Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          iggsmFEDaoj8SrGW/U9l6xiDNRuCqiM0BWaEB4OWMzo=
Subject key identifier:   38:BD:F4:1D:6C:60:75:56:85:06:22:33:DD:7D:6C:14:8C:41:C2:AC
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       31E1E0150D82D21079A2A2ADE298A7C2C78D43E0
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:06 +0000
ROA not before:           Thu 21 May 2026 21:23:06 +0000
ROA not after:            Thu 20 May 2027 21:28:06 +0000
asID:                     11802
IP address blocks:        200.19.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:e0:15:0d:82:d2:10:79:a2:a2:ad:e2:98:a7:c2:c7:8d:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:06 2026 GMT
            Not After : May 20 21:28:06 2027 GMT
        Subject: CN=38BDF41D6C60755685062233DD7D6C148C41C2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:31:0b:8d:85:68:5f:2b:45:1f:8f:60:f9:
                    ad:90:83:f0:6b:6e:d3:23:52:0f:bb:10:0f:4b:50:
                    36:c5:a5:2f:05:8f:f6:db:06:c9:5a:6a:a2:05:28:
                    d0:f9:80:c2:8e:be:43:2d:42:85:cf:77:37:8a:f0:
                    e4:2b:86:50:7c:e3:54:38:3c:49:6b:69:68:9c:bf:
                    22:70:84:a4:46:c7:49:5d:67:53:38:c8:16:77:32:
                    d0:bd:3c:1b:1a:aa:a7:c5:98:95:81:0d:e1:95:32:
                    8b:8c:32:fa:7f:7a:f6:23:12:2d:a9:34:0e:a3:19:
                    8d:d2:55:ea:fe:57:19:20:7c:02:7d:8a:14:0a:72:
                    df:36:97:ec:b2:7c:44:4f:08:b5:73:de:a4:97:e2:
                    fb:79:1d:9d:d8:d7:66:06:68:37:9e:44:c4:60:12:
                    e1:ab:1b:19:68:4d:5e:2f:1e:dd:ae:a8:0c:32:98:
                    69:6a:16:01:55:91:de:f6:f3:c9:53:2c:80:c2:48:
                    b6:42:f2:af:67:77:81:dd:e3:e3:ee:30:2f:e0:66:
                    5f:ca:75:7c:0d:bd:06:da:3a:ba:f3:c9:df:11:a2:
                    79:7d:ec:6f:37:2d:82:5f:49:a1:91:f1:8c:a0:9b:
                    c3:34:82:a5:66:85:2b:97:f6:88:00:a2:f7:60:7f:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BD:F4:1D:6C:60:75:56:85:06:22:33:DD:7D:6C:14:8C:41:C2:AC
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:73:7a:66:7e:e8:aa:a4:07:40:34:9a:62:09:a1:f5:9a:f5:
         54:20:33:1a:0c:1d:a3:d6:6c:60:4f:bc:64:57:63:14:76:7c:
         96:22:2d:3c:dc:ef:25:21:5a:b3:78:95:49:99:ed:ab:7b:4a:
         23:0c:88:0a:f9:a8:90:35:44:22:4a:83:1d:99:7e:ef:14:ba:
         2c:ca:5f:80:b7:2e:8d:3d:4c:e8:46:fa:ac:e6:cd:1e:07:e6:
         0d:76:ec:74:3e:7e:09:52:cd:1b:40:99:c6:4c:18:ed:21:58:
         ca:7c:71:12:3f:de:db:f1:8e:63:64:4d:58:d4:9c:50:50:eb:
         d7:4c:cd:ea:17:db:a3:3e:cf:de:77:2b:db:50:c6:31:ae:47:
         19:9a:67:2d:6a:ad:61:d3:ab:67:78:96:71:bf:2f:96:64:d0:
         87:a9:0e:49:56:b9:d0:bb:ef:e8:df:d7:99:55:2f:40:09:64:
         39:b4:01:cb:85:3a:9b:b8:bf:31:16:3b:d1:ab:08:14:6d:52:
         0f:64:a6:c6:70:63:9b:8c:84:b2:8a:2f:59:71:9e:fa:88:81:
         90:98:e5:3d:4a:64:1f:39:51:1f:2c:39:dd:41:b7:7b:ed:c6:
         a2:4e:8f:40:3f:8f:6f:49:18:45:68:0c:30:8e:4a:c5:2e:d6:
         9a:23:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:17:23 2026 by rpki-client