Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          UBTeAESuWOQbuaTDhh/8Wf2+s0qc7awtj7mvsE6TA+0=
Subject key identifier:   8B:8B:91:48:1C:F0:2C:8E:B9:BA:FA:36:D9:9B:F3:D3:68:8D:A7:39
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       064DCB637C99B63D80B9BB692C55304099193F17
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        201.157.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4d:cb:63:7c:99:b6:3d:80:b9:bb:69:2c:55:30:40:99:19:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=8B8B91481CF02C8EB9BAFA36D99BF3D3688DA739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:da:ee:74:23:51:3c:23:8b:ed:c0:5f:14:
                    0c:1a:bc:d9:83:d3:81:64:3b:ad:70:f7:8e:88:0b:
                    42:b1:72:e4:57:6d:e1:01:1c:cd:7c:a7:5d:b1:e8:
                    0c:59:76:f9:b9:3e:6d:33:9a:76:41:b2:53:0d:24:
                    7b:12:df:bd:4b:25:0d:35:ea:54:22:c6:da:50:e4:
                    3d:c3:a6:71:55:a4:7c:2b:38:f2:ec:bd:a4:6d:47:
                    48:c9:b8:b6:4a:1d:30:41:6a:b9:55:21:53:86:d0:
                    cf:b9:66:fc:2e:89:59:b4:2f:a4:1a:95:db:08:05:
                    05:ad:84:ea:f6:f0:7c:09:c4:77:fb:e7:33:b1:34:
                    73:e8:bd:63:56:5e:e2:b6:45:08:26:1c:ee:95:b4:
                    79:fc:c2:66:b1:0e:71:25:62:39:3f:ea:83:fb:26:
                    5f:1d:05:f9:0a:77:e5:83:b0:ab:b7:0d:2e:62:07:
                    d2:bd:a6:f6:1f:8d:b4:20:fa:13:e0:e6:d9:ea:e6:
                    16:fc:c9:b0:97:53:19:bd:1c:e6:8b:c7:5f:53:03:
                    b4:20:97:6d:26:d9:f5:e9:d5:7c:ff:3d:34:ee:69:
                    78:9e:76:a3:ee:62:4e:d8:89:9f:26:fc:1e:e0:cd:
                    51:17:61:c0:9d:66:03:b7:eb:ae:e5:69:42:7c:28:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8B:91:48:1C:F0:2C:8E:B9:BA:FA:36:D9:9B:F3:D3:68:8D:A7:39
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:07:14:76:a6:98:7c:88:7e:81:1e:71:af:ae:83:a9:64:
         d8:6c:99:83:16:fd:1e:45:b9:d2:ff:5b:c2:d4:d6:24:a6:c7:
         db:55:95:f8:d7:5d:a9:ff:08:41:dd:82:41:a0:cf:bc:09:aa:
         77:b5:84:2f:8a:47:46:25:93:d2:c4:94:83:b3:b3:1e:c0:a2:
         3c:65:90:a3:03:04:07:a1:95:a4:9b:f7:e9:e7:34:3e:16:53:
         ca:e8:fd:55:6b:3b:70:15:40:fb:d5:cc:a6:74:7a:e7:5d:29:
         bb:c5:c8:9f:a9:39:b8:f6:95:76:9c:6d:6c:a3:36:00:9e:0a:
         22:21:be:a3:43:d9:24:fd:ba:ae:ba:86:e8:02:71:93:dc:7c:
         ce:67:75:20:5b:fe:e4:3a:f0:f1:ab:91:fa:81:d1:fe:c0:c6:
         ac:9f:ca:fa:7e:42:63:8b:84:53:1a:80:d4:0f:fe:85:ed:c1:
         b2:21:f1:15:27:83:10:ac:82:f6:c8:6e:60:4d:62:02:dd:9f:
         16:f4:ce:64:bf:1f:10:27:73:1f:14:ef:ab:7c:e2:fe:69:a3:
         fa:18:5d:24:2d:ef:ee:0a:25:1a:05:2a:69:7d:f0:b4:71:08:
         22:c6:f4:f1:08:41:ad:4c:e0:65:b2:c9:19:56:80:f1:62:60:
         b0:31:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org