Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231392e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          Vsx3tfQ1jxrzYyN6DwyvfXBk2UJutsjTYYOgqaeKE+M=
Subject key identifier:   80:3E:55:41:67:A1:3B:CC:E7:77:FA:DD:A0:CC:AB:26:D5:F9:50:AD
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       BFBA45620F172295E3AA4326AA21A6DC314662
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa
Signing time:             Tue 28 Oct 2025 22:28:04 +0000
ROA not before:           Tue 28 Oct 2025 22:23:04 +0000
ROA not after:            Tue 27 Oct 2026 22:28:04 +0000
asID:                     11802
IP address blocks:        200.19.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bf:ba:45:62:0f:17:22:95:e3:aa:43:26:aa:21:a6:dc:31:46:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Oct 28 22:23:04 2025 GMT
            Not After : Oct 27 22:28:04 2026 GMT
        Subject: CN=803E554167A13BCCE777FADDA0CCAB26D5F950AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:f7:ee:f2:db:20:25:6f:05:7b:9e:84:89:
                    de:65:16:10:f2:ae:8b:14:41:a5:60:40:24:5f:2e:
                    87:71:b1:9c:49:77:f4:ce:e6:d8:98:fd:4d:fe:95:
                    ac:b7:e8:d6:b7:45:40:60:6c:54:c0:43:07:78:c4:
                    11:74:95:dc:ba:08:3b:cd:41:d4:37:2e:2e:08:fc:
                    b5:c8:24:11:d0:5b:98:56:da:4e:f7:1a:da:91:0b:
                    51:16:94:22:b0:1d:33:44:26:ba:b3:a0:e0:02:3c:
                    3d:3b:d4:8c:22:db:7e:ec:4c:fd:fa:3a:9b:2e:02:
                    e8:d7:93:16:47:72:cd:1b:81:b8:c9:e7:84:28:20:
                    b7:db:de:4d:da:a8:01:d9:e7:99:3a:67:5e:3e:dd:
                    d5:d0:c9:e5:65:23:aa:74:1f:4a:fe:53:f7:48:da:
                    a3:c3:cb:dd:26:76:8c:63:e3:fe:3d:61:70:ea:e4:
                    67:22:9f:0a:49:fc:ec:99:c9:5a:fe:86:ed:80:60:
                    71:a1:5e:16:a0:c7:cc:1b:10:3a:ec:58:f0:5d:5b:
                    dd:dd:5d:b1:18:1b:38:88:74:3e:91:be:28:e6:b2:
                    ef:59:36:3b:f0:a6:7c:c7:64:a4:b2:73:ce:4e:ca:
                    34:06:8d:52:a5:c2:82:3c:d1:65:68:80:84:94:09:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:55:41:67:A1:3B:CC:E7:77:FA:DD:A0:CC:AB:26:D5:F9:50:AD
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231392e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:1d:4e:ee:01:61:13:7e:63:57:20:c7:88:dc:69:e0:d4:
         62:b4:d1:b1:29:47:27:ad:30:c6:18:95:f9:e8:d2:59:59:7e:
         be:c3:b7:bc:83:af:f6:c5:b7:87:2d:b4:57:de:c8:a7:42:36:
         44:fb:e7:e3:04:7c:df:90:7a:55:10:9f:e6:41:39:bf:48:0b:
         6f:e8:c7:f7:7f:82:d0:56:2c:98:f7:2c:89:a7:fd:a7:a9:db:
         25:ab:c9:91:ff:72:84:bf:99:58:dc:38:ac:ca:42:14:d3:1e:
         58:a2:6d:b1:df:d8:6c:6f:13:b4:04:4f:47:1b:d3:f0:b0:a4:
         11:60:d1:16:81:97:c0:99:8e:ca:4e:c6:89:7c:a0:3b:b1:8d:
         48:55:67:e1:40:b4:04:fe:1f:28:de:0d:e0:21:df:28:61:82:
         b7:ec:4c:98:cf:82:99:f7:df:b7:e6:73:26:77:7d:a6:7a:9d:
         3f:96:dd:d6:37:c1:58:5b:f1:99:d8:21:2e:53:11:2b:74:0c:
         7e:ff:4f:de:93:00:27:6a:1d:67:43:70:78:54:8c:03:3a:65:
         32:14:68:0c:0d:b5:8d:fe:9e:8b:ce:ea:6e:9e:c1:47:a2:f0:
         b0:6a:41:a7:86:d5:3a:43:22:b6:b2:4f:83:e1:e0:d9:37:35:
         37:d7:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:43:34 2025 by rpki-client