Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          ZCc2oFVoo4dHXrnem9QK/pF2kr+350nAbJz56CGk7gY=
Subject key identifier:   CB:BA:5F:0D:57:EE:19:88:71:8D:46:31:7E:90:E1:05:D0:14:78:EA
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       03FFA7DA83E1FCD0C5EF7BC4F3B950AA7EC74D3A
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:23 +0000
ROA not before:           Wed 05 Mar 2025 23:35:23 +0000
ROA not after:            Wed 04 Mar 2026 23:40:23 +0000
asID:                     52871
IP address blocks:        201.157.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:a7:da:83:e1:fc:d0:c5:ef:7b:c4:f3:b9:50:aa:7e:c7:4d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:23 2025 GMT
            Not After : Mar  4 23:40:23 2026 GMT
        Subject: CN=CBBA5F0D57EE1988718D46317E90E105D01478EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:b2:df:a4:1a:ea:cb:aa:04:18:47:4b:36:
                    31:4a:5a:52:b4:5d:06:73:87:ca:ee:9a:81:70:35:
                    b9:e1:5d:f4:82:49:41:f4:2d:9b:99:6f:73:2d:01:
                    16:24:f6:28:53:20:76:30:b8:70:da:36:48:0d:49:
                    b3:88:89:17:90:87:bd:8f:3c:b5:d6:a2:06:80:b1:
                    fb:a1:7c:b8:d2:6d:76:4c:2d:3d:4d:c3:55:37:15:
                    d7:0c:df:5c:82:d6:e5:ad:9d:98:f3:2b:35:cc:61:
                    c5:a1:c5:ba:ce:04:cf:8e:e0:b9:c2:bf:2c:7a:a0:
                    30:00:0a:77:8c:37:a1:02:d4:1b:e3:b0:ef:7e:fc:
                    03:06:c3:6f:b9:86:33:54:ca:7f:ec:9e:8c:19:b0:
                    73:4e:36:80:bb:6e:5e:14:db:57:14:0c:dd:2e:b0:
                    f2:54:c2:e7:20:ae:54:1c:a9:fa:8a:9b:2f:b2:34:
                    23:25:77:c3:b9:f2:3a:ed:11:90:92:42:e8:18:c1:
                    00:13:1c:d6:42:35:d4:89:85:69:29:a6:1d:a1:c1:
                    d0:18:b3:e1:a5:55:b5:3d:4b:ff:f2:76:51:ad:09:
                    b5:f2:de:3b:98:39:7b:63:56:7a:89:d7:7e:3b:60:
                    42:18:4e:58:6d:2f:cb:5b:e2:c6:4d:9a:9e:82:3a:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:5F:0D:57:EE:19:88:71:8D:46:31:7E:90:E1:05:D0:14:78:EA
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:54:2b:c1:e2:b5:f2:87:33:8a:86:5f:bd:7e:b3:e6:be:
         4d:14:3e:d9:43:a9:61:af:b5:5d:21:60:fc:9d:a1:19:60:65:
         6f:ab:3e:12:8c:2b:ed:4b:f0:c1:52:61:9d:cb:6b:16:02:51:
         20:11:da:fa:cd:4f:40:68:e9:2a:e1:e5:32:80:6b:3d:24:9e:
         97:1e:df:fa:78:e1:40:25:c6:30:11:2c:9f:e2:22:8e:1a:9b:
         5e:ec:fc:1f:2f:ae:62:e7:d9:bd:2d:2c:82:ca:6c:e4:ed:be:
         f5:ab:2b:fb:4c:20:6f:af:04:98:9f:db:b3:b9:6c:9b:21:82:
         25:d7:6c:ea:3b:b4:08:b8:81:50:58:ee:3a:9f:eb:ac:2f:9f:
         19:6c:ac:77:06:25:b8:e6:49:e6:33:7a:e5:78:5d:a0:9a:0f:
         51:32:a0:1a:4c:40:00:88:8d:28:2b:08:64:1c:34:fa:a7:b4:
         aa:3e:75:d7:3d:1e:05:94:13:00:03:aa:36:c5:18:de:2b:47:
         d1:44:55:c6:04:3d:e5:20:10:75:6b:ad:ed:28:f4:cc:73:0e:
         88:df:f7:66:54:fd:df:46:4d:c1:3e:4a:6c:38:2f:7a:72:98:
         f2:98:d0:aa:f0:84:09:e3:3f:41:2a:0c:ff:db:7e:ab:d6:6b:
         1f:85:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:39:22 2025 by rpki-client