Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          FzTsYRrSPTdES/s24/Q1GZXcB2z8vIP5sVDlJDOFAh8=
Subject key identifier:   31:48:F1:F8:97:5C:2E:AE:07:79:E8:09:6D:E3:E0:B5:09:EE:6B:96
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4F93E82B0327448B13742C88CB7984E03E72267E
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:24 +0000
ROA not before:           Wed 05 Mar 2025 23:35:24 +0000
ROA not after:            Wed 04 Mar 2026 23:40:24 +0000
asID:                     52871
IP address blocks:        201.157.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:e8:2b:03:27:44:8b:13:74:2c:88:cb:79:84:e0:3e:72:26:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:24 2025 GMT
            Not After : Mar  4 23:40:24 2026 GMT
        Subject: CN=3148F1F8975C2EAE0779E8096DE3E0B509EE6B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:98:c0:5c:61:bb:ab:f7:06:c4:e4:f0:b2:
                    98:31:18:dd:8d:28:45:1d:ab:d4:e6:3d:5a:bc:cd:
                    7e:73:af:6d:ce:80:97:da:72:90:c3:db:ce:2b:56:
                    51:8d:64:e7:2c:0d:af:a1:34:ae:ec:81:c1:fc:39:
                    bc:ff:7f:43:b9:b8:4e:c6:4f:18:da:de:e9:e5:c9:
                    d8:ec:5d:a7:80:15:bc:8b:ba:fe:c7:89:56:11:1b:
                    bc:e1:2f:cb:02:e6:38:fd:05:2c:fe:b4:d1:83:3a:
                    6d:d6:d3:58:a7:d7:eb:ca:b4:f5:a7:67:bf:2b:db:
                    83:14:3c:a0:87:30:b2:68:cc:a3:72:1b:d5:db:c3:
                    0a:56:eb:46:b5:70:f7:db:2a:87:dd:e3:e6:21:76:
                    2f:9f:fa:be:4d:6d:50:bb:4e:1a:5f:a6:ba:99:15:
                    e4:c5:66:63:ba:7d:ac:8b:fb:d7:59:d1:1d:b9:33:
                    68:7d:de:c7:37:5f:f4:58:90:e9:28:4c:61:69:5a:
                    f0:97:ab:d4:7b:48:87:b4:16:af:21:6e:7d:04:3f:
                    ad:c6:d9:60:5d:49:f7:da:f4:32:69:e1:4b:92:be:
                    b8:05:4f:da:16:af:8d:a8:fb:37:2d:a0:65:4a:93:
                    0a:5e:b6:af:82:c5:93:46:69:a8:0e:48:f9:15:93:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:F1:F8:97:5C:2E:AE:07:79:E8:09:6D:E3:E0:B5:09:EE:6B:96
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:08:37:05:b8:0a:c9:bc:3a:4c:98:b2:6a:8d:7d:91:c5:
         7e:ad:23:13:c2:21:e2:b3:eb:63:ab:4a:45:cc:78:6c:a6:5c:
         3d:aa:a5:92:d9:8a:57:a9:37:55:56:51:b1:88:68:ae:de:20:
         f7:4d:3b:78:0d:69:dd:32:79:c8:b1:7d:c4:dc:fd:ce:12:04:
         62:28:7a:4c:cd:77:3f:f1:64:07:92:b0:ab:11:c3:49:ee:ee:
         8d:fe:e7:76:75:52:a5:cd:e4:36:7f:35:bd:cd:2c:cc:9a:4b:
         08:a1:d8:68:5f:de:d9:4d:9c:ba:8a:56:b5:dd:61:3e:31:5d:
         97:9d:e5:63:26:30:42:ec:16:de:be:d4:95:29:f2:9a:95:a0:
         a2:6b:8b:cf:04:ba:f5:63:13:c8:fa:c5:7a:72:1b:8e:ba:f4:
         7e:1f:67:31:fc:5b:06:73:f2:aa:a7:39:52:ea:59:37:04:19:
         2f:ee:11:13:63:ee:a5:ad:2f:db:e0:14:46:95:0f:5c:43:4c:
         b3:9b:fa:82:0e:0d:cb:47:47:fd:e6:b6:f9:cb:a4:f6:52:f5:
         3d:1f:50:ba:c5:9d:e7:b1:fe:b7:d6:3d:ee:a2:95:7e:9c:8b:
         4e:f7:2a:8b:bd:fc:fb:f1:d3:d1:09:4b:38:c9:7f:a0:8e:15:
         d7:54:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:36 2025 by rpki-client