Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa
File:                     3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa (raw, json)
Hash identifier:          m6wquGUuqcDHbK+iUI6TwWVikjeN5Vbbg9ssho461QU=
Subject key identifier:   67:D9:57:0A:83:A8:F6:E5:6E:E5:2A:53:52:B9:FD:50:C0:8A:B0:30
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       03A86A908372C6D01F3672F7868B013B22471A9D
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:57 +0000
ROA not before:           Mon 28 Jul 2025 20:22:57 +0000
ROA not after:            Mon 27 Jul 2026 20:27:57 +0000
asID:                     271358
IP address blocks:        200.50.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:6a:90:83:72:c6:d0:1f:36:72:f7:86:8b:01:3b:22:47:1a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:57 2025 GMT
            Not After : Jul 27 20:27:57 2026 GMT
        Subject: CN=67D9570A83A8F6E56EE52A5352B9FD50C08AB030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:a7:73:5c:d5:3d:72:7d:9e:93:51:53:80:
                    4c:23:39:44:ab:01:94:61:a5:50:98:92:51:f3:8c:
                    78:d3:99:8a:6a:3c:3d:0a:ae:f3:1e:b5:96:ce:ec:
                    3d:5a:e9:e9:9b:27:71:3b:4d:bd:d8:d2:9a:d3:0b:
                    80:b1:54:3b:a8:75:4f:44:05:a1:7d:ca:16:08:91:
                    28:c9:0b:22:d1:29:b5:2f:49:3f:af:f1:cb:64:72:
                    31:b1:f8:09:02:f2:75:f1:9c:9a:84:30:b9:81:df:
                    52:93:0a:48:d2:06:ad:d6:54:b3:6c:31:27:14:8a:
                    97:85:33:de:4e:88:9b:47:e1:57:54:f7:aa:50:e9:
                    9e:5f:13:8d:0e:4c:2f:74:ee:52:a5:32:c1:d9:55:
                    42:c2:7e:d2:65:14:2d:f0:4c:e8:3b:25:c0:d0:42:
                    0b:c9:3a:c5:ad:43:d9:8a:ba:a3:46:e2:95:c7:3f:
                    69:6f:59:5c:36:8c:ec:9c:dd:c4:b9:e2:20:d8:92:
                    9d:4a:1c:76:80:c0:30:a2:34:87:a3:6e:07:1a:ba:
                    20:20:10:c0:6f:fb:e5:c9:d7:44:bf:49:25:7d:e2:
                    ca:0a:0e:af:f5:eb:90:9f:d7:e7:37:9c:a1:ff:3c:
                    fe:e2:b6:cf:b5:ad:d3:f0:52:ca:1e:f7:a3:ae:6a:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D9:57:0A:83:A8:F6:E5:6E:E5:2A:53:52:B9:FD:50:C0:8A:B0:30
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:b6:28:fc:5f:a3:53:9f:17:c0:f1:6b:10:b6:79:af:63:
         24:55:9e:85:38:df:7d:93:5b:b3:85:7f:d1:4a:ad:53:aa:b7:
         82:b6:77:8f:e4:2d:83:cc:2f:14:01:5c:47:44:93:aa:6e:cb:
         3e:c9:bd:19:85:63:93:3e:6b:93:80:1b:87:96:d5:7a:a0:69:
         c8:33:5d:33:b9:e1:ae:43:44:18:70:fb:32:9e:37:0f:85:52:
         b9:28:bc:28:39:05:fe:47:1f:cf:bf:e0:14:6b:58:56:9d:0b:
         93:07:1e:76:58:f4:39:ae:c7:67:91:13:db:31:7e:b5:85:43:
         c8:29:37:69:bd:32:5f:5b:5e:a9:8d:e7:95:1e:7a:db:5d:22:
         db:85:ed:b6:49:d5:e7:78:67:8e:4f:02:0e:17:f0:61:84:e9:
         58:e9:e6:0d:91:c8:f5:b8:84:c0:cb:f5:58:7f:85:7c:09:47:
         86:55:6a:36:c7:06:31:56:1e:6a:0a:40:1f:be:af:8a:fe:ce:
         32:c4:1b:8c:be:cd:ab:13:5d:55:ab:f9:aa:4f:cb:34:3c:fc:
         bb:2a:04:aa:a0:40:72:60:c5:c5:c8:93:74:62:c5:2f:14:d9:
         88:55:92:d5:e5:fe:07:16:33:c0:30:4f:08:b6:29:a6:ad:31:
         26:28:58:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA6hqkINyxtAfNnL3hosBOyJHGp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFNDU2NzFCMjQ0QkY3MzQ2M0QyM0VGOEU1NkUxM0NF
NkExOUE4NDAeFw0yNTA3MjgyMDIyNTdaFw0yNjA3MjcyMDI3NTdaMDMxMTAvBgNV
BAMTKDY3RDk1NzBBODNBOEY2RTU2RUU1MkE1MzUyQjlGRDUwQzA4QUIwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU6dzXNU9cn2ek1FTgEwjOUSr
AZRhpVCYklHzjHjTmYpqPD0KrvMetZbO7D1a6embJ3E7Tb3Y0prTC4CxVDuodU9E
BaF9yhYIkSjJCyLRKbUvST+v8ctkcjGx+AkC8nXxnJqEMLmB31KTCkjSBq3WVLNs
MScUipeFM95OiJtH4VdU96pQ6Z5fE40OTC907lKlMsHZVULCftJlFC3wTOg7JcDQ
QgvJOsWtQ9mKuqNG4pXHP2lvWVw2jOyc3cS54iDYkp1KHHaAwDCiNIejbgcauiAg
EMBv++XJ10S/SSV94soKDq/165Cf1+c3nKH/PP7its+1rdPwUsoe96Ouah7xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ9lXCoOo9uVu5SpTUrn9UMCKsDAwHwYDVR0j
BBgwFoAUnuRWcbJEv3NGPSPvjlbhPOahmoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGl0b0xnUlhlQkNNcWFOTWRDV3A4dGoxa3BaOTRGa1dUaE5Ma2ZHZkV0
YXQvMC85RUU0NTY3MUIyNDRCRjczNDYzRDIzRUY4RTU2RTEzQ0U2QTE5QTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFRTQ1NjcxQjI0NEJGNzM0
NjNEMjNFRjhFNTZFMTNDRTZBMTlBODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpdG9MZ1JYZUJDTXFhTk1kQ1dwOHRqMWtwWjk0RmtXVGhOTGtmR2ZFdGF0LzAv
MzIzMDMwMmUzNTMwMmUzMjMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIMuQwDQYJKoZIhvcNAQELBQADggEBAF/1tij8
X6NTnxfA8WsQtnmvYyRVnoU4332TW7OFf9FKrVOqt4K2d4/kLYPMLxQBXEdEk6pu
yz7JvRmFY5M+a5OAG4eW1XqgacgzXTO54a5DRBhw+zKeNw+FUrkovCg5Bf5HH8+/
4BRrWFadC5MHHnZY9Dmux2eRE9sxfrWFQ8gpN2m9Ml9bXqmN55UeettdItuF7bZJ
1ed4Z45PAg4X8GGE6Vjp5g2RyPW4hMDL9Vh/hXwJR4ZVajbHBjFWHmoKQB++r4r+
zjLEG4y+zasTXVWr+apPyzQ8/LsqBKqgQHJgxcXIk3RixS8U2YhVktXl/gcWM8Aw
Twi2KaatMSYoWKw=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:19 2025 by rpki-client