Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231382e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          4rwiohA5qZnKT41kuCHtoIeO5BAEEDreEIzfhE3M6uA=
Subject key identifier:   A7:F5:BD:AB:24:94:03:EB:60:96:CA:9E:4D:EF:D6:58:AE:A5:DA:6E
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       0E27CA4ABBCA4C73C4BC834B13070ECDEB642E2E
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:ca:4a:bb:ca:4c:73:c4:bc:83:4b:13:07:0e:cd:eb:64:2e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=A7F5BDAB249403EB6096CA9E4DEFD658AEA5DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:98:20:02:e4:a2:50:ce:89:ae:2f:d9:0d:
                    c1:f0:0d:ef:f5:4c:3c:cb:2f:ba:c8:a4:43:ed:03:
                    37:0f:a1:9b:fc:95:4b:d7:46:df:36:45:a4:be:fd:
                    23:3a:09:ac:47:49:6c:a1:39:ff:4f:c3:6e:75:8f:
                    14:80:a9:2b:a4:46:92:1e:e2:4b:b8:1a:ea:03:d9:
                    78:a9:26:cf:9b:79:a4:01:48:be:66:1e:58:e6:19:
                    98:80:9a:f0:41:fe:00:37:40:87:12:61:bc:e4:3e:
                    b9:a2:04:3f:a9:6a:68:ba:ea:e2:99:8e:e2:42:83:
                    70:70:8b:20:87:a0:c1:55:15:82:bf:ff:bc:fa:cb:
                    d4:a8:fe:32:0d:ef:97:00:65:8e:c9:af:ed:de:25:
                    61:dd:59:3a:78:3d:62:09:e8:82:ac:f6:66:e5:2a:
                    dc:9b:7f:d0:92:a0:b4:bf:bf:54:e9:a9:f2:cb:97:
                    bf:50:35:98:86:53:60:08:06:c5:41:36:2c:0f:88:
                    72:aa:ac:bf:41:78:61:cb:93:b7:09:9e:02:6f:8d:
                    1f:5a:ad:a4:9f:1d:48:2c:6d:11:c9:33:b6:7d:1c:
                    cf:d7:3b:78:68:42:40:fa:07:fa:5d:d6:52:5d:cc:
                    7f:c1:92:56:22:fb:07:68:55:c3:8c:97:11:94:d4:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:BD:AB:24:94:03:EB:60:96:CA:9E:4D:EF:D6:58:AE:A5:DA:6E
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:a7:02:7c:e5:89:cc:d2:88:0f:49:fe:3d:dd:32:fa:70:
         71:44:25:91:c8:24:6d:ae:7e:bd:8e:d9:72:96:cc:c9:52:a8:
         20:8d:9c:df:68:13:51:2f:b0:b2:b0:e6:a5:84:18:eb:67:2e:
         15:fd:ad:19:31:c5:96:a0:24:8a:c5:0a:42:cb:5e:5d:ef:75:
         dd:aa:2f:77:1c:5d:c9:fc:75:c1:7d:cd:72:dc:c4:b6:08:10:
         a3:65:37:17:c8:3c:3c:0e:96:8d:fa:76:ba:e7:78:ac:8c:46:
         39:4b:c8:e9:f6:71:a1:14:37:1c:e7:0f:32:0e:54:11:28:fd:
         9a:da:3a:40:8f:a5:8e:65:d7:bc:91:dc:54:74:b9:1c:aa:2d:
         b3:21:d3:8d:a3:87:d2:2c:b8:20:72:ff:d3:3c:12:cb:4a:02:
         2a:65:dd:75:24:53:9e:2c:85:29:ee:72:20:37:d8:c2:c6:a1:
         22:b6:90:2e:50:4a:88:3a:af:d0:38:cb:04:71:53:f5:a5:7e:
         47:7d:ce:e1:e3:a1:8e:35:52:fe:d8:3f:ef:f5:01:f0:4f:f1:
         08:ea:f4:8a:48:71:51:f5:aa:69:fd:3b:e9:66:05:ec:1d:83:
         fa:ff:f6:2b:34:9c:ad:94:49:87:e6:c5:ac:3d:97:70:c4:4d:
         3f:76:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:55:44 2025 by rpki-client