Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          wlque6aeaEarqJ4Fi5nS/M49R28gvG/T9oC0h0+E4ko=
Subject key identifier:   9A:46:7A:11:6C:9F:47:FA:91:79:18:DF:10:22:8B:57:56:F9:97:EE
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       5C47A176F92E98FC91674B914464368FBC8222F5
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     52871
IP address blocks:        201.157.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:a1:76:f9:2e:98:fc:91:67:4b:91:44:64:36:8f:bc:82:22:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=9A467A116C9F47FA917918DF10228B5756F997EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:16:e6:da:93:5d:d5:3f:08:66:fa:46:bf:
                    1a:5d:55:6b:d2:16:54:5e:8b:96:eb:17:b8:7e:34:
                    d9:fa:6b:1f:f9:5d:37:cd:7c:55:27:1d:9a:8a:79:
                    ad:be:29:b5:11:8e:c2:fd:5a:da:09:7f:35:b4:22:
                    b0:5e:26:71:44:e4:79:42:86:1e:80:70:ed:c5:e5:
                    90:03:0e:3c:c2:84:83:fb:e2:ba:d3:0e:59:d6:d5:
                    31:c8:15:3e:2d:8c:c5:1e:e4:13:00:e0:5b:50:04:
                    0c:e2:8d:62:2e:c1:7d:42:78:dc:e4:a9:b1:76:5f:
                    b6:db:18:9c:84:37:47:81:45:e2:0a:cc:2c:26:a5:
                    35:94:30:ee:0e:4a:46:78:8b:e0:61:9a:32:75:c4:
                    32:df:90:bc:5a:3b:05:5c:4b:4f:02:ec:1e:45:13:
                    11:10:6c:e1:31:14:91:ba:01:3d:02:24:c9:74:d5:
                    24:14:38:f4:1f:d6:88:d7:34:26:c9:d2:6c:79:2f:
                    c9:15:cb:ab:1d:a9:7a:29:ef:32:c6:ac:f9:9f:94:
                    63:6a:31:3d:96:ef:ef:ad:a7:55:de:8c:c6:36:33:
                    5b:78:01:dc:af:d0:94:d5:72:6b:60:42:f3:94:ec:
                    1a:5e:93:63:2b:b2:3e:1d:83:28:16:d8:8c:3e:16:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:7A:11:6C:9F:47:FA:91:79:18:DF:10:22:8B:57:56:F9:97:EE
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:64:26:a3:cb:11:d7:6c:b4:89:8a:0a:0d:e8:16:bf:53:2d:
         0f:86:0e:20:af:25:bf:5b:61:87:4d:4c:72:3b:af:0a:61:2b:
         c6:be:33:0c:bd:37:41:48:27:72:e3:47:03:06:5a:92:cb:bc:
         1d:b9:eb:53:a4:51:76:3f:dd:09:da:fa:b9:0b:6c:32:c8:bf:
         73:65:b5:cf:aa:63:db:55:66:44:78:84:f8:28:c7:c6:0c:de:
         24:28:8e:46:26:04:40:80:dc:76:bf:c9:e8:d1:98:bf:7e:a6:
         d6:2b:60:f7:e8:aa:1e:af:65:2d:32:b5:43:95:76:bd:93:f0:
         f7:6f:86:eb:91:9e:60:ad:a2:24:b1:84:30:51:5f:9d:20:97:
         fc:a5:21:e3:81:0b:4e:a0:ca:22:fa:1e:f2:4d:63:9c:30:58:
         4b:11:45:bf:02:6b:3c:fb:b9:e0:3d:4a:b1:a2:48:b8:59:2c:
         79:9a:08:c0:75:fc:73:90:cd:40:19:ac:a6:2e:a2:47:14:07:
         2d:5d:5c:09:51:8d:37:ce:20:f3:ab:f7:da:7c:77:ed:d8:40:
         6f:f9:50:ca:ef:21:87:9f:2e:98:47:43:b2:3e:f4:72:f6:72:
         68:1f:2e:de:82:bc:f8:e5:b8:b4:24:ba:b1:bf:2b:60:fe:c7:
         d8:d8:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:14:10 2025 by rpki-client