Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139342e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          xiJAimbngqcGNTuLIgk50xW6n+NedXbuJOdN1Q8dWOI=
Subject key identifier:   A6:73:19:FE:AD:97:C8:80:26:29:21:D2:17:EA:A7:36:A7:B4:8D:F8
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       1D40F6A26C5C5757EBE7410FBAE9366923F04438
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:05 +0000
ROA not before:           Thu 18 Jul 2024 19:57:05 +0000
ROA not after:            Thu 17 Jul 2025 20:02:05 +0000
asID:                     11802
IP address blocks:        200.19.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:40:f6:a2:6c:5c:57:57:eb:e7:41:0f:ba:e9:36:69:23:f0:44:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:05 2024 GMT
            Not After : Jul 17 20:02:05 2025 GMT
        Subject: CN=A67319FEAD97C880262921D217EAA736A7B48DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:98:a4:c4:f9:33:48:0f:ca:24:c7:3d:94:
                    90:cd:6c:14:c7:bd:79:a9:e6:86:8c:89:ed:41:10:
                    39:9e:da:d4:d1:ff:b9:78:0d:13:83:f5:72:d8:a6:
                    90:bb:e6:15:7a:d2:4e:fc:98:93:d0:65:81:48:a3:
                    1b:43:cc:8c:85:ec:00:7b:d5:65:56:9c:49:7e:5d:
                    03:53:91:6d:f0:3b:e3:32:f6:e1:fd:96:02:9b:2d:
                    ff:5f:6e:99:e9:4b:60:8a:af:88:69:c6:02:f0:9c:
                    a1:15:9b:f7:d1:4d:11:14:b9:df:38:07:c7:23:60:
                    fd:42:1a:2b:83:82:8d:54:6f:63:84:aa:a7:3c:41:
                    1b:dd:60:34:45:79:26:37:c8:97:6c:75:24:1f:a0:
                    1c:06:27:03:53:ad:b0:1f:1a:af:f7:6a:fe:3f:d1:
                    e1:86:1f:20:07:63:34:c5:0c:a2:cd:28:9a:d2:49:
                    27:7c:c1:fd:2c:2f:72:e5:3f:ff:9f:e4:5c:d3:08:
                    c4:84:eb:c9:f9:6c:1d:5f:f4:3f:b5:38:ff:ea:20:
                    92:9a:8b:f2:e7:ec:db:c8:73:2c:e9:ab:5e:e3:4d:
                    b1:22:fa:a0:45:74:b6:9b:60:72:90:85:7f:a7:ad:
                    b9:da:68:ad:0d:b4:ca:6d:df:4e:89:37:40:4d:1f:
                    8e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:19:FE:AD:97:C8:80:26:29:21:D2:17:EA:A7:36:A7:B4:8D:F8
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139342e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:87:75:b2:cb:dd:31:14:6e:88:d6:1e:55:8d:f5:76:91:4b:
         db:09:df:de:9e:6f:5f:ef:81:e8:dd:ec:e4:f4:71:d9:30:37:
         65:d7:a4:17:2d:ef:60:a0:b1:07:13:ac:01:5d:5e:46:60:b5:
         de:a1:d7:89:dc:e7:47:18:fe:85:a4:22:a9:49:95:aa:4a:44:
         d1:06:fe:71:27:36:ce:3b:0a:52:c4:79:74:f1:75:ab:d7:22:
         f9:81:12:02:cc:67:dc:62:2d:7f:7b:5c:61:cd:a7:6d:46:ec:
         21:4b:71:4b:f5:c1:77:e8:ef:4f:0f:24:ca:7c:4f:16:e4:50:
         70:bd:d6:ff:40:93:28:b4:cf:d0:2e:5d:18:50:0b:0b:4e:07:
         27:9a:08:77:4f:58:02:55:5a:7c:2c:88:54:70:a7:e6:ec:2d:
         42:3c:73:d4:bf:8d:2e:8f:d5:2b:fe:1a:20:6a:1f:e8:e4:d8:
         80:f2:0e:28:f7:97:88:71:f0:a9:5d:d7:7a:1a:f8:56:ee:f6:
         e9:94:9f:bf:24:c8:58:f5:68:be:b0:15:c1:4f:63:91:85:de:
         d7:05:fa:d8:68:b8:18:3b:76:30:b3:e7:c9:4b:2f:00:df:f5:
         e7:52:9b:06:a7:b0:3b:ef:cc:54:8f:c3:cc:40:f9:f0:ee:ca:
         1a:de:61:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUD2omxcV1fr50EPuuk2aSPwRDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU3MDVaFw0yNTA3MTcyMDAyMDVaMDMxMTAvBgNV
BAMTKEE2NzMxOUZFQUQ5N0M4ODAyNjI5MjFEMjE3RUFBNzM2QTdCNDhERjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EZikxPkzSA/KJMc9lJDNbBTH
vXmp5oaMie1BEDme2tTR/7l4DROD9XLYppC75hV60k78mJPQZYFIoxtDzIyF7AB7
1WVWnEl+XQNTkW3wO+My9uH9lgKbLf9fbpnpS2CKr4hpxgLwnKEVm/fRTREUud84
B8cjYP1CGiuDgo1Ub2OEqqc8QRvdYDRFeSY3yJdsdSQfoBwGJwNTrbAfGq/3av4/
0eGGHyAHYzTFDKLNKJrSSSd8wf0sL3LlP/+f5FzTCMSE68n5bB1f9D+1OP/qIJKa
i/Ln7NvIcyzpq17jTbEi+qBFdLabYHKQhX+nrbnaaK0NtMpt306JN0BNH45XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpnMZ/q2XyIAmKSHSF+qnNqe0jfgwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPCMA0GCSqGSIb3DQEBCwUAA4IBAQAHh3Wyy90x
FG6I1h5VjfV2kUvbCd/enm9f74Ho3ezk9HHZMDdl16QXLe9goLEHE6wBXV5GYLXe
odeJ3OdHGP6FpCKpSZWqSkTRBv5xJzbOOwpSxHl08XWr1yL5gRICzGfcYi1/e1xh
zadtRuwhS3FL9cF36O9PDyTKfE8W5FBwvdb/QJMotM/QLl0YUAsLTgcnmgh3T1gC
VVp8LIhUcKfm7C1CPHPUv40uj9Ur/hogah/o5NiA8g4o95eIcfCpXdd6GvhW7vbp
lJ+/JMhY9Wi+sBXBT2ORhd7XBfrYaLgYO3Yws+fJSy8A3/XnUpsGp7A778xUj8PM
QPnw7soa3mHE
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:48 2025 by rpki-client