Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
File:                     3230302e31392e3139322e302f31392d3139203d3e203131383032.roa (raw, json)
Hash identifier:          82LTT7CsItYOWX9u0fIEMb+1HBmrLtGcb8oUgx2+bKc=
Subject key identifier:   AB:F5:6F:F5:0E:2A:65:4C:49:00:4B:8D:1C:05:0C:62:6A:0A:C5:B8
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       77606138C00FC52EEDA3358C0A7D1F85FED3C5DA
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.19.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 02:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:60:61:38:c0:0f:c5:2e:ed:a3:35:8c:0a:7d:1f:85:fe:d3:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=ABF56FF50E2A654C49004B8D1C050C626A0AC5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:91:fe:39:1f:64:df:67:a9:92:04:52:5e:
                    18:5d:e5:78:bf:61:0d:92:00:79:19:b2:ae:09:53:
                    86:68:94:df:17:cd:a7:7f:0a:d7:85:0e:df:44:0a:
                    80:9c:72:e6:86:01:95:fc:5b:38:70:d9:bd:a7:33:
                    cc:2d:56:f8:20:e5:dd:10:72:bf:ac:86:31:10:7c:
                    4f:3f:c1:f2:ed:62:19:b7:cb:2a:73:d4:4f:a6:a4:
                    01:1d:55:ee:dc:b6:51:9a:a3:e9:83:e1:f5:54:d3:
                    34:78:2a:12:c2:b3:75:01:c4:03:cc:8d:d5:d3:d0:
                    b6:dd:64:a8:4f:30:7a:41:de:57:8a:0a:d9:9a:d2:
                    e1:1c:34:18:f7:28:33:44:48:50:cc:a3:cf:ad:b6:
                    68:95:e1:ad:4f:72:c6:90:af:58:5b:44:41:60:22:
                    41:18:4f:89:95:81:0f:81:24:78:1b:f1:ae:98:ac:
                    64:5b:32:bf:0c:11:da:84:1c:68:25:5f:52:16:dc:
                    68:06:d4:d7:29:0a:a6:6d:dd:10:e1:3d:4d:95:70:
                    fd:e6:75:44:ee:c4:50:a7:73:6f:10:db:9c:a7:ed:
                    a7:f6:95:05:8b:3d:83:b7:4b:d7:eb:b7:e5:48:89:
                    fe:c0:5c:7b:ed:2a:64:50:c3:0b:83:a5:9e:9d:25:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:6F:F5:0E:2A:65:4C:49:00:4B:8D:1C:05:0C:62:6A:0A:C5:B8
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:e3:5d:dc:cf:8a:9a:a6:7f:e6:ac:c8:e7:70:f8:0f:01:
         06:a6:2a:c9:df:f7:9d:49:bc:64:c9:d8:17:8d:7e:de:2c:2e:
         13:28:fc:e5:56:f0:26:be:05:bc:a6:5b:4f:33:a0:a4:11:51:
         9e:d2:a1:49:44:49:9e:13:4c:30:2a:5b:f9:9a:2b:be:79:34:
         3e:44:e8:25:ad:35:67:5b:a6:15:1a:8b:90:99:92:d3:71:40:
         f3:c0:b7:5c:d8:fb:77:1f:80:c4:14:0b:df:8b:cd:d7:48:43:
         9b:e7:ab:62:2c:c8:0d:1e:d5:ab:ad:6f:71:01:05:2f:0b:25:
         5a:b8:a3:4f:d8:e0:e2:2d:d7:59:36:7c:6a:e3:b7:dd:2c:90:
         b6:b1:ce:fa:6c:13:1a:28:12:91:a3:83:0f:5f:86:0a:db:b8:
         1d:5f:e9:59:1e:9c:3f:07:a2:91:f5:b7:a6:83:59:35:1d:a4:
         14:bf:91:f5:1d:52:87:ea:c3:7a:59:47:61:e2:62:9e:02:f7:
         f7:89:4e:59:77:97:b5:1b:8e:1c:b5:58:61:0a:54:51:94:cd:
         42:35:6e:e7:e9:6e:14:02:e1:9a:f5:1b:62:1e:36:1c:cc:97:
         6a:62:0f:d8:28:f0:ab:b0:0e:5d:56:49:64:e6:7e:38:db:0c:
         40:5e:af:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd2BhOMAPxS7tozWMCn0fhf7TxdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNTA2MTkyMDQxNDdaFw0yNjA2MTgyMDQ2NDdaMDMxMTAvBgNV
BAMTKEFCRjU2RkY1MEUyQTY1NEM0OTAwNEI4RDFDMDUwQzYyNkEwQUM1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm85H+OR9k32epkgRSXhhd5Xi/
YQ2SAHkZsq4JU4ZolN8Xzad/CteFDt9ECoCccuaGAZX8Wzhw2b2nM8wtVvgg5d0Q
cr+shjEQfE8/wfLtYhm3yypz1E+mpAEdVe7ctlGao+mD4fVU0zR4KhLCs3UBxAPM
jdXT0LbdZKhPMHpB3leKCtma0uEcNBj3KDNESFDMo8+ttmiV4a1PcsaQr1hbREFg
IkEYT4mVgQ+BJHgb8a6YrGRbMr8MEdqEHGglX1IW3GgG1NcpCqZt3RDhPU2VcP3m
dUTuxFCnc28Q25yn7af2lQWLPYO3S9frt+VIif7AXHvtKmRQwwuDpZ6dJVhVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq/Vv9Q4qZUxJAEuNHAUMYmoKxbgwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMTM5MzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyBPAMA0GCSqGSIb3DQEBCwUAA4IBAQBFfONd3M+K
mqZ/5qzI53D4DwEGpirJ3/edSbxkydgXjX7eLC4TKPzlVvAmvgW8pltPM6CkEVGe
0qFJREmeE0wwKlv5miu+eTQ+ROglrTVnW6YVGouQmZLTcUDzwLdc2Pt3H4DEFAvf
i83XSEOb56tiLMgNHtWrrW9xAQUvCyVauKNP2ODiLddZNnxq47fdLJC2sc76bBMa
KBKRo4MPX4YK27gdX+lZHpw/B6KR9bemg1k1HaQUv5H1HVKH6sN6WUdh4mKeAvf3
iU5Zd5e1G44ctVhhClRRlM1CNW7n6W4UAuGa9RtiHjYczJdqYg/YKPCrsA5dVklk
5n442wxAXq+T
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:52:42 2025 by rpki-client