Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa
File:                     3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa (raw, json)
Hash identifier:          qv/3EgAWNquq6ovyEoWCkcZ3DlP9L1WW2eEjVGoT4dY=
Subject key identifier:   E6:0F:F0:31:54:22:A4:A2:20:6A:08:EA:80:AF:D9:69:A1:85:8F:F8
Certificate issuer:       /CN=2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5
Certificate serial:       7AEBE9B2819DCEBC011228348F572863CA04919B
Authority key identifier: 2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa
Signing time:             Fri 13 Jun 2025 18:35:55 +0000
ROA not before:           Fri 13 Jun 2025 18:30:55 +0000
ROA not after:            Fri 12 Jun 2026 18:35:55 +0000
asID:                     271358
IP address blocks:        200.50.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:e9:b2:81:9d:ce:bc:01:12:28:34:8f:57:28:63:ca:04:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5
        Validity
            Not Before: Jun 13 18:30:55 2025 GMT
            Not After : Jun 12 18:35:55 2026 GMT
        Subject: CN=E60FF0315422A4A2206A08EA80AFD969A1858FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:00:38:e4:80:72:5f:a1:31:85:ce:f9:12:
                    b3:54:d2:d2:a8:b1:f2:38:8f:e4:2e:53:a9:29:dd:
                    4d:65:de:f9:6b:64:21:31:22:02:21:99:e6:38:50:
                    90:e9:a8:52:17:64:e8:8b:b1:a8:98:22:50:b9:29:
                    ad:10:37:36:fc:ce:0c:7a:c2:c3:dc:94:8b:99:5c:
                    9d:09:20:42:e4:9d:22:9a:29:81:e6:24:68:65:69:
                    4e:b0:eb:34:a6:4e:de:ed:fb:5c:80:f2:9a:0e:07:
                    1e:05:a6:ab:d0:aa:2d:62:45:f5:4c:cc:3f:7e:70:
                    cb:c9:4a:15:6f:46:38:d5:bd:a9:99:0a:4c:fb:a9:
                    0b:ca:0e:47:ee:46:9f:e9:53:c1:3f:49:64:a4:56:
                    9b:b4:46:a5:db:65:f1:05:f7:ed:ad:2a:f0:11:f8:
                    b0:88:42:eb:91:3a:46:ae:17:86:ca:bd:df:2a:94:
                    c9:5e:64:f3:fa:d0:d9:e6:c8:07:1d:b3:2a:54:d4:
                    79:83:fe:97:25:ff:d6:da:a5:2d:88:28:41:43:3f:
                    d2:a5:19:a6:31:e1:16:57:65:71:ed:fa:26:a8:d0:
                    7a:92:8b:21:84:0e:04:b2:78:95:41:62:78:33:d7:
                    63:22:52:a2:69:dc:38:8b:34:54:74:ba:05:53:f0:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0F:F0:31:54:22:A4:A2:20:6A:08:EA:80:AF:D9:69:A1:85:8F:F8
            X509v3 Authority Key Identifier:
                keyid:2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:d0:82:28:95:0d:48:f6:7f:9c:b3:0b:3a:b0:3a:77:b9:
