Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231372e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          rzL2WL4h0FWiys5ixKfoJtjLxgTQFB8lOms0Qypr+fU=
Subject key identifier:   BA:6C:28:92:56:7B:40:E7:2E:5B:24:61:87:79:39:5A:40:12:0C:7B
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       1F48EC78A7A9363F4C3DF5C4ACF0460190FB20DF
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:ec:78:a7:a9:36:3f:4c:3d:f5:c4:ac:f0:46:01:90:fb:20:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=BA6C2892567B40E72E5B24618779395A40120C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:e3:6e:de:8b:75:1d:31:3f:cb:ef:16:e1:
                    2b:ec:3e:2f:46:dc:b2:d9:82:8e:a4:a5:47:e1:44:
                    c7:d9:1c:d7:7d:e2:e6:c4:9f:ab:e9:42:e2:90:3a:
                    76:0c:cd:6e:b6:a1:ca:ca:3b:2e:f2:09:ba:38:2d:
                    45:04:3d:70:6f:97:2e:b0:53:c1:a6:dc:e7:16:6e:
                    d4:51:0d:1f:7e:f7:ee:1e:00:c0:0a:11:35:28:6b:
                    90:50:79:23:f4:14:09:62:89:09:49:89:18:e9:27:
                    f9:09:62:d8:f8:de:2b:21:fe:6e:2f:54:76:4f:88:
                    db:a5:50:05:30:6b:f6:64:16:25:ea:eb:68:af:e2:
                    08:19:66:c2:19:00:80:ef:db:fe:02:6b:f9:1d:53:
                    a8:f1:5b:7c:27:00:c6:05:0b:73:25:0b:24:f5:bc:
                    45:bc:dd:76:a1:3b:bf:03:c9:32:a6:51:c0:16:0a:
                    81:6a:95:04:1f:47:20:d1:43:14:bd:b9:79:39:c2:
                    21:ae:f0:bf:93:d6:ae:07:6d:5c:a7:22:d0:3c:79:
                    79:76:93:da:15:dc:6c:03:60:2e:0f:00:d5:08:fe:
                    a9:a5:be:75:85:c8:21:5c:d1:9c:f5:be:96:b5:59:
                    f6:a6:6a:8f:3e:a6:51:08:24:a5:94:c0:68:52:07:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:28:92:56:7B:40:E7:2E:5B:24:61:87:79:39:5A:40:12:0C:7B
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:dc:3b:37:d6:62:70:8f:a8:6d:d9:31:28:fc:b3:04:51:e9:
         62:59:4f:83:d4:63:93:4a:c4:02:f6:72:19:2c:c9:b9:db:ce:
         17:3b:23:e9:56:4a:bf:28:81:41:9e:4a:0b:4f:c3:68:9d:43:
         de:87:f4:f6:77:e1:fe:bb:e4:43:34:52:7d:f5:7e:f8:73:33:
         04:61:83:a7:ef:3d:ae:dc:e4:7e:ff:32:4f:e9:01:d9:9a:b0:
         53:04:b6:22:e5:57:94:a3:43:06:5d:5f:72:70:68:7a:88:01:
         f2:21:73:4f:42:2c:fd:5f:0c:43:30:d6:cb:7f:81:07:96:c3:
         d3:29:67:76:ed:40:a0:d3:9b:e5:16:b0:db:46:b3:ed:50:18:
         9f:1a:30:38:45:03:68:53:cc:a3:d0:ee:ec:bd:f2:3a:29:95:
         20:d5:1d:4a:60:5b:b6:d4:bb:1b:6f:3d:07:7c:1c:9c:4b:07:
         73:34:37:e0:44:0f:44:ad:2f:0d:bc:64:03:4c:d9:4d:81:3f:
         6b:46:73:90:8e:f1:88:f2:83:29:7f:b6:96:39:9c:00:be:16:
         dc:ac:3f:0e:33:ec:aa:33:13:90:0e:eb:be:d4:31:e4:fa:90:
         56:df:a5:1b:36:bc:bb:8c:db:d7:f7:f9:02:1f:c3:26:96:6a:
         07:a5:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:46:35 2025 by rpki-client