Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          VZlgQkXyTmPOUfJELF1M8/lpwloiOKgMvwYTdwcou6Q=
Subject key identifier:   E1:AD:55:42:73:1C:D0:CC:44:C6:F0:B1:B9:31:0F:16:1C:EB:11:84
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       2E174A08B2ADF0A0D3A56EDDED13226C69C6F944
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:23 +0000
ROA not before:           Wed 03 Apr 2024 23:07:23 +0000
ROA not after:            Wed 02 Apr 2025 23:12:23 +0000
asID:                     52871
IP address blocks:        201.157.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:17:4a:08:b2:ad:f0:a0:d3:a5:6e:dd:ed:13:22:6c:69:c6:f9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:23 2024 GMT
            Not After : Apr  2 23:12:23 2025 GMT
        Subject: CN=E1AD5542731CD0CC44C6F0B1B9310F161CEB1184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:ca:32:b1:b1:14:0b:92:69:8f:85:52:6a:
                    c5:42:66:e0:c6:83:8b:dd:4a:11:93:23:ff:ce:de:
                    1f:32:7d:4e:0f:d4:05:2b:e7:a7:6e:03:69:49:94:
                    a2:1a:9d:28:2b:e2:12:65:f3:ce:72:4e:04:9f:57:
                    7c:96:01:2f:a3:86:b4:b1:c7:a4:ce:14:52:52:7c:
                    8d:54:a2:ef:a6:76:b9:12:51:c1:8f:78:83:42:70:
                    46:0f:7c:cc:cb:85:e6:a3:df:37:9e:03:ca:39:64:
                    9f:49:4c:1d:43:36:f7:31:0b:4e:52:3c:f4:c9:26:
                    90:e0:62:71:04:84:ad:45:37:80:a7:e1:0e:c4:2d:
                    20:16:96:46:b0:b7:e3:ea:ad:24:c7:b3:d4:e7:8f:
                    49:b6:f4:6f:19:93:a5:d0:aa:bb:55:7e:03:a8:49:
                    bc:00:4d:6e:bb:86:29:d5:34:b5:61:36:99:86:d7:
                    ca:14:67:09:ce:ac:e6:66:91:e8:ad:41:3e:d3:cf:
                    d1:ae:d2:e1:02:cf:3d:de:53:f1:70:43:74:79:a1:
                    7c:dd:e5:8b:88:9d:7d:90:91:06:8f:6f:29:d6:3c:
                    08:da:58:2b:4c:b7:3b:55:b5:c9:1f:31:4f:4c:2b:
                    56:77:2d:fb:1b:4b:60:32:9e:4c:66:99:57:e6:7d:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:55:42:73:1C:D0:CC:44:C6:F0:B1:B9:31:0F:16:1C:EB:11:84
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d8:c7:50:80:d2:1b:cb:b9:e9:4a:ce:64:a3:f1:91:c7:33:
         34:9e:a7:56:7c:0f:1b:2d:50:fa:6b:5b:e8:6e:ee:62:6f:c1:
         0b:27:91:79:c4:18:aa:93:f0:87:f0:4b:e6:0d:f1:7e:27:06:
         2d:ca:9a:45:a4:99:ac:b3:44:af:8a:22:da:09:85:aa:4c:c2:
         76:64:a8:82:e6:61:e3:95:d3:ce:f7:26:14:02:ec:59:19:3d:
         f5:74:76:fe:3a:97:a8:53:10:df:e5:16:87:5e:d2:9f:b7:09:
         ac:72:da:6e:33:e7:ef:6f:a2:e6:12:1b:1d:23:b2:7b:00:79:
         7c:eb:c2:d0:8e:70:52:c0:df:03:41:6e:bc:68:a4:3b:fd:2d:
         4b:e4:af:19:e5:55:3b:9c:45:c6:9d:a5:49:35:e4:72:58:e4:
         0e:85:ae:e6:5b:00:9d:7a:cf:95:9f:7c:7c:10:c4:81:b9:01:
         36:5a:b4:ff:55:00:5c:74:13:b6:de:30:5a:46:f9:7e:61:a5:
         29:9f:09:17:54:9f:8d:46:08:7a:46:1b:35:3c:bf:d5:33:b9:
         d6:69:0a:97:6e:7a:f6:16:4a:b3:38:ef:7d:f5:90:fb:98:db:
         c5:82:24:2e:9f:a7:53:1f:29:69:4b:1a:3d:4e:5e:7c:80:ca:
         5d:86:8c:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULhdKCLKt8KDTpW7d7RMibGnG+UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA0MDMyMzA3MjNaFw0yNTA0MDIyMzEyMjNaMDMxMTAvBgNV
BAMTKEUxQUQ1NTQyNzMxQ0QwQ0M0NEM2RjBCMUI5MzEwRjE2MUNFQjExODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPcoysbEUC5Jpj4VSasVCZuDG
g4vdShGTI//O3h8yfU4P1AUr56duA2lJlKIanSgr4hJl885yTgSfV3yWAS+jhrSx
x6TOFFJSfI1Uou+mdrkSUcGPeINCcEYPfMzLheaj3zeeA8o5ZJ9JTB1DNvcxC05S
PPTJJpDgYnEEhK1FN4Cn4Q7ELSAWlkawt+PqrSTHs9Tnj0m29G8Zk6XQqrtVfgOo
SbwATW67hinVNLVhNpmG18oUZwnOrOZmkeitQT7Tz9Gu0uECzz3eU/FwQ3R5oXzd
5YuInX2QkQaPbynWPAjaWCtMtztVtckfMU9MK1Z3LfsbS2AynkxmmVfmfVjzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4a1VQnMc0MxExvCxuTEPFhzrEYQwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJncIwDQYJKoZIhvcNAQELBQADggEBACPYx1CA
0hvLuelKzmSj8ZHHMzSep1Z8DxstUPprW+hu7mJvwQsnkXnEGKqT8IfwS+YN8X4n
Bi3KmkWkmayzRK+KItoJhapMwnZkqILmYeOV0873JhQC7FkZPfV0dv46l6hTEN/l
Fode0p+3Caxy2m4z5+9vouYSGx0jsnsAeXzrwtCOcFLA3wNBbrxopDv9LUvkrxnl
VTucRcadpUk15HJY5A6FruZbAJ16z5WffHwQxIG5ATZatP9VAFx0E7beMFpG+X5h
pSmfCRdUn41GCHpGGzU8v9UzudZpCpduevYWSrM47331kPuY28WCJC6fp1MfKWlL
Gj1OXnyAyl2GjCI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org