Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Opypgsuz+Na80w1t6lv5lr6+UZWYiFiq4MJF1TqNl1c=
Subject key identifier:   1A:45:36:7E:82:4E:45:FC:9A:B7:B7:54:C5:FD:83:7D:CE:5A:15:DC
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       688FF4F0D74279D710060E799DB95271307F3605
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 23 Oct 2024 13:07:12 +0000
ROA not before:           Wed 23 Oct 2024 13:02:12 +0000
ROA not after:            Wed 22 Oct 2025 13:07:12 +0000
asID:                     52871
IP address blocks:        201.157.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8f:f4:f0:d7:42:79:d7:10:06:0e:79:9d:b9:52:71:30:7f:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Oct 23 13:02:12 2024 GMT
            Not After : Oct 22 13:07:12 2025 GMT
        Subject: CN=1A45367E824E45FC9AB7B754C5FD837DCE5A15DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:04:bd:94:27:91:93:7e:45:e9:c0:32:bc:
                    eb:98:8d:c4:e4:78:dc:17:84:ac:22:51:df:29:be:
                    e7:c1:44:d9:1c:21:34:68:4a:64:63:13:4c:ba:d9:
                    70:eb:60:b4:f2:6c:0e:40:32:0a:21:02:19:b6:b2:
                    df:4b:7f:45:dd:14:b7:f0:e7:10:d8:ef:66:cb:21:
                    05:39:53:f0:e4:02:6f:3e:11:6a:91:1c:00:22:8e:
                    c7:79:a0:4c:b0:e3:cb:a9:8f:81:c3:43:ba:33:c5:
                    68:ea:b6:92:85:8f:d0:c2:a1:41:a2:2f:77:6a:10:
                    28:1f:20:79:fc:08:b3:8c:4e:0a:40:9e:c8:e1:c2:
                    7f:07:c1:21:70:6e:61:5f:a7:0d:75:24:3d:5b:ae:
                    29:3f:93:d8:19:a3:6c:b3:40:43:76:80:5d:c6:ee:
                    80:01:45:ac:38:88:3b:63:e7:bc:58:ed:a5:5b:34:
                    84:4b:2a:1a:19:6b:36:e5:43:38:9e:dc:30:03:ce:
                    c7:b8:bf:d6:dc:06:3b:26:41:ab:6d:04:a7:9a:90:
                    1e:25:f5:0a:32:d2:b9:28:94:61:09:01:00:0a:b6:
                    49:ab:cf:ba:28:c6:88:91:a4:44:3c:df:84:5f:b6:
                    ef:32:53:ac:98:95:bc:64:e7:4a:00:79:10:e5:f0:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:36:7E:82:4E:45:FC:9A:B7:B7:54:C5:FD:83:7D:CE:5A:15:DC
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:89:7f:f7:c4:e4:90:ce:d3:75:15:82:3f:af:f0:e3:a7:
         53:f8:ca:32:c3:ec:5a:19:15:37:7b:e1:c3:18:c3:23:68:ea:
         e3:db:22:ec:21:a6:18:27:5b:af:52:fd:47:02:56:8e:0b:6e:
         eb:92:0f:b6:70:02:7e:64:40:0f:88:a2:37:fd:cd:1e:6c:ce:
         cf:8f:0a:ed:53:67:ab:da:34:a7:ab:35:5e:b7:46:7a:a9:7e:
         55:65:6b:ff:64:7d:37:33:fd:72:6f:86:d9:9c:25:c2:66:61:
         92:48:24:c4:14:ca:c6:33:c9:42:a5:6d:2f:38:50:b4:d0:24:
         f6:f7:fb:a6:67:08:5c:56:ab:fd:64:e7:97:38:ab:3d:2c:f8:
         df:6c:2a:0a:4f:1b:69:9e:f7:15:44:65:0f:6c:f1:63:b0:7f:
         b2:17:f0:18:0f:ef:14:a6:1a:50:71:8d:0b:c7:4d:9c:04:21:
         78:89:97:71:6d:52:66:61:3c:e9:bb:25:c4:c1:2a:4c:44:f1:
         d2:85:fd:22:7d:d8:b8:c4:64:20:07:c8:bf:cf:3c:be:5f:75:
         00:bc:bd:c0:59:77:57:f6:7b:26:ac:cf:e3:8b:0b:95:f9:cb:
         c8:2e:f8:11:03:da:48:e6:58:c4:0d:b3:31:1f:18:e5:07:c0:
         d6:9a:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org