Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa
File:                     3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa (raw, json)
Hash identifier:          Yo4Jm9SIYui/zi9jo/pP2oE+WqghwcXiGD45ozxaLdA=
Subject key identifier:   C3:84:0B:02:88:8F:6F:24:38:EB:17:95:F5:CA:8D:41:F4:59:FB:B1
Certificate issuer:       /CN=2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5
Certificate serial:       446A46E12AF3FBB2ED711E3B54EFBAD9E6E1106E
Authority key identifier: 2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa
Signing time:             Fri 13 Jun 2025 18:35:54 +0000
ROA not before:           Fri 13 Jun 2025 18:30:54 +0000
ROA not after:            Fri 12 Jun 2026 18:35:54 +0000
asID:                     271358
IP address blocks:        200.50.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:46:e1:2a:f3:fb:b2:ed:71:1e:3b:54:ef:ba:d9:e6:e1:10:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5
        Validity
            Not Before: Jun 13 18:30:54 2025 GMT
            Not After : Jun 12 18:35:54 2026 GMT
        Subject: CN=C3840B02888F6F2438EB1795F5CA8D41F459FBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:b3:cd:a3:cd:27:a6:19:d2:0a:e8:e5:f4:
                    bf:9c:06:67:6a:7f:7a:00:be:3b:07:53:e5:4c:b2:
                    50:76:10:f7:92:4b:9c:96:38:59:e8:37:fe:c1:7f:
                    65:32:0d:2a:19:80:7f:dc:99:2e:c5:e3:97:8d:e1:
                    09:37:ec:48:87:3a:52:96:d9:3d:ac:17:80:5e:7a:
                    58:4e:c6:9e:07:44:31:47:9f:d9:05:cd:94:93:d5:
                    b0:ea:3c:08:7e:da:b4:d5:05:fd:cd:f7:96:e7:93:
                    a3:41:7b:53:7d:3d:fa:48:c3:ff:14:32:58:db:33:
                    7f:45:e3:fd:f4:78:40:de:05:da:d9:42:be:4e:45:
                    5e:eb:2e:0a:d7:b2:5a:06:33:fd:66:84:6f:93:b7:
                    26:2c:c7:43:32:22:a7:1a:3d:ee:4e:c7:e8:93:86:
                    e3:ac:b3:89:7f:b1:94:bf:2e:72:d6:ea:41:6e:67:
                    bd:e7:b8:92:34:2a:f5:ac:4b:fd:b5:f7:df:32:c5:
                    c4:45:55:b9:64:5f:6e:05:5b:7b:7d:53:5f:70:ff:
                    c8:31:20:12:05:22:f2:e0:45:47:3d:28:dc:87:cd:
                    b3:38:73:cd:83:29:c4:0e:44:7b:59:b3:e7:72:77:
                    e7:d5:24:e5:47:d1:6a:b3:0c:6e:df:5f:1c:3b:56:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:0B:02:88:8F:6F:24:38:EB:17:95:F5:CA:8D:41:F4:59:FB:B1
            X509v3 Authority Key Identifier:
                keyid:2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32332d3233203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:37:79:f8:1c:58:8e:58:6b:17:37:d7:b2:7e:91:29:ed:
         1b:a2:57:db:ca:d2:72:74:01:8e:81:34:c4:dc:3e:df:ef:45:
         ad:a9:f6:89:5c:4c:56:61:6c:a2:d0:de:5a:df:77:42:22:5b:
         32:02:28:67:12:49:b6:fd:6a:55:de:cc:20:5a:fc:f3:f5:07:
         6d:a8:04:cf:aa:5f:a6:7f:94:2c:3f:18:34:bb:2b:6a:b7:e0:
         61:26:67:d6:b1:50:63:79:df:3c:01:ee:3b:f6:3a:79:e8:e5:
         2a:d5:df:a8:2d:20:7e:73:c8:45:25:4d:ec:c1:fb:c6:fd:bb:
         5d:4b:ce:e8:2f:7e:a2:50:5f:c9:9b:3c:95:e6:68:34:63:1f:
         a7:d0:d0:42:54:06:e3:74:eb:3d:e9:b0:50:54:89:e7:2e:c5:
         48:df:37:c1:a1:70:91:15:14:f0:24:df:95:34:57:35:44:7a:
         5b:4e:a3:17:96:89:3f:4e:f8:5a:7f:29:98:bf:f9:7b:b0:03:
         07:2d:84:5e:9f:b6:97:ef:40:95:b2:2a:b6:46:54:d1:62:fb:
         ed:06:82:e8:df:dc:af:3f:56:2a:8c:59:ba:a9:94:0b:08:61:
         fc:8b:58:78:4c:1c:c4:97:f0:87:16:16:66:e8:ab:14:da:cd:
         1b:dd:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:29:21 2025 by rpki-client