Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          ln0/iFkSphdU1XQdOJsB5VQwIRGTyOhqB3ZoBBXbuIc=
Subject key identifier:   37:92:CA:F1:CC:DB:98:A8:64:4F:F9:67:6D:0D:6A:90:BC:12:CD:EC
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       554F0AAFD397D32AF61BBF4A361ADC60D8EB68B6
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        201.157.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4f:0a:af:d3:97:d3:2a:f6:1b:bf:4a:36:1a:dc:60:d8:eb:68:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=3792CAF1CCDB98A8644FF9676D0D6A90BC12CDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:3e:0f:ae:fe:eb:4b:82:d9:12:fd:ef:85:
                    ef:6f:31:53:58:8b:9c:77:c1:bf:35:b0:a1:38:7e:
                    21:ad:20:5d:2d:ba:70:d7:05:93:09:84:8c:f7:6d:
                    59:9e:28:a5:5b:9e:e9:c6:7d:ac:0d:98:35:47:6f:
                    5e:2b:46:af:32:c2:9b:cb:e1:e2:4b:67:fc:cf:5f:
                    be:e9:a8:67:60:28:ea:b7:d3:73:b3:bd:d2:7a:b7:
                    05:3e:03:b7:19:49:03:df:c4:11:9b:58:a7:55:52:
                    8d:96:9b:eb:94:d6:0c:99:fc:5d:06:be:4c:6f:6a:
                    6d:c1:a1:80:fd:5d:8e:3f:ac:72:ff:54:cd:6a:69:
                    37:f9:51:a4:ac:19:85:71:1d:a2:e1:45:87:fe:a6:
                    61:e5:c6:3b:45:21:13:53:fb:40:a3:8a:7d:83:62:
                    a7:77:5b:a4:dd:67:a5:bf:4f:48:f5:8d:5f:49:af:
                    24:0a:49:0b:17:ff:9b:88:20:a1:57:ac:9d:3f:7e:
                    e1:69:e6:43:33:ff:7d:96:15:47:c1:46:fa:d4:c1:
                    62:4c:dd:89:8a:ab:11:46:5f:78:6f:65:5b:77:f5:
                    1c:7a:95:cd:60:b5:a4:92:2b:a0:fd:9f:ce:a9:c7:
                    39:d4:e2:d3:0d:e9:4c:ef:f4:3d:91:58:a6:a0:d8:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:CA:F1:CC:DB:98:A8:64:4F:F9:67:6D:0D:6A:90:BC:12:CD:EC
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:00:91:e1:ce:e8:fb:67:96:1e:b3:c1:8a:49:3d:84:97:
         95:4f:c5:80:85:25:d5:ec:60:8d:f2:c7:28:ae:7e:29:90:e6:
         59:ab:05:49:38:e9:78:f7:15:2c:eb:22:d7:74:da:75:05:2f:
         a7:b7:e4:51:b3:20:42:89:fa:03:14:cc:ca:79:62:13:3a:05:
         ec:2d:c8:e1:ef:aa:f4:6c:14:53:f6:83:63:b5:fc:b5:e0:e7:
         19:96:38:01:fd:97:71:4c:52:87:f0:e6:6d:97:8d:21:a4:82:
         d9:bd:81:15:73:16:c2:41:43:21:9c:2d:9b:47:53:f4:69:7f:
         be:23:cc:e6:aa:27:5e:77:4e:e0:35:4f:fe:84:6e:8c:3c:6f:
         1b:ca:1d:4c:dc:ae:2b:3c:3b:da:f7:0f:c6:3a:6e:28:cd:b2:
         a4:ff:82:e6:8c:0c:a6:16:3e:56:0f:ae:ea:d4:54:50:1e:50:
         a5:06:b4:d4:b6:bf:34:f9:47:0a:eb:91:66:29:8f:b1:7a:41:
         95:9b:7c:c7:cd:ec:59:1b:7b:3f:a8:8b:c7:c6:5b:31:8a:2d:
         18:ee:38:0a:d5:23:54:a1:7c:a5:51:1f:06:f2:23:16:f3:e3:
         b4:0b:1b:86:36:da:b9:4e:f3:11:1c:9b:2f:63:2d:73:a8:c2:
         b0:51:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org