Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231332e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231332e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          k40mDxN9cB3Nz4uqYHg5Kig2u8q0fOdC6ZQM0yl1s1Q=
Subject key identifier:   B9:CE:F5:C5:EA:5C:BB:C9:80:BD:4C:9B:97:E8:8B:9D:23:EE:40:3D
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       4375BFCD130413382AA9C12F6875F46531CA291C
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231332e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:06 +0000
ROA not before:           Thu 21 May 2026 21:23:06 +0000
ROA not after:            Thu 20 May 2027 21:28:06 +0000
asID:                     11802
IP address blocks:        200.19.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:75:bf:cd:13:04:13:38:2a:a9:c1:2f:68:75:f4:65:31:ca:29:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:06 2026 GMT
            Not After : May 20 21:28:06 2027 GMT
        Subject: CN=B9CEF5C5EA5CBBC980BD4C9B97E88B9D23EE403D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:db:e9:0b:92:da:36:37:17:e4:7b:6e:ea:
                    41:16:2e:00:8c:7d:b7:e7:14:ab:f4:d2:5c:bb:e4:
                    55:1c:99:47:16:23:20:df:aa:d9:5f:71:2c:6b:9b:
                    4b:3a:e7:86:a5:4e:df:5d:25:22:c3:33:4b:44:76:
                    fc:1a:f5:84:1f:fb:37:dc:82:ef:04:6c:09:8e:22:
                    eb:ca:98:c4:01:8a:c2:54:df:74:cf:d1:e5:e1:1a:
                    58:6e:27:0f:7c:87:b2:ee:3e:6c:92:ea:43:23:a6:
                    80:f0:0a:e5:de:7c:ed:93:e2:c4:be:00:eb:f7:b9:
                    8b:ab:87:03:d5:df:49:08:97:d4:db:08:67:9c:65:
                    21:1f:3d:d3:19:2f:ac:97:ef:17:00:21:e2:f8:dc:
                    bd:f5:88:e2:6e:d3:0e:f8:32:b1:24:b2:ff:33:69:
                    9d:8f:74:c7:a1:ba:8f:c1:c5:d8:c4:18:f0:5f:c1:
                    30:48:16:6a:d8:6a:d5:00:fa:b6:56:a2:22:66:3b:
                    98:ee:36:da:17:c0:5c:63:8a:80:3b:2e:9f:c7:bf:
                    4f:15:d8:90:ab:9f:2f:ba:10:a6:a3:cd:11:fb:89:
                    e9:56:c2:41:64:aa:a8:bb:40:e1:bc:96:9d:77:9a:
                    62:a7:c8:8e:35:da:bb:7e:56:d2:ba:e5:ba:8f:ca:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:F5:C5:EA:5C:BB:C9:80:BD:4C:9B:97:E8:8B:9D:23:EE:40:3D
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231332e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9a:8a:4a:af:59:f3:39:72:5f:18:21:fc:c5:48:c3:16:f2:
         82:4c:30:4b:6d:65:b6:01:3d:a3:a1:cb:67:4e:c8:69:b6:a6:
         0f:40:87:5c:66:dd:52:95:67:ed:dd:06:d1:fa:c6:66:eb:30:
         7e:0e:50:10:71:40:0d:7f:34:c4:51:52:04:9f:28:0a:b3:d4:
         2c:51:f1:5b:52:c9:56:28:ab:ac:ad:cc:e8:bc:36:63:b4:0b:
         c9:7d:3a:97:fe:b7:54:42:23:b8:da:33:2c:01:76:c5:c3:80:
         58:37:3e:07:0d:de:c6:ab:73:9b:d6:0b:23:c7:5d:dd:90:13:
         c1:b9:8d:da:53:4c:28:4c:a5:7a:c6:a9:6b:24:a6:8d:7d:77:
         c8:44:72:b9:09:8e:eb:2e:c8:67:13:38:92:ea:7d:e8:39:07:
         ce:6f:32:32:ad:13:c3:e4:33:d8:75:11:e4:08:52:f1:c4:bd:
         d1:d8:3f:11:ce:8a:46:5d:e4:20:67:fd:a1:78:a7:22:4e:17:
         99:d8:9b:07:6f:e6:dc:74:98:96:6d:06:54:5e:21:2a:08:da:
         80:ae:55:14:24:6b:88:31:6d:41:4d:da:d1:2a:ac:e9:0f:86:
         43:44:87:61:16:f5:f2:d6:e6:ab:2b:15:29:ba:72:e9:c3:25:
         d4:ac:fa:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ3W/zRMEEzgqqcEvaHX0ZTHKKRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNjA1MjEyMTIzMDZaFw0yNzA1MjAyMTI4MDZaMDMxMTAvBgNV
BAMTKEI5Q0VGNUM1RUE1Q0JCQzk4MEJENEM5Qjk3RTg4QjlEMjNFRTQwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE1dvpC5LaNjcX5Htu6kEWLgCM
fbfnFKv00ly75FUcmUcWIyDfqtlfcSxrm0s654alTt9dJSLDM0tEdvwa9YQf+zfc
gu8EbAmOIuvKmMQBisJU33TP0eXhGlhuJw98h7LuPmyS6kMjpoDwCuXefO2T4sS+
AOv3uYurhwPV30kIl9TbCGecZSEfPdMZL6yX7xcAIeL43L31iOJu0w74MrEksv8z
aZ2PdMehuo/BxdjEGPBfwTBIFmrYatUA+rZWoiJmO5juNtoXwFxjioA7Lp/Hv08V
2JCrny+6EKajzRH7ielWwkFkqqi7QOG8lp13mmKnyI412rt+VtK65bqPylN1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuc71xepcu8mAvUybl+iLnSPuQD0wHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPVMA0GCSqGSIb3DQEBCwUAA4IBAQComopKr1nz
OXJfGCH8xUjDFvKCTDBLbWW2AT2joctnTshptqYPQIdcZt1SlWft3QbR+sZm6zB+
DlAQcUANfzTEUVIEnygKs9QsUfFbUslWKKusrczovDZjtAvJfTqX/rdUQiO42jMs
AXbFw4BYNz4HDd7Gq3Ob1gsjx13dkBPBuY3aU0woTKV6xqlrJKaNfXfIRHK5CY7r
LshnEziS6n3oOQfObzIyrRPD5DPYdRHkCFLxxL3R2D8RzopGXeQgZ/2heKciTheZ
2JsHb+bcdJiWbQZUXiEqCNqArlUUJGuIMW1BTdrRKqzpD4ZDRIdhFvXy1uarKxUp
unLpwyXUrPqg
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:17:27 2026 by rpki-client