Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          lMSKgBpTUk1LUttHJkUwoREr6Y5ZVic4QjLuoL4YEVU=
Subject key identifier:   33:5D:76:3B:02:8F:77:90:2E:11:EE:FE:AD:4A:58:C2:AA:E5:3A:65
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4E80F04FF0D4EA270D8165353BCED07405019A57
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:22 +0000
ROA not before:           Wed 03 Apr 2024 23:07:22 +0000
ROA not after:            Wed 02 Apr 2025 23:12:22 +0000
asID:                     52871
IP address blocks:        201.157.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:80:f0:4f:f0:d4:ea:27:0d:81:65:35:3b:ce:d0:74:05:01:9a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:22 2024 GMT
            Not After : Apr  2 23:12:22 2025 GMT
        Subject: CN=335D763B028F77902E11EEFEAD4A58C2AAE53A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:c5:c9:8e:2a:20:66:b7:ac:b2:e1:7d:8a:
                    1c:fd:35:c1:1c:b8:0f:00:e3:ad:20:03:93:73:84:
                    69:02:de:56:57:55:58:ad:57:e0:6b:d9:a2:56:fb:
                    72:8b:43:7c:e1:45:98:31:74:b7:8b:ff:62:15:31:
                    1f:da:f3:c6:a5:69:d4:4c:de:81:b3:82:7d:24:47:
                    c9:c3:bf:79:19:32:17:9c:eb:e8:e0:95:6b:13:c2:
                    d0:c9:8f:4f:6c:fa:8a:05:8d:2e:8b:8a:43:f8:d9:
                    cb:ea:fe:b1:48:76:f3:a4:35:bc:d0:80:fe:ae:c8:
                    2f:51:0d:3b:c1:97:55:86:1e:0c:37:47:92:67:b4:
                    5a:60:43:14:85:d3:cd:ad:7d:62:82:1b:c0:02:cf:
                    84:5b:ac:e7:e3:c0:32:7c:e6:be:ca:a2:05:84:2b:
                    ca:43:7b:01:0b:c5:b4:7b:54:b0:92:19:aa:16:4e:
                    ac:80:99:a1:85:0c:92:c4:32:22:6e:29:36:10:2d:
                    bc:5f:e4:bd:9a:1d:6d:55:79:72:02:c4:d6:fb:bd:
                    54:8c:f5:d3:b1:40:03:96:ea:0d:79:98:98:fa:ea:
                    78:04:6b:53:da:a0:b5:a4:a1:d6:14:49:c7:01:a1:
                    e4:1e:9e:bf:86:36:2f:ed:eb:25:2d:63:8d:62:31:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:76:3B:02:8F:77:90:2E:11:EE:FE:AD:4A:58:C2:AA:E5:3A:65
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:5d:96:64:cd:dc:cb:f9:14:82:71:d9:43:c1:27:8e:20:
         88:ea:98:44:44:e0:a3:0e:e6:5b:36:93:7d:d3:99:cd:f4:76:
         87:cd:a6:af:4e:88:fd:5a:42:e8:44:b9:3a:46:99:08:e8:32:
         72:bc:bf:08:87:e2:f8:d4:15:45:63:a5:16:00:06:20:23:39:
         6a:83:48:54:27:2b:50:79:fe:f5:43:ca:d2:89:53:ea:6d:70:
         07:4c:9a:0f:81:15:58:3e:90:da:b7:b5:3d:79:9a:41:b2:75:
         2f:8e:a0:c5:f1:d3:e0:1a:09:f2:d0:aa:2b:4e:d9:86:02:14:
         f8:21:fe:a4:4c:85:6c:64:03:0f:c1:db:68:db:8f:06:f4:a0:
         80:3f:12:da:7b:e0:d8:ec:d7:71:58:75:27:73:e0:74:96:b0:
         5f:10:5a:e7:1a:d6:8e:45:02:cd:e5:ab:22:d3:10:de:f8:e2:
         37:42:9e:c5:1b:36:16:e0:eb:ce:ec:f1:3e:06:15:ae:02:74:
         0f:c8:b3:5b:8b:5b:72:65:c0:f2:60:de:08:a8:18:60:40:11:
         09:6e:4b:70:02:f0:a2:25:de:ea:fa:1d:a9:cc:af:a1:34:7e:
         ed:4c:b4:36:94:f1:85:21:a6:11:1e:0d:f2:ad:fc:d3:28:e9:
         7a:d4:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org