         a7:29:5f:cb:20:ef:b8:38:d0:0b:2f:de:e9:81:ed:ad:a1:f5:
         98:c3:77:9f:ab:91:f3:51:ec:cb:dc:ef:a7:74:2d:77:4c:e1:
         02:1b:b1:a8:13:8b:a4:ea:2a:f4:26:27:0e:3c:7e:7b:06:7d:
         db:ef:a3:e7:1b:bb:6b:3a:bc:3e:4c:66:6a:85:ee:aa:3d:44:
         db:ad:83:06:7e:56:f4:e3:65:8a:e2:ff:3e:d0:b0:b0:5b:2a:
         d5:aa:06:6c:ef:29:27:be:e3:f5:20:9d:49:49:13:0c:e7:ef:
         74:47:30:da:1b:6e:6c:6a:1f:f8:3d:bc:3a:5a:18:2d:8f:8b:
         69:88:23:d5:91:bb:c7:ed:00:e0:3b:14:0c:3d:71:3b:13:f4:
         05:64:33:00:a0:c0:16:a2:32:83:a8:cd:2c:b1:06:79:17:cf:
         38:7a:8c:8e:48:30:ec:89:dd:19:09:7c:18:ed:79:be:e5:1a:
         67:e0:f8:7b:6b:9c:fa:19:88:e7:a4:db:ac:2f:b5:45:a3:35:
         81:34:57:67:86:23:71:e4:47:33:68:50:5f:af:40:6f:e6:39:
         22:c0:b8:c7:c8:b6:87:00:0a:40:d1:d4:0a:c5:12:fb:61:4a:
         0f:e9:8c:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeuvpsoGdzrwBEig0j1coY8oEkZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZBQ0NCRTZGODBBNEEyMjlGMUYzRDVEM0FFQ0Q2MDEz
OTU0OUVENTAeFw0yNTA2MTMxODMwNTVaFw0yNjA2MTIxODM1NTVaMDMxMTAvBgNV
BAMTKEU2MEZGMDMxNTQyMkE0QTIyMDZBMDhFQTgwQUZEOTY5QTE4NThGRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSwA45IByX6Exhc75ErNU0tKo
sfI4j+QuU6kp3U1l3vlrZCExIgIhmeY4UJDpqFIXZOiLsaiYIlC5Ka0QNzb8zgx6
wsPclIuZXJ0JIELknSKaKYHmJGhlaU6w6zSmTt7t+1yA8poOBx4FpqvQqi1iRfVM
zD9+cMvJShVvRjjVvamZCkz7qQvKDkfuRp/pU8E/SWSkVpu0RqXbZfEF9+2tKvAR
+LCIQuuROkauF4bKvd8qlMleZPP60NnmyAcdsypU1HmD/pcl/9bapS2IKEFDP9Kl
GaYx4RZXZXHt+iao0HqSiyGEDgSyeJVBYngz12MiUqJp3DiLNFR0ugVT8H4bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5g/wMVQipKIgagjqgK/ZaaGFj/gwHwYDVR0j
BBgwFoAUL6zL5vgKSiKfHz1dOuzWATlUntUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGl0b0xnUlhlQkNNcWFOTWRDV3A4dGoxa3BaOTRGa1dUaE5Ma2ZHZkV0
YXQvMC8yRkFDQ0JFNkY4MEE0QTIyOUYxRjNENUQzQUVDRDYwMTM5NTQ5RUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQUNDQkU2RjgwQTRBMjI5
RjFGM0Q1RDNBRUNENjAxMzk1NDlFRDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpdG9MZ1JYZUJDTXFhTk1kQ1dwOHRqMWtwWjk0RmtXVGhOTGtmR2ZFdGF0LzAv
MzIzMDMwMmUzNTMwMmUzMjMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIMuQwDQYJKoZIhvcNAQELBQADggEBAFYu0IIo
lQ1I9n+csws6sDp3uacpX8sg77g40Asv3umB7a2h9ZjDd5+rkfNR7Mvc76d0LXdM
4QIbsagTi6TqKvQmJw48fnsGfdvvo+cbu2s6vD5MZmqF7qo9RNutgwZ+VvTjZYri
/z7QsLBbKtWqBmzvKSe+4/UgnUlJEwzn73RHMNobbmxqH/g9vDpaGC2Pi2mII9WR
u8ftAOA7FAw9cTsT9AVkMwCgwBaiMoOozSyxBnkXzzh6jI5IMOyJ3RkJfBjteb7l
Gmfg+HtrnPoZiOek26wvtUWjNYE0V2eGI3HkRzNoUF+vQG/mOSLAuMfItocACkDR
1ArFEvthSg/pjAo=
-----END CERTIFICATE-----
Generated at Thu Jun 19 21:51:12 2025 by rpki-client