Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa
File:                     3230302e3139322e36342e302f32302d3234203d3e203131383032.roa (raw, json)
Hash identifier:          d/b0wgqvUuvtLNZuUzkxPix9Ezw/flYF8EsNw/mVJ3c=
Subject key identifier:   13:E8:15:04:9C:C2:6F:18:BB:D6:96:0F:63:A0:1C:56:68:ED:F0:BA
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       3D81D49770FB6E00E6367294B5E13E5A9B83CF8A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:47 +0000
ROA not before:           Thu 19 Jun 2025 20:41:47 +0000
ROA not after:            Thu 18 Jun 2026 20:46:47 +0000
asID:                     11802
IP address blocks:        200.192.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 02:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:d4:97:70:fb:6e:00:e6:36:72:94:b5:e1:3e:5a:9b:83:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:47 2025 GMT
            Not After : Jun 18 20:46:47 2026 GMT
        Subject: CN=13E815049CC26F18BBD6960F63A01C5668EDF0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:01:48:2e:1d:b1:b3:f1:9e:af:af:64:41:
                    da:99:8f:63:bf:3d:b1:82:a9:68:d0:d7:e6:b8:b6:
                    d1:27:a3:2d:34:31:7c:4a:84:b3:2e:2f:a5:80:4f:
                    50:bc:21:ae:cf:37:d2:d7:7b:83:c1:99:41:a9:45:
                    ac:fc:29:a6:5b:b4:cd:ee:4c:bd:43:05:60:06:a5:
                    b4:f9:dc:aa:23:67:8b:bb:00:17:92:90:4d:87:b8:
                    eb:24:27:d4:20:b8:ee:32:c0:8a:62:d8:d5:83:c2:
                    83:b7:70:f6:9f:e4:5f:22:57:0b:14:d9:02:e0:7b:
                    52:86:4e:b2:5a:0e:1c:a9:a3:76:30:cf:80:9c:5d:
                    dd:fc:51:58:16:4d:a5:22:9e:7b:8f:24:49:a5:5d:
                    cf:9a:da:42:0b:84:7e:62:61:a9:f2:6c:78:f2:80:
                    c2:42:ed:76:37:ef:76:ef:e8:cd:13:b4:b3:5a:63:
                    1d:3f:d9:75:8e:c6:71:45:71:3f:12:bc:76:c6:e5:
                    da:8f:82:3f:4a:ac:e4:5b:2d:31:c3:fb:dc:04:c3:
                    e4:1d:10:8e:7a:69:94:fa:1e:cd:14:bc:75:73:26:
                    ba:c5:40:17:29:8f:19:31:ca:36:71:18:62:66:26:
                    8e:58:91:e3:2d:10:2a:86:37:3b:c4:d1:6d:ee:14:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:15:04:9C:C2:6F:18:BB:D6:96:0F:63:A0:1C:56:68:ED:F0:BA
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:1e:8f:3d:ac:d4:5e:36:1f:54:69:70:21:fa:ba:70:56:
         88:d8:41:62:4b:e2:63:35:5a:8b:e1:1a:72:f1:5b:6b:e3:2b:
         0d:ab:c5:b3:8f:08:4c:a9:a6:4c:f8:8f:07:ad:be:80:a5:71:
         cf:bb:e0:74:60:51:a7:24:b9:71:0a:da:2e:2f:ae:7d:12:55:
         6d:ba:f4:a7:0c:f5:9a:8b:1c:cb:79:cc:fb:7d:e7:bb:4f:54:
         bc:54:b1:78:ae:62:11:49:b6:b1:9d:3f:58:0f:8a:de:91:e4:
         d3:f3:49:d9:63:03:03:b8:fd:4f:d7:35:58:86:78:69:b3:66:
         db:94:d1:9a:ab:ed:97:87:41:7f:1e:15:b5:b6:ab:f9:52:e3:
         71:4b:df:15:82:fd:75:67:c0:8d:e5:4e:c1:05:32:88:18:d6:
         2e:99:71:07:d3:b8:f2:9f:08:62:a9:38:2b:bc:19:8b:90:14:
         4f:18:d5:56:f4:da:05:ee:ae:8b:96:df:83:97:17:9b:dd:6b:
         38:e0:02:12:92:08:94:47:ff:12:23:2f:8f:bf:1b:44:60:cf:
         f8:6e:2c:56:b5:1b:ee:a9:34:ad:96:7e:40:a5:e3:81:50:26:
         e7:0a:e2:a1:0e:68:55:2f:c9:2e:58:82:52:65:b5:34:b4:ae:
         7e:cb:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:00:09 2025 by rpki-client