Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          0SOfc3wDohpZRGvlsP7ov6fgG2XbxdjYDnBHwWZoW9E=
Subject key identifier:   FD:D6:D0:95:5B:0D:E6:C4:9E:99:FA:E0:E0:D0:04:82:E9:06:E1:86
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       3574EFCCADC69C322244C13F932F98DBC5824D81
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 06 May 2026 14:08:36 +0000
ROA not before:           Wed 06 May 2026 14:03:36 +0000
ROA not after:            Wed 05 May 2027 14:08:36 +0000
asID:                     52871
IP address blocks:        201.157.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 00:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:ef:cc:ad:c6:9c:32:22:44:c1:3f:93:2f:98:db:c5:82:4d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: May  6 14:03:36 2026 GMT
            Not After : May  5 14:08:36 2027 GMT
        Subject: CN=FDD6D0955B0DE6C49E99FAE0E0D00482E906E186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:14:7e:df:80:c8:56:5b:26:b7:b9:5f:ae:
                    3e:77:f2:30:60:09:91:85:3f:a8:20:31:8a:56:d5:
                    a2:57:1b:47:41:10:57:25:dd:40:f2:49:9e:25:99:
                    aa:3f:c9:c1:3c:a0:f2:65:f3:b0:32:12:7a:3d:5e:
                    78:df:6e:fd:88:78:d0:08:3c:fe:6e:45:15:23:af:
                    94:1f:6a:46:14:d5:a5:6d:b5:f5:25:25:c4:4e:e4:
                    34:64:25:b0:0b:f5:a8:6c:4c:15:39:f2:a1:99:21:
                    3e:c6:b0:f0:1b:dd:0c:2b:76:da:a5:6c:ac:b1:43:
                    6a:34:28:b4:16:9d:f8:a6:62:ef:1d:c6:ee:54:04:
                    be:c5:7f:9f:75:20:ca:04:d4:4f:23:dc:6f:79:8e:
                    c5:26:da:d9:1a:58:92:6f:1f:22:00:ed:59:29:3b:
                    4c:dc:4e:90:94:70:2c:69:ae:d7:78:97:60:4d:3a:
                    55:2c:39:60:b4:24:15:44:7d:5d:74:7f:62:c3:86:
                    9c:d8:db:30:01:ad:e5:e6:c7:d6:4d:9d:5b:77:22:
                    c1:c1:3c:30:f4:d2:57:3a:3d:a0:c3:9b:79:ea:98:
                    80:96:6f:bf:53:d2:1a:fe:76:e7:95:4a:60:d9:9a:
                    80:04:75:77:67:29:7c:a1:6c:ae:63:9b:6e:67:46:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:D0:95:5B:0D:E6:C4:9E:99:FA:E0:E0:D0:04:82:E9:06:E1:86
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:c8:17:26:d6:33:ee:46:e5:17:bd:f5:83:16:d8:52:d3:
         38:c8:26:25:7c:72:e4:c6:fa:1e:89:72:9a:e5:43:5e:ef:c7:
         7b:cb:56:98:35:62:37:4c:9d:e0:2c:bf:53:a9:59:13:8b:57:
         32:fb:7d:88:86:5b:86:63:49:4c:f2:1d:7d:c0:a7:b6:7f:7b:
         c5:2a:bb:32:42:18:0e:e9:71:5f:2c:87:18:f8:63:0e:5c:4b:
         ef:c3:1c:a6:61:79:0c:ab:eb:20:c1:04:30:0c:0e:db:c5:c1:
         eb:d7:df:e7:49:66:fd:6a:5c:43:0b:a5:6e:5e:8e:c6:ba:2b:
         a3:14:db:5b:18:5c:a5:8a:c3:2d:5a:69:80:3b:19:a4:39:98:
         eb:43:b0:0f:67:e3:9e:45:32:37:05:47:10:27:00:19:73:49:
         ac:18:79:7a:00:54:4b:73:61:43:74:96:88:5b:77:e8:67:b8:
         7c:12:61:c3:9a:c8:af:d4:de:8c:80:4e:3b:b2:fa:3d:2b:19:
         de:7b:d0:09:a7:93:a3:78:57:87:7b:10:f7:fb:6f:bd:a3:0d:
         41:e5:cd:55:46:e6:8c:d7:6e:f3:bb:d7:cc:a3:cb:41:88:65:
         08:6b:d3:34:c3:09:05:a7:2e:89:66:0a:63:c0:42:de:4e:06:
         0a:4d:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:34:57 2026 by rpki-client