Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230322e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230322e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          JfKTTp/9LuWPdtlLWZiws/p25J6ZIvq6nqjWDHV6OWI=
Subject key identifier:   DC:11:8F:A3:02:59:8A:6E:6C:C1:33:9F:C7:9E:76:36:42:99:9B:F2
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       4E83203AF072BEF14A74C57673EF5EDC3320FC60
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230322e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:28 +0000
ROA not before:           Thu 18 Jul 2024 19:57:28 +0000
ROA not after:            Thu 17 Jul 2025 20:02:28 +0000
asID:                     11802
IP address blocks:        200.19.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:83:20:3a:f0:72:be:f1:4a:74:c5:76:73:ef:5e:dc:33:20:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:28 2024 GMT
            Not After : Jul 17 20:02:28 2025 GMT
        Subject: CN=DC118FA302598A6E6CC1339FC79E763642999BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:3a:99:52:8b:88:57:f8:da:69:68:7c:19:
                    6c:71:be:7b:7a:a5:50:8c:4c:b9:bd:ae:ac:bf:7f:
                    76:75:de:c5:00:9d:37:64:30:0a:c4:e9:8d:bd:f4:
                    51:03:a6:18:c2:db:fa:2a:5c:79:7d:b4:c4:88:9b:
                    28:03:1e:5f:cd:db:d2:39:7c:26:30:66:eb:9b:e7:
                    f3:9c:a4:bd:94:4e:a3:88:5a:9d:93:cb:58:b9:71:
                    00:35:36:d0:e1:1e:dc:65:f0:bb:39:e1:93:a7:b2:
                    cc:dc:58:b8:25:df:ed:f8:25:43:b5:8d:26:5b:41:
                    4f:d8:41:b4:12:16:f3:eb:b6:f7:9a:25:26:5e:bf:
                    96:0a:49:56:c6:b2:76:15:0a:dd:fe:9b:6f:cf:d9:
                    79:ef:27:4b:ce:b0:6b:31:08:ea:3c:4f:dc:8a:2f:
                    78:39:59:59:3b:59:f7:83:9e:82:68:35:71:d8:7e:
                    88:5b:e3:41:98:13:7c:a7:25:ed:a6:ad:be:42:24:
                    26:60:ef:50:c7:8c:f4:8b:aa:4d:21:cf:be:d8:f8:
                    37:18:a1:8b:85:0b:dd:ac:d8:60:81:4c:0d:32:a3:
                    a0:3e:9f:79:ef:52:f2:a7:e8:80:64:98:0f:b0:48:
                    56:f2:32:26:91:d6:79:11:60:da:30:0a:da:79:10:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:8F:A3:02:59:8A:6E:6C:C1:33:9F:C7:9E:76:36:42:99:9B:F2
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230322e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:40:3e:e4:90:24:cd:da:21:20:b1:18:b2:07:d2:76:f3:8c:
         2e:7f:9c:a4:8d:27:72:69:8e:d6:eb:d5:43:d2:22:87:60:d1:
         e4:b5:9d:6b:91:1d:1c:63:3a:49:c6:86:c4:15:5e:29:e0:12:
         5f:ec:a1:9a:7e:65:c4:7a:dd:70:16:13:a4:62:30:65:f9:0d:
         50:ed:4c:c5:f2:f7:84:05:4a:da:d1:3b:f0:34:b3:8e:4a:f6:
         15:56:7f:40:0d:98:35:5d:25:03:81:6e:97:68:6f:2a:8c:26:
         38:e2:bf:b9:5c:93:34:a0:61:68:6d:bf:83:de:47:4e:be:83:
         a8:84:21:48:99:db:03:59:90:5b:96:5f:e2:2f:c0:fe:63:4e:
         ca:b6:43:d1:2c:f6:f7:13:6e:de:f3:9d:69:2c:8f:5b:1c:d6:
         33:3e:9c:54:52:92:35:ba:88:88:b1:af:61:67:28:1b:d4:0e:
         26:64:c8:86:9d:62:2d:40:30:10:fd:d2:50:1f:70:f6:3f:84:
         e1:80:5d:a9:ec:83:aa:c8:e2:d2:44:6f:9e:d2:c2:9f:ad:06:
         38:af:61:3d:04:e2:5d:26:56:74:83:56:f0:f2:61:92:d8:53:
         6a:8d:7a:93:c6:15:db:af:68:65:91:f2:c0:ed:a2:79:5c:67:
         1d:95:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:50:30 2025 by rpki-client