Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa
File:                     3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa (raw, json)
Hash identifier:          PAO2IE12ssYhZkvlugmjSLlx9dPN/wLx1ZXYozmBKL0=
Subject key identifier:   13:4D:78:73:FF:0F:85:2A:10:02:EC:14:76:6F:9B:45:34:2E:5E:30
Certificate issuer:       /CN=DBEBCDAE269710D73241E51692395DA587CA9198
Certificate serial:       6BE781B546BF35412736A2FD199B79E44BBC41F1
Authority key identifier: DB:EB:CD:AE:26:97:10:D7:32:41:E5:16:92:39:5D:A5:87:CA:91:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa
Signing time:             Thu 21 Nov 2024 13:11:24 +0000
ROA not before:           Thu 21 Nov 2024 13:06:24 +0000
ROA not after:            Thu 20 Nov 2025 13:11:24 +0000
asID:                     271358
IP address blocks:        200.50.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e7:81:b5:46:bf:35:41:27:36:a2:fd:19:9b:79:e4:4b:bc:41:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEBCDAE269710D73241E51692395DA587CA9198
        Validity
            Not Before: Nov 21 13:06:24 2024 GMT
            Not After : Nov 20 13:11:24 2025 GMT
        Subject: CN=134D7873FF0F852A1002EC14766F9B45342E5E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:ce:ec:fe:c7:fe:0c:e1:11:8e:18:e3:bc:
                    1e:4b:67:d6:32:69:38:92:ba:d0:0d:6b:b2:17:37:
                    a6:48:5e:68:9e:5c:dd:74:f1:fc:44:29:9d:c6:44:
                    cc:21:8d:5a:76:a6:4b:11:38:6d:da:01:c1:71:13:
                    23:77:72:49:00:48:b2:bf:2f:c5:63:d1:eb:fa:3a:
                    d6:f2:5c:19:6b:8a:31:81:ab:1a:a9:9a:e2:a3:b0:
                    53:c0:8d:c5:8f:c1:e3:7e:ba:1a:65:67:4d:7c:02:
                    d3:95:30:4c:4b:90:57:e9:71:04:16:68:4f:1f:9d:
                    52:c6:e5:fe:fd:23:37:80:85:c1:f9:99:22:50:2d:
                    2f:45:cf:c2:cc:47:30:ff:d3:29:29:50:6a:73:26:
                    7c:07:cc:eb:17:b8:df:6f:56:59:cd:a9:ef:23:58:
                    1e:86:88:70:c3:2e:3d:9e:69:a0:d8:74:d0:2a:84:
                    4e:51:33:cf:33:88:04:bd:db:30:49:ec:5e:22:eb:
                    d0:ce:8b:b1:90:30:7e:3e:d4:47:a4:bc:09:f1:21:
                    2e:ea:a6:be:24:2f:bb:d6:5c:72:e7:06:58:38:04:
                    64:8d:20:42:f4:a8:78:0c:6f:8f:1f:e5:73:7e:60:
                    d7:09:00:43:09:8a:fc:3e:d1:dd:09:e9:ab:59:b2:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4D:78:73:FF:0F:85:2A:10:02:EC:14:76:6F:9B:45:34:2E:5E:30
            X509v3 Authority Key Identifier:
                keyid:DB:EB:CD:AE:26:97:10:D7:32:41:E5:16:92:39:5D:A5:87:CA:91:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/DBEBCDAE269710D73241E51692395DA587CA9198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBEBCDAE269710D73241E51692395DA587CA9198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/3230302e35302e3232382e302f32342d3234203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:f5:b0:45:bc:0d:70:ba:34:aa:b8:a4:c7:57:16:c5:b3:
         f3:d2:5f:92:1b:0d:8f:ab:66:9a:19:38:1d:51:4f:fd:ab:55:
         5e:e1:c7:a1:a9:fe:9e:fb:9f:cd:8f:62:ee:7c:a7:c3:0f:c9:
         ac:aa:17:01:0a:d5:cb:5f:b8:9a:4d:9b:19:5d:1e:53:1c:71:
         b4:9d:89:de:ca:b4:88:27:ae:90:4f:e4:b1:14:90:4c:05:7b:
         50:8f:12:4a:98:a6:a6:94:03:54:58:e2:c3:37:8b:d4:63:23:
         86:18:1a:c7:c0:61:c4:da:82:c6:31:f5:4a:c7:f7:5a:e4:c3:
         5e:4a:5f:b1:7e:b4:03:cc:7d:ab:cc:1a:fb:72:4d:e3:5d:39:
         d1:db:57:68:f9:8c:d1:65:45:e6:c5:a7:97:60:85:54:ef:67:
         79:3b:48:93:f0:b6:72:b5:70:04:de:77:7e:15:13:32:25:62:
         4c:c7:7d:79:eb:7d:db:cd:3b:20:cd:11:ce:30:94:bd:e7:b5:
         22:0d:d5:51:ea:0c:00:7d:36:ec:cb:54:fc:71:e7:97:1d:a9:
         e8:a5:63:b4:33:51:82:82:2c:39:f0:33:fe:7c:c0:d8:85:72:
         49:0d:c5:34:a1:91:26:b4:c9:96:8c:05:ca:f7:c6:47:89:14:
         92:f7:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:17 2024 by rpki-client on console-ams.rpki-client.org