Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35302e302f32342d3234203d3e20323731353234.roa
File:                     3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (raw, json)
Hash identifier:          z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=
Subject key identifier:   2E:C4:6E:C2:F1:76:84:9E:12:9B:49:08:43:90:00:85:EA:9D:F3:EC
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       500BBF20BC14C2CF8C68364203759E2A43563A81
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35302e302f32342d3234203d3e20323731353234.roa
Signing time:             Wed 07 May 2025 03:51:59 +0000
ROA not before:           Wed 07 May 2025 03:46:59 +0000
ROA not after:            Wed 06 May 2026 03:51:59 +0000
asID:                     271524
IP address blocks:        200.39.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0b:bf:20:bc:14:c2:cf:8c:68:36:42:03:75:9e:2a:43:56:3a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: May  7 03:46:59 2025 GMT
            Not After : May  6 03:51:59 2026 GMT
        Subject: CN=2EC46EC2F176849E129B490843900085EA9DF3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:94:cb:47:2c:69:73:bc:63:60:d8:57:cb:
                    01:d7:d9:b1:f5:60:f5:e7:38:f7:29:93:0c:23:44:
                    09:1f:b3:b8:36:3f:46:a0:f3:59:c9:15:26:42:5c:
                    a1:23:bb:92:3e:3d:97:90:c4:ee:e2:30:ba:9f:d6:
                    bb:56:68:03:11:f7:44:67:52:9e:be:22:b4:a2:72:
                    cd:a2:93:bf:45:97:48:9d:75:69:e6:20:84:54:29:
                    38:bb:19:62:38:dc:73:92:77:3e:40:19:37:03:68:
                    bd:a0:3d:8f:37:27:00:0b:82:c8:bd:27:d3:4c:78:
                    f5:a3:08:74:ab:83:9b:96:58:bc:6a:85:5b:f2:f9:
                    65:db:db:75:c2:a3:a7:3b:6f:4a:a8:34:c9:2f:ae:
                    c7:6f:83:8a:96:4e:c0:8f:50:46:47:27:e3:75:63:
                    34:99:de:09:89:75:09:7d:ee:5b:b2:21:c0:73:8d:
                    74:07:80:b0:8d:1b:a8:e8:ab:c4:0e:46:94:50:de:
                    b2:e1:4e:08:e0:f5:c5:a7:8c:57:80:c7:31:2c:d6:
                    b4:a2:26:74:46:c7:b3:69:6f:fa:86:d6:69:6b:f9:
                    aa:ce:29:fc:be:df:e7:75:3a:5f:4c:4b:e1:7c:9f:
                    64:e3:da:32:66:4e:34:3b:70:06:56:b2:11:91:e0:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C4:6E:C2:F1:76:84:9E:12:9B:49:08:43:90:00:85:EA:9D:F3:EC
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35302e302f32342d3234203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:f0:f2:bf:93:1b:68:27:d8:22:81:1c:32:d2:e2:2f:e1:
         b3:bf:77:23:fa:84:cd:30:3f:22:25:50:25:55:74:ea:36:d0:
         75:e3:16:65:0b:85:2a:3a:f6:09:11:e0:0b:b1:e2:c3:b6:ac:
         55:17:5f:a9:81:f6:9b:f1:7f:9c:67:d6:a9:52:7c:7f:6c:76:
         74:02:97:05:c1:64:8e:7f:07:1e:f7:f3:ca:6c:b1:cf:ab:f1:
         3b:90:78:c9:dd:37:e5:01:06:36:97:bb:2e:51:8a:34:c0:37:
         7d:a2:48:58:79:ad:b5:f1:62:d7:28:7f:e3:b4:9b:cf:60:92:
         4e:2b:70:8d:d1:e1:b2:d0:6b:e1:d5:a3:ab:ed:e8:d6:db:ce:
         4b:dd:e4:bd:bd:b5:ee:91:ad:cf:09:fc:07:b7:da:ab:06:86:
         6d:a0:91:c2:25:89:63:e8:e7:bd:68:87:94:26:76:d1:1a:f0:
         87:73:97:20:d0:3f:dc:35:07:b8:74:be:69:f7:51:6f:a7:22:
         e8:ce:54:47:25:da:cb:f9:dc:00:92:f6:c4:c9:c8:99:86:e7:
         54:a5:4e:72:46:77:38:c6:2e:a4:e5:5f:21:08:d9:23:8b:3f:
         f2:97:98:0f:55:95:b5:8d:2a:c4:54:57:98:e1:f6:96:09:10:
         1e:3d:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:42 2025 by rpki-client