Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
File:                     3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier:          uvBBkECI1VbgaEFuxzJUet9n/o4VKpIM5/Vn2mo0uoo=
Subject key identifier:   12:1D:1B:43:CA:71:DE:14:95:F5:3E:66:04:E1:0B:B9:97:85:DD:C2
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       57ECE3EFE2AAFC9B43F11FBE203EC6B772D4B86F
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        201.157.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ec:e3:ef:e2:aa:fc:9b:43:f1:1f:be:20:3e:c6:b7:72:d4:b8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=121D1B43CA71DE1495F53E6604E10BB99785DDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:e1:78:21:0a:f1:45:dc:f6:6e:0e:22:9b:
                    a5:ca:1a:e3:39:4a:3d:63:68:6e:62:a8:db:e3:ed:
                    96:e4:47:7c:68:f0:84:da:32:74:ed:56:d9:19:58:
                    36:6b:64:76:76:a0:33:9d:2d:17:b2:0e:5c:15:58:
                    3f:01:84:3d:c9:82:79:a9:52:24:3a:b5:a8:c3:81:
                    e1:d8:b2:49:f0:2d:dc:e2:ae:90:26:d1:73:fd:af:
                    e2:f8:93:54:f5:b3:ca:ee:67:b7:47:1c:37:bd:30:
                    b1:d8:93:e5:b8:b9:78:8f:7c:ea:27:11:f0:6e:8a:
                    71:b5:e8:5f:2a:0d:77:6f:79:38:f9:1e:4a:4b:84:
                    39:c0:12:94:82:f3:15:d4:40:54:2a:94:2d:2d:f4:
                    3e:34:b4:24:c1:d5:1a:7d:a8:d6:05:35:42:15:54:
                    25:a0:c9:53:51:41:1c:b9:8b:4e:70:d5:22:24:bd:
                    75:e5:f4:41:04:f2:2a:22:f2:b8:40:06:9c:38:8c:
                    89:30:c8:1c:60:a6:42:0d:23:b2:c0:91:08:16:f5:
                    5b:86:bf:a1:ac:76:b2:66:5e:d2:84:c9:7e:bc:63:
                    7f:f8:03:60:66:c7:88:90:e1:d6:90:e4:48:44:b6:
                    fb:5e:bf:8b:16:34:44:f6:87:d6:1a:bd:42:b6:73:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:1B:43:CA:71:DE:14:95:F5:3E:66:04:E1:0B:B9:97:85:DD:C2
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:26:10:1d:21:04:9e:2a:6e:51:50:67:40:60:35:93:c6:
         a2:41:50:7f:9e:cc:82:2a:f7:df:8a:d1:74:06:de:b1:6f:a4:
         e7:81:d6:81:e9:61:87:ee:36:c3:df:e1:91:c6:e3:11:83:cf:
         ef:fe:44:8d:34:b5:3d:6e:26:6b:a0:99:48:0c:02:6d:95:8e:
         92:79:ae:bf:4b:f1:82:e5:af:2f:40:6d:4e:97:63:d1:c5:dc:
         cd:6c:33:91:4b:49:cb:5d:a5:04:c8:c4:23:89:64:54:ed:dc:
         d9:d9:ab:f9:49:cc:1e:80:9c:1c:e9:fc:e6:7c:a1:11:f4:5b:
         5b:10:76:40:71:56:7a:d8:de:83:02:4d:8f:65:cc:6d:88:47:
         3d:ec:79:cc:d6:a5:7a:c5:16:60:fa:e1:f0:b1:55:cc:60:0b:
         c0:34:8f:97:2b:32:97:27:4d:15:8f:cd:d4:b3:30:b5:2a:b7:
         a6:05:7f:e9:69:76:53:7f:fe:66:70:7a:99:06:7d:3c:ae:54:
         d3:e9:60:b0:c2:53:e1:49:5f:9d:2b:97:38:62:f6:79:cf:1e:
         3b:2a:5b:4a:1b:df:4e:07:24:1b:f8:09:cb:b0:5d:83:5c:16:
         fa:e6:7b:db:ec:a8:0f:45:89:94:f1:ce:4f:d7:ea:23:49:19:
         94:ef:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org