Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203238333436.roa
File:                     3230312e3135372e3233312e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          7+SFPCry1JNcuxUe+6BBnm5iR2NPYQ4ia5i1bHsPO6c=
Subject key identifier:   F5:1B:A2:4E:23:38:AF:EF:30:7D:AF:D7:5E:07:AC:AE:56:C4:C4:A7
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       619B0A45F60159AAEDB557B0D353E4A8C357DE06
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203238333436.roa
Signing time:             Thu 05 Jun 2025 13:26:59 +0000
ROA not before:           Thu 05 Jun 2025 13:21:59 +0000
ROA not after:            Thu 04 Jun 2026 13:26:59 +0000
asID:                     28346
IP address blocks:        201.157.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:0a:45:f6:01:59:aa:ed:b5:57:b0:d3:53:e4:a8:c3:57:de:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jun  5 13:21:59 2025 GMT
            Not After : Jun  4 13:26:59 2026 GMT
        Subject: CN=F51BA24E2338AFEF307DAFD75E07ACAE56C4C4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:ea:40:78:4a:ed:74:2d:22:4d:b3:1a:83:
                    9d:a5:56:95:6c:c6:8d:a9:51:89:92:be:53:91:39:
                    50:f2:56:3e:0c:df:53:e8:42:c7:a6:ae:05:cc:3e:
                    8e:f6:6c:46:c1:7a:c4:52:46:42:a6:17:76:d2:09:
                    1c:70:0d:82:2c:93:6f:6d:76:34:85:4a:ee:b9:e3:
                    ec:5d:a1:ac:02:a0:ae:a8:66:51:cc:8a:49:37:13:
                    60:c0:73:e5:31:19:07:53:6f:df:e7:4a:c2:f8:ca:
                    34:0b:1b:22:4b:b4:ea:05:e4:85:0e:a0:06:02:0b:
                    ec:56:91:a9:00:32:49:e1:01:51:10:93:ee:07:d2:
                    a7:2b:63:26:d7:df:a6:e6:6e:14:df:2e:1a:40:dc:
                    88:99:eb:c9:68:15:4c:af:fa:5f:a5:4a:96:12:26:
                    9d:a4:98:0b:c7:c4:4b:76:2d:c1:68:87:5f:c7:2a:
                    4b:46:f6:d7:2a:8c:3d:da:9f:bf:e9:bf:49:05:56:
                    5b:70:37:16:18:d5:59:e1:f8:dd:17:6a:82:26:65:
                    5f:0b:2e:03:97:05:8b:43:c3:67:d6:4f:e1:db:15:
                    12:6b:f8:42:19:4a:b0:b0:1d:d0:b9:08:20:6c:c5:
                    87:d0:b1:1a:98:ca:ee:c2:d3:fc:3f:2d:f1:02:af:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:A2:4E:23:38:AF:EF:30:7D:AF:D7:5E:07:AC:AE:56:C4:C4:A7
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:69:ba:21:89:5e:3a:eb:b6:27:34:29:1a:5f:8f:9e:12:
         dc:3e:19:e8:06:3e:87:aa:1b:61:23:02:48:34:e7:ea:6f:ce:
         1a:29:7a:4c:5b:6d:b8:a3:98:8b:2e:c4:16:46:89:31:fd:f1:
         c4:17:ba:93:f5:0c:06:62:e9:31:b7:1e:59:86:58:65:97:51:
         40:21:87:be:70:7f:26:1c:60:d9:a8:e1:1d:1f:ca:e6:f6:99:
         d1:f8:f0:2e:e1:25:95:92:36:f0:42:a2:55:59:a9:85:4c:7a:
         88:1e:1c:34:07:fa:c0:56:3f:9a:7e:d7:0b:65:1a:67:06:90:
         db:86:46:41:03:f1:d6:77:34:54:08:9c:f6:6f:37:dc:4b:41:
         aa:c3:61:32:8d:d7:bf:4e:ac:95:7e:62:b1:89:99:9f:a4:f4:
         70:33:e0:56:b8:94:e2:d8:8b:54:03:fe:f0:49:97:fc:bb:1b:
         6e:ac:de:52:2a:8b:e5:bd:08:07:44:9a:0b:96:81:6d:05:dc:
         4b:3c:c1:ea:f4:9a:26:2c:3c:74:c0:36:96:a8:03:cc:5c:c8:
         f6:50:e7:80:90:6b:4e:86:64:ff:f6:f7:de:44:39:a6:59:2d:
         4f:08:55:f8:c6:82:81:ef:52:b7:03:2e:58:e2:83:53:17:cc:
         78:cb:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:27:39 2025 by rpki-client