Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3232312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          CFdmcG5q+xGRAHAiXPkW90odgIkRnABuKuOvHT2vti4=
Subject key identifier:   F0:FE:1A:35:F9:46:41:DD:5F:83:22:D1:BF:06:C9:B9:4F:14:E6:82
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       2384E942578CFD9BA6192DEDBF4ACF0F0ABEBF89
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:84:e9:42:57:8c:fd:9b:a6:19:2d:ed:bf:4a:cf:0f:0a:be:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=F0FE1A35F94641DD5F8322D1BF06C9B94F14E682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:96:f1:73:70:8b:29:6f:4c:a3:4c:4a:2d:
                    5e:56:ab:c4:5a:58:7d:fd:25:b3:41:b7:81:d6:dc:
                    dc:40:ce:eb:d9:47:2c:36:22:a2:16:09:c9:0c:09:
                    7a:c0:8d:3e:01:58:e2:ca:b5:91:c1:06:7c:c0:a8:
                    b1:0b:3f:25:c7:59:66:2b:e0:91:94:f3:5f:37:c7:
                    60:57:70:eb:1b:e8:50:d1:3c:1b:32:84:a1:78:23:
                    32:b1:72:f3:ea:ee:a4:00:b4:78:91:9c:1e:09:6f:
                    26:60:da:df:9d:2a:ab:86:f3:b6:6f:c7:cb:39:d5:
                    81:68:33:cd:87:fb:a3:57:f2:2c:51:67:4b:85:d1:
                    56:45:60:14:55:74:7e:d5:b5:bf:fb:dd:1e:f5:cc:
                    d0:86:6a:c1:a5:a9:f1:fe:ec:5c:56:ca:c6:88:c4:
                    5f:62:ca:83:d6:9a:e3:fa:11:1c:06:38:8d:ff:5e:
                    3a:79:2c:4d:ad:2e:93:a6:07:48:15:bb:00:46:ff:
                    2c:c2:f0:fc:fc:6b:38:14:9d:86:a4:69:66:f5:25:
                    6e:4a:fb:ea:74:52:d1:1c:24:d1:88:23:1d:83:8c:
                    32:8e:e6:1c:ca:5c:48:fa:b2:f0:f7:0a:b3:51:59:
                    34:99:d8:de:ea:3c:e2:0d:ef:29:61:74:08:f0:b5:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:1A:35:F9:46:41:DD:5F:83:22:D1:BF:06:C9:B9:4F:14:E6:82
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:32:71:65:bc:b4:3b:cc:9d:dd:9d:15:80:38:01:00:af:27:
         55:2b:29:64:8b:4d:7d:99:3e:54:ad:10:75:ac:b8:ef:63:e9:
         75:2a:f0:f8:91:01:df:04:47:ae:60:60:4c:a7:47:fc:5a:7e:
         d7:ca:46:f6:09:08:78:16:46:11:68:55:f6:47:6f:bd:ed:0f:
         3b:f5:f0:85:94:f1:1c:ae:3a:73:db:ac:8a:c3:6a:94:68:a8:
         ca:cf:56:22:d1:ba:79:fc:98:41:05:da:f9:68:d0:82:8a:ca:
         6c:d0:73:aa:f2:df:83:22:ce:7d:c9:b3:d8:1f:ac:59:1a:49:
         5e:db:78:92:57:65:61:76:af:8e:23:0b:20:bd:5f:ce:8c:11:
         cf:82:dc:a2:ae:9c:c9:49:7d:bf:f7:2d:0c:46:78:4c:1c:9c:
         00:23:a0:5b:6c:28:b9:71:13:cc:b6:b4:88:7d:e2:7b:64:e2:
         1b:d6:c6:92:ec:bb:44:b4:6d:e9:d3:48:08:4c:eb:7a:a5:96:
         65:27:0f:4a:c6:78:6a:92:1b:4e:43:80:df:bf:0b:f7:06:70:
         39:a1:c4:39:8b:c3:b9:71:fc:30:0d:84:0b:ec:f5:d4:fb:75:
         98:1e:c3:3e:db:ef:dd:ef:19:64:03:17:0f:38:6a:b0:66:c8:
         a3:a4:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:09:40 2025 by rpki-client