Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3232312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          c9GTYB3W0/KVRzuItSYpV7dTSFU7aRDCIKMEzztGBWE=
Subject key identifier:   D9:02:57:99:90:F4:20:19:84:BA:00:2F:C2:1C:11:13:01:29:A1:94
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       2C60EFB0E7DC551BC8DD81A757E4A591E21F2DBC
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:03:35 +0000
ROA not before:           Thu 18 Jul 2024 19:58:35 +0000
ROA not after:            Thu 17 Jul 2025 20:03:35 +0000
asID:                     11802
IP address blocks:        200.19.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:ef:b0:e7:dc:55:1b:c8:dd:81:a7:57:e4:a5:91:e2:1f:2d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:58:35 2024 GMT
            Not After : Jul 17 20:03:35 2025 GMT
        Subject: CN=D902579990F4201984BA002FC21C11130129A194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:fe:fa:75:f1:c8:32:e0:27:96:ee:30:cd:
                    9c:6f:4a:63:73:39:db:1e:71:a8:a5:53:66:98:12:
                    8b:af:3d:97:da:02:8e:1f:9d:5e:2d:71:28:16:2b:
                    01:97:60:55:c4:32:57:fe:f8:2e:32:85:a9:db:cf:
                    5e:75:a3:b3:42:8c:3d:84:f9:7d:83:42:4d:5c:cf:
                    c1:8d:ca:9c:19:d1:2c:5f:9c:04:86:c2:1d:c3:64:
                    2e:9a:35:a4:e2:37:f0:8c:12:78:ac:58:35:c4:32:
                    9e:ba:2d:0f:c4:cc:07:cc:50:c4:cf:ab:4e:7c:6d:
                    7d:48:f5:c2:7e:c0:61:64:b3:9b:ef:a9:5b:07:13:
                    9b:22:89:a7:6f:27:6b:5f:c8:e5:f5:bd:aa:7f:86:
                    35:db:01:a6:c9:59:73:7f:e7:3d:ee:9d:fa:61:b8:
                    74:d0:f9:a8:7c:0e:01:c1:dd:21:92:0d:54:14:5f:
                    95:02:75:57:3b:17:0a:4b:28:ff:98:ae:3b:da:ee:
                    40:73:66:0c:95:45:ef:55:91:4e:b2:d1:c4:76:e8:
                    fc:3b:b6:b7:61:a5:85:31:99:9b:72:37:21:71:f3:
                    84:33:79:2e:01:63:a6:28:f9:a4:71:b9:de:a2:69:
                    4a:cb:49:b3:f6:5a:fe:49:bd:0c:a3:c2:1a:8c:65:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:02:57:99:90:F4:20:19:84:BA:00:2F:C2:1C:11:13:01:29:A1:94
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:9a:cd:bb:f6:52:5f:5a:84:91:25:8d:05:f1:0c:e2:01:
         59:57:f7:5a:67:dd:7e:30:27:64:d4:09:33:57:2a:17:84:3c:
         94:3e:4e:29:57:54:7c:36:92:07:3e:69:68:0a:6d:35:ae:d6:
         28:8d:0a:3a:91:40:ed:b5:bd:1c:4b:dc:ac:0e:22:fc:c1:8a:
         52:ed:6f:68:c6:b3:19:7c:e0:1c:7a:bb:fc:d8:42:e8:e6:94:
         19:9b:88:ff:2e:77:06:db:36:8f:80:af:d5:aa:7a:ee:a9:df:
         50:25:ea:23:ea:84:42:6e:48:63:d2:91:b2:2c:5a:4d:f3:e3:
         1c:31:a7:9d:18:0b:7d:56:28:2e:d8:17:67:d5:19:7b:ec:6c:
         be:29:45:81:7e:df:59:78:db:ef:88:63:c6:2b:38:70:e3:aa:
         3b:63:58:e5:5d:0f:0c:34:51:f8:84:c4:be:f5:d5:46:09:56:
         4c:af:1a:7d:17:68:d6:c0:89:d7:df:14:77:31:e2:88:74:d0:
         0c:e2:43:30:8f:45:b6:d4:02:3d:28:29:5b:2c:fe:02:62:a3:
         f2:e2:ef:12:6f:85:65:49:69:38:75:de:e0:b6:48:d8:c8:db:
         57:74:3d:a1:b1:22:df:d7:9d:47:e2:ca:3a:be:86:c4:0e:e1:
         66:01:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:53:13 2025 by rpki-client