Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233352e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233352e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Bm+ZuMZGQM2KvlPNU4xD9HRr9gKOvd/GFoQXK34bkhQ=
Subject key identifier:   A5:E7:DE:CF:C8:54:04:BD:10:DB:AC:5D:F2:DC:61:03:66:65:FB:A4
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       226F5CFF9D183254E2D91B6C2514146CD6262C65
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233352e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        201.157.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:5c:ff:9d:18:32:54:e2:d9:1b:6c:25:14:14:6c:d6:26:2c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=A5E7DECFC85404BD10DBAC5DF2DC61036665FBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:a0:31:1b:7e:e3:83:02:18:49:7e:73:35:
                    1a:32:d6:78:c1:99:a6:0d:0b:0e:67:a8:ff:ac:af:
                    b0:f5:34:c7:34:8c:95:9d:f9:46:aa:62:a6:31:4c:
                    32:4e:ab:a3:1f:35:43:34:e6:b5:97:e5:e4:39:86:
                    f8:a7:9a:77:e2:ed:03:71:47:48:66:0b:92:bd:7e:
                    a2:d5:7c:78:67:b0:5f:59:90:3e:77:c9:3a:4d:5e:
                    55:86:ed:cc:87:f6:0d:f2:26:8d:79:10:d8:e8:9f:
                    0d:da:b3:e4:d9:92:fb:e9:1d:69:fe:3c:71:93:d0:
                    3a:ea:f8:24:05:df:06:f6:70:f4:8c:b5:f2:aa:84:
                    19:1d:39:fc:e4:6e:6a:51:df:94:3d:f9:40:f8:31:
                    73:3b:d9:c7:9e:40:cc:e7:16:3a:cf:c7:a4:7d:62:
                    cc:2d:e7:10:ad:1f:0a:49:77:dd:4d:d6:a6:d7:ff:
                    45:09:69:18:33:b4:6c:4e:4d:db:dd:e9:d7:87:33:
                    5b:e9:6d:e7:80:a8:28:c2:84:2a:23:3a:e8:de:b3:
                    23:ab:32:1d:8b:b8:22:fe:39:fb:af:60:ae:6b:60:
                    d8:3b:69:0b:d1:71:f8:55:8d:cc:d9:65:80:38:96:
                    5d:0f:07:8b:78:20:bf:b9:82:1d:7c:d3:64:c7:e3:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E7:DE:CF:C8:54:04:BD:10:DB:AC:5D:F2:DC:61:03:66:65:FB:A4
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233352e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:be:85:c0:d9:ca:40:62:ff:85:80:a4:db:25:c4:a2:09:
         5d:80:3f:e4:d5:a7:b8:6d:86:b4:e0:a7:33:21:4d:58:8f:19:
         b2:08:37:9f:6d:ef:77:cd:58:c8:82:e0:c3:2f:8f:ac:2b:54:
         a0:36:70:ba:ef:9c:f5:42:c8:40:a4:37:ef:68:6a:b3:b6:b0:
         26:fe:d6:a3:5c:f9:bb:74:15:f6:14:be:49:6e:08:41:56:3d:
         43:75:df:c8:c1:c9:2d:76:18:38:58:fb:fd:60:25:74:f4:e3:
         66:04:07:e0:bd:be:fb:9d:0e:86:1b:bf:f2:05:5c:61:f8:b7:
         29:80:30:90:a2:9d:7f:db:3c:38:07:54:7e:ff:7d:4c:49:4e:
         7d:9f:40:f2:b3:6c:ca:a0:f3:8d:bd:f5:6e:54:df:b2:ed:e9:
         d6:53:86:ae:48:0a:45:97:e9:ff:ea:5c:35:d3:8f:ba:02:07:
         f9:3e:af:56:77:df:6d:84:a3:23:34:38:40:7f:90:35:8a:2d:
         4a:68:57:f2:8a:77:6f:45:79:1a:25:5e:bd:63:4a:2f:c6:67:
         63:dd:56:c9:2b:09:15:7e:d7:0f:89:34:2d:c9:d5:43:b3:5f:
         90:93:2b:17:ee:0b:7c:dc:57:43:a8:94:30:fd:b6:2a:25:3a:
         9b:7a:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:54 2024 by rpki-client on console-fra.rpki-client.org