Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231322e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          vCCwRUUAbwj13q3gBMazXCMbvxyajcM8qzlKbhVgezM=
Subject key identifier:   87:4D:FD:08:66:C4:AF:8B:C1:48:BD:47:6D:0E:2D:D1:EF:97:EE:B8
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       14C7B00C2DB1FAFDC97452FBF42E7A2F33F2E1A2
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c7:b0:0c:2d:b1:fa:fd:c9:74:52:fb:f4:2e:7a:2f:33:f2:e1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=874DFD0866C4AF8BC148BD476D0E2DD1EF97EEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:e7:79:47:bb:81:0b:88:8f:a2:5d:86:2b:
                    04:e8:e4:d4:fe:70:92:2e:e4:18:bd:06:e2:01:b0:
                    69:42:c3:09:67:2e:48:8a:fe:13:0d:fd:a9:75:cb:
                    00:f7:c7:de:35:61:bb:35:85:6e:2e:56:25:58:91:
                    99:72:40:3b:f9:dd:54:e5:f7:1f:28:12:1c:55:c5:
                    b4:4c:6e:f3:88:d0:ad:4f:ab:de:f9:08:21:73:eb:
                    f1:43:79:69:09:ac:ae:32:56:71:6c:9f:6c:5f:d4:
                    73:d4:90:76:ff:e3:c5:fa:c7:21:60:e8:5f:19:43:
                    a3:00:3b:72:d6:d9:d3:70:63:28:9d:06:55:e7:7b:
                    62:7d:86:81:35:9b:8e:a2:c3:a2:d5:d5:d7:29:7b:
                    25:74:a8:4a:ec:e5:82:29:bf:e0:07:66:05:9f:e9:
                    e6:46:42:8e:a6:18:66:d9:f0:18:e9:85:f3:e2:77:
                    94:41:6e:99:f7:b3:8b:67:ca:fe:db:87:84:17:80:
                    61:cb:38:38:ee:5e:33:48:74:67:8a:00:de:66:19:
                    96:d1:a4:32:dc:3b:76:15:29:67:a2:8b:ad:8a:a1:
                    79:0f:ba:51:a2:a9:f1:26:87:99:7b:45:eb:33:15:
                    a1:e5:f3:e5:3d:9b:17:60:5f:85:39:3c:eb:fc:9e:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:FD:08:66:C4:AF:8B:C1:48:BD:47:6D:0E:2D:D1:EF:97:EE:B8
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:e7:29:fc:66:a5:69:f7:a3:d4:e5:3d:94:ea:92:bf:07:
         7b:fc:7e:c5:38:f5:3e:c3:ff:cf:27:eb:12:a9:28:34:32:dd:
         9b:f3:87:2a:bc:80:a9:52:5e:17:c6:fa:e2:36:79:b9:13:16:
         d7:ca:05:48:09:39:f3:1b:ff:ca:79:57:d7:6e:ef:aa:6a:16:
         01:59:48:3d:59:36:40:7d:89:65:e0:40:62:b7:0d:6d:80:93:
         8f:94:d8:fc:82:a1:ad:33:1b:0e:29:5e:ff:bd:c8:3a:38:76:
         08:d3:00:99:af:b8:ff:c7:72:2d:67:ce:1d:40:cd:c4:f0:ca:
         60:df:c0:f4:e1:31:c4:34:b7:79:0f:ce:3f:30:7e:7b:5b:32:
         c3:3a:f7:77:14:ef:8a:28:62:f2:e2:79:e3:2e:dc:65:6e:ce:
         55:03:ef:25:d6:fc:0b:96:01:64:e9:95:44:f3:44:9e:7a:2c:
         05:53:0a:cd:b2:53:43:a6:07:bd:43:c5:76:45:38:75:12:3e:
         77:69:c1:90:72:6a:46:f1:9f:42:80:cc:48:db:5b:5c:40:45:
         83:2a:6b:ea:41:77:0b:66:de:9c:2d:ed:1f:38:8d:8f:e4:82:
         c2:0f:53:f6:d2:11:8c:9d:93:1a:f6:8d:92:1b:74:29:15:36:
         25:19:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:16:15 2025 by rpki-client