da:01:d8:c9:d4:bd:e4:37:6e:66:89:23:75:3b:df:a8:e1:
         c2:69:2e:4e:40:fc:f6:ef:4e:a2:f8:3c:b4:04:5e:0a:e8:c6:
         07:03:fd:dc:af:9e:23:d5:0d:e3:df:67:9e:32:f3:dd:60:8d:
         a9:36:57:4b:1d:88:fc:a2:64:2f:1b:06:23:b9:92:e2:a5:cb:
         32:df:06:40:b6:e6:bc:83:50:d6:8d:03:03:89:16:ad:ab:e3:
         13:4a:4e:02:55:ac:cb:2e:1e:5d:64:a8:72:e8:31:10:55:42:
         58:dd:1f:26:cd:ec:3c:51:a6:c4:d6:44:4c:a6:71:82:90:92:
         74:91:c5:b3:61:ec:e9:3e:53:b6:22:da:91:37:24:a4:52:31:
         b0:b7:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:55:53 2025 by rpki-client