Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          UUGJYO0zoAJHeUmB2yjzDTRDln7pXVw9MJkb4qmSMgs=
Subject key identifier:   59:DE:BC:DA:6A:18:CA:02:39:3D:6F:46:FE:57:E8:7F:8F:4F:18:C4
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       5610E49857837A187FC38CF23BF26FEFBF4565A1
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:24 +0000
ROA not before:           Wed 03 Apr 2024 23:07:24 +0000
ROA not after:            Wed 02 Apr 2025 23:12:24 +0000
asID:                     52871
IP address blocks:        201.157.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:e4:98:57:83:7a:18:7f:c3:8c:f2:3b:f2:6f:ef:bf:45:65:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:24 2024 GMT
            Not After : Apr  2 23:12:24 2025 GMT
        Subject: CN=59DEBCDA6A18CA02393D6F46FE57E87F8F4F18C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:68:2c:95:55:d8:40:ae:81:6c:08:b6:c5:
                    c9:ae:39:ab:2a:e3:96:14:5d:bc:dd:2e:a9:cd:dd:
                    33:8f:83:60:4c:af:d9:3a:e8:da:4a:e3:72:44:58:
                    90:84:14:71:97:6e:01:6b:55:69:24:54:7b:dd:83:
                    55:d7:5d:95:ea:94:46:7b:52:cb:8f:f3:e1:90:7f:
                    bb:78:90:b6:45:f4:5d:c2:2a:5e:c5:af:bf:57:27:
                    a1:e7:ab:88:ab:40:2b:db:4c:91:46:05:e4:62:c3:
                    f3:b3:df:c9:9f:58:ba:96:ce:86:86:92:91:a4:d7:
                    d4:6f:51:30:64:44:ed:32:d1:c2:a2:02:bc:1a:a2:
                    a8:ab:0e:37:39:ef:0e:f7:a8:66:51:43:6d:92:05:
                    4e:91:74:11:92:89:4f:ee:eb:ba:f9:f5:d9:0c:e8:
                    67:b3:6f:0e:8c:ff:b1:1e:84:9b:ce:ab:42:3f:6e:
                    13:a4:05:7a:e5:03:fb:71:f6:05:4f:7e:25:f1:93:
                    7d:3e:d0:20:19:2d:7f:8f:10:8e:92:51:6c:76:e3:
                    0e:3f:90:fc:66:49:02:e1:57:9b:00:18:22:6c:7f:
                    30:a6:f1:57:87:aa:bd:ff:03:fe:58:5c:21:00:8c:
                    1f:75:8a:9d:31:99:f7:e6:c1:8f:fa:3b:b8:06:b9:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:BC:DA:6A:18:CA:02:39:3D:6F:46:FE:57:E8:7F:8F:4F:18:C4
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:57:eb:1e:f3:f8:ad:40:1e:c3:6a:91:05:38:c3:ea:29:
         d6:4e:aa:ce:87:bf:fe:0c:a8:1c:c9:8c:88:94:2f:1e:35:2a:
         70:c6:80:30:2c:31:78:da:76:6d:00:7c:1b:76:47:59:46:25:
         94:68:ed:79:17:02:c4:f9:9b:a2:f3:81:c6:96:92:53:b1:d8:
         04:4c:e6:1a:b3:e4:05:b5:0e:c1:c1:34:00:f6:40:c1:39:19:
         40:fe:89:62:b8:9f:e9:c2:15:30:d6:7a:f8:3d:7f:12:90:83:
         fa:7b:70:82:ae:dc:55:f6:89:e5:07:ab:e9:90:0d:28:37:b5:
         25:d7:50:e2:aa:0d:3d:3b:28:0c:f6:fd:3a:d1:33:41:94:c9:
         00:4e:df:6c:8f:42:14:80:e2:de:23:d9:dc:36:17:21:77:99:
         87:c6:c0:93:2d:27:4c:1d:b0:3d:e9:25:66:92:20:fd:1c:58:
         68:f4:f7:6a:7f:de:6a:87:2a:48:6d:87:5c:46:8a:ea:a6:f0:
         97:86:71:f3:f9:89:bc:d6:d5:e2:56:e8:a9:93:ef:f1:f0:e4:
         ca:2f:17:24:c2:0c:b4:4c:8a:02:f4:bb:82:b0:56:55:c8:2c:
         a2:1d:2d:3d:c4:36:e2:89:2e:52:4c:96:bd:1f:3a:31:23:2a:
         92:36:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org