Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          QmNF8EOjsRpcO+Rx14pV89/qkOE2/aKsEjwP0TucUV0=
Subject key identifier:   94:26:4C:17:EF:CA:42:94:FC:C1:16:40:F9:D0:32:27:AC:7C:43:E0
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       696146331D67DCF39396974F66DB6417124BE0E8
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Jul 2024 12:49:56 +0000
ROA not before:           Wed 03 Jul 2024 12:44:56 +0000
ROA not after:            Wed 02 Jul 2025 12:49:56 +0000
asID:                     52871
IP address blocks:        201.157.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:46:33:1d:67:dc:f3:93:96:97:4f:66:db:64:17:12:4b:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jul  3 12:44:56 2024 GMT
            Not After : Jul  2 12:49:56 2025 GMT
        Subject: CN=94264C17EFCA4294FCC11640F9D03227AC7C43E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:db:ff:59:9d:9d:11:d7:77:ab:d9:6c:36:
                    bc:9c:af:f3:43:cb:84:0e:69:66:f9:40:a4:7b:65:
                    17:a8:43:c0:09:67:51:d9:eb:65:f9:50:00:44:26:
                    8b:3a:c7:f1:9e:5a:e3:ba:e3:9d:06:c1:5c:b8:a4:
                    31:ed:f0:f3:9a:0a:71:9a:cb:04:ff:c6:6f:81:78:
                    7c:d4:4e:5a:d8:58:1d:25:1b:2a:76:fa:13:10:6b:
                    7d:eb:ac:f6:1e:65:5e:25:c6:be:ab:b4:1f:bc:b7:
                    dc:e8:84:0d:eb:a9:ef:89:5b:e6:42:70:0a:15:48:
                    a8:ef:93:db:53:1b:9b:53:4b:65:34:12:79:d9:81:
                    d7:38:97:49:ba:7a:60:fe:45:5a:64:dc:b1:27:87:
                    3a:ae:30:41:fe:7f:da:a6:87:ce:68:6f:97:97:27:
                    0b:d6:c2:44:d2:22:77:b3:0e:f9:a3:07:14:17:59:
                    5e:01:a6:21:cd:73:44:9f:47:0d:e1:43:ed:b4:65:
                    ed:de:98:df:24:2f:0e:58:f3:08:14:3c:1b:b2:96:
                    07:57:46:17:6d:bc:f5:36:8f:ad:40:42:8e:6e:09:
                    ee:59:3b:01:dd:51:e0:d5:79:93:14:f5:4f:4f:e6:
                    19:f9:3f:15:78:6e:3b:28:1d:01:f4:38:c4:2d:38:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:4C:17:EF:CA:42:94:FC:C1:16:40:F9:D0:32:27:AC:7C:43:E0
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:3c:76:16:f2:b8:da:9f:47:b0:9d:03:8c:3c:fb:d5:d2:
         cc:64:ed:70:10:b2:e3:c5:d8:31:04:5a:9b:61:e1:6e:1c:5a:
         f5:16:5b:9e:86:b9:6e:4e:53:9c:cc:30:90:e4:cf:0e:6a:77:
         df:61:3d:1e:0e:6e:fc:69:4a:b0:64:f1:3e:71:5f:2a:bd:c4:
         cb:50:88:e3:38:e3:0e:27:72:be:1f:40:ef:6a:0b:d1:f7:d3:
         e8:85:91:99:c7:a8:fb:d4:1f:be:57:a7:98:b6:94:7d:da:ef:
         01:c2:63:82:63:06:be:e8:b5:0f:1b:16:b7:f5:a1:2d:f4:b4:
         d7:cb:95:34:b9:0f:bb:52:ee:a1:9d:1c:ab:8b:bd:2d:7e:50:
         c0:98:db:76:67:9a:0f:ec:eb:84:0c:a6:fe:af:0c:83:79:6f:
         84:f9:0a:ff:21:14:9c:1e:a7:96:0f:74:d1:07:28:7c:d9:cc:
         c9:45:5e:d5:db:5b:57:3a:34:76:9b:3f:a0:8e:46:73:b9:54:
         b5:ab:06:6d:8f:74:36:1c:71:ea:06:aa:be:a3:b4:2c:84:6e:
         f4:2b:6a:46:20:7a:f3:00:f0:82:22:07:fc:c3:b2:87:43:10:
         72:2a:3a:73:9d:9c:9c:70:17:99:38:c5:ed:45:27:75:92:e1:
         98:5f:ee:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaWFGMx1n3POTlpdPZttkFxJL4OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA3MDMxMjQ0NTZaFw0yNTA3MDIxMjQ5NTZaMDMxMTAvBgNV
BAMTKDk0MjY0QzE3RUZDQTQyOTRGQ0MxMTY0MEY5RDAzMjI3QUM3QzQzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTp9v/WZ2dEdd3q9lsNrycr/ND
y4QOaWb5QKR7ZReoQ8AJZ1HZ62X5UABEJos6x/GeWuO6450GwVy4pDHt8POaCnGa
ywT/xm+BeHzUTlrYWB0lGyp2+hMQa33rrPYeZV4lxr6rtB+8t9zohA3rqe+JW+ZC
cAoVSKjvk9tTG5tTS2U0EnnZgdc4l0m6emD+RVpk3LEnhzquMEH+f9qmh85ob5eX
JwvWwkTSInezDvmjBxQXWV4BpiHNc0SfRw3hQ+20Ze3emN8kLw5Y8wgUPBuylgdX
RhdtvPU2j61AQo5uCe5ZOwHdUeDVeZMU9U9P5hn5PxV4bjsoHQH0OMQtOOV3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlCZMF+/KQpT8wRZA+dAyJ6x8Q+AwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJndAwDQYJKoZIhvcNAQELBQADggEBAJ6SPHYW
8rjan0ewnQOMPPvV0sxk7XAQsuPF2DEEWpth4W4cWvUWW56GuW5OU5zMMJDkzw5q
d99hPR4ObvxpSrBk8T5xXyq9xMtQiOM44w4ncr4fQO9qC9H30+iFkZnHqPvUH75X
p5i2lH3a7wHCY4JjBr7otQ8bFrf1oS30tNfLlTS5D7tS7qGdHKuLvS1+UMCY23Zn
mg/s64QMpv6vDIN5b4T5Cv8hFJwep5YPdNEHKHzZzMlFXtXbW1c6NHabP6CORnO5
VLWrBm2PdDYcceoGqr6jtCyEbvQrakYgevMA8IIiB/zDsodDEHIqOnOdnJxwF5k4
xe1FJ3WS4Zhf7is=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org