Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3233302e302f32342d3234203d3e20323731333538.roa
File:                     3230302e35302e3233302e302f32342d3234203d3e20323731333538.roa (raw, json)
Hash identifier:          GngEt/2+xKijh+busqYE5o3vC+VFHzHvSvMXw6JYgWs=
Subject key identifier:   AC:A9:64:79:32:33:77:2A:E4:15:BC:68:D4:8A:B3:3B:93:4E:97:C6
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       6636E780669F25B10DCBDCF928403176D49C3AB0
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3233302e302f32342d3234203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:58 +0000
ROA not before:           Mon 28 Jul 2025 20:22:58 +0000
ROA not after:            Mon 27 Jul 2026 20:27:58 +0000
asID:                     271358
IP address blocks:        200.50.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:e7:80:66:9f:25:b1:0d:cb:dc:f9:28:40:31:76:d4:9c:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:58 2025 GMT
            Not After : Jul 27 20:27:58 2026 GMT
        Subject: CN=ACA964793233772AE415BC68D48AB33B934E97C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:5f:cc:66:36:ae:0b:bf:69:62:22:07:00:
                    24:f4:55:ce:fc:56:0e:99:56:51:07:2d:dc:cc:4e:
                    06:a5:66:44:a7:c7:02:3a:ec:10:f0:22:05:d0:ea:
                    f4:7d:92:b3:09:69:a9:cf:8d:65:c7:06:40:09:a3:
                    8a:8f:58:56:48:88:de:b7:77:66:b3:bf:84:2c:31:
                    1d:0b:2a:84:66:29:f5:ec:eb:cc:9f:6f:69:5c:2c:
                    8c:c2:23:97:8e:23:fd:a6:32:1e:1e:99:f0:40:f5:
                    68:60:89:1b:f3:c4:6b:22:3d:95:81:7a:3d:99:25:
                    8a:f3:7b:b5:a6:ce:b5:bd:37:95:e0:05:57:56:7f:
                    3d:85:4b:4f:aa:c2:b9:c6:3c:d3:c1:33:c3:72:52:
                    b2:8e:b9:77:67:ba:3e:96:2f:d2:5a:e1:84:8a:aa:
                    6f:d7:24:82:bf:71:98:ad:4c:06:99:b5:9d:2b:0e:
                    88:02:89:ce:63:cd:92:12:d3:e0:10:17:6a:0d:05:
                    61:3d:4e:03:48:9c:27:99:4f:d8:60:5b:af:0c:bb:
                    a6:fb:79:78:37:0e:17:b5:11:9c:76:2e:5d:c3:7a:
                    9d:1f:f4:56:31:27:b7:6c:91:cc:30:ad:5c:59:57:
                    70:26:6e:3b:98:5a:62:1d:1b:9e:cc:6a:d0:34:63:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:64:79:32:33:77:2A:E4:15:BC:68:D4:8A:B3:3B:93:4E:97:C6
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3233302e302f32342d3234203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0c:fb:35:1d:2e:8d:d9:9e:e7:9a:db:5a:97:e7:bc:d5:c1:
         c4:ef:44:3a:06:ec:8a:94:8d:63:f3:6c:e3:b1:12:ae:02:81:
         d1:fe:22:41:be:b4:98:c1:89:8b:1c:67:0f:fe:5c:7d:df:08:
         c2:9b:66:c0:fe:92:67:f4:85:03:37:13:bb:55:01:e1:1c:33:
         17:fa:2d:cb:eb:75:fe:e7:d8:77:be:22:6c:0b:21:43:9f:41:
         ae:08:7a:6a:cb:2a:d8:0b:d0:bf:37:4b:fd:47:17:f8:2c:77:
         8c:88:95:bc:e0:5b:bb:82:a6:89:d3:9c:8a:15:34:0a:11:8a:
         c5:3c:4b:fc:81:f0:5e:6c:04:03:cf:93:fe:ac:b5:a0:f1:b2:
         8f:92:9f:6b:8d:01:99:31:60:25:28:c9:d9:83:50:63:4a:db:
         f4:66:20:8d:f6:29:e9:d1:70:75:b1:39:9e:49:b1:3d:b5:b1:
         a0:39:4e:cf:27:9f:55:13:d6:de:5b:f6:41:57:53:c4:09:6c:
         82:22:49:50:d4:f6:a1:53:21:0e:9b:2f:a8:96:0b:cd:e5:b2:
         c9:1f:47:79:1a:87:da:89:29:a1:27:cf:f2:43:fa:1b:2f:7e:
         3e:12:7c:39:a5:47:f3:41:30:35:4b:90:e0:5d:e1:aa:dd:ee:
         81:d5:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:27 2025 by rpki-client