Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
File:                     3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa (raw, json)
Hash identifier:          uoCuZLKkGJo6ActintA5g/wWri7QQ+z0lSnlKklserA=
Subject key identifier:   6A:DA:18:F2:DB:4E:E2:32:E6:15:35:AA:52:BE:CF:88:E7:6D:1E:4E
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       415975A7AA1A173259A8CABFFCAFF06125102575
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
Signing time:             Wed 23 Oct 2024 13:07:01 +0000
ROA not before:           Wed 23 Oct 2024 13:02:01 +0000
ROA not after:            Wed 22 Oct 2025 13:07:01 +0000
asID:                     52871
IP address blocks:        201.157.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:59:75:a7:aa:1a:17:32:59:a8:ca:bf:fc:af:f0:61:25:10:25:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Oct 23 13:02:01 2024 GMT
            Not After : Oct 22 13:07:01 2025 GMT
        Subject: CN=6ADA18F2DB4EE232E61535AA52BECF88E76D1E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:7e:2d:d5:3a:a4:5a:02:0d:a7:86:6f:10:
                    a0:e7:38:a3:76:54:37:94:6c:ae:10:6a:38:6b:4f:
                    e7:9a:f2:ff:cd:b6:4d:52:3e:07:ad:73:11:77:a7:
                    da:9e:e5:51:95:99:64:36:55:bd:42:b5:b5:68:ec:
                    df:83:42:d4:d1:43:31:1e:fb:46:f5:18:54:78:22:
                    d8:64:b4:53:72:90:bb:36:60:7b:6a:f5:d8:5e:9e:
                    eb:70:29:c4:88:d9:f8:06:32:c1:eb:ca:65:07:49:
                    33:ce:b5:1f:16:ce:55:ce:77:b5:37:59:9a:cd:c0:
                    a8:8f:8b:02:78:41:32:d3:5c:3d:e8:c1:ff:eb:ff:
                    8a:94:6d:09:f5:88:82:47:e2:cb:16:82:af:d9:c2:
                    60:68:92:2a:1c:07:80:77:7c:df:6b:1f:69:f6:b1:
                    1f:48:f3:fb:5d:b8:dd:cd:96:78:40:25:b7:ae:f9:
                    bf:e9:4c:57:46:53:53:70:da:0f:1d:de:ed:ca:d4:
                    6b:2b:3e:d2:30:ff:bb:94:2a:16:1a:ac:23:9a:ee:
                    15:76:a6:11:a2:ff:25:84:6a:f8:f7:96:22:82:6e:
                    d8:fe:e0:a3:25:03:87:77:ae:d3:97:06:25:77:d6:
                    3d:20:a1:82:f0:50:1a:0d:fe:72:c9:3f:c0:b4:10:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:18:F2:DB:4E:E2:32:E6:15:35:AA:52:BE:CF:88:E7:6D:1E:4E
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:1f:82:80:99:e8:98:49:38:24:c3:2a:b5:d4:64:99:23:
         db:eb:76:a4:a4:3d:9b:dc:bb:85:98:06:a5:0f:4f:44:c1:2a:
         32:eb:de:b0:6c:a2:a4:13:ff:7f:ed:02:c0:7e:14:12:6a:51:
         ad:ef:aa:64:2a:f6:1b:b1:fe:81:1e:ee:fe:f3:49:cb:3e:10:
         b4:55:19:f4:08:cb:b9:73:18:0f:35:a4:dd:58:8f:5f:5c:01:
         85:7f:da:78:0d:9b:ba:bd:f9:d8:bf:ea:d2:dd:11:db:f8:d3:
         3d:ca:5e:65:31:1b:ee:cb:22:b2:d6:da:8c:1c:91:58:d8:ed:
         d1:e8:6a:20:05:82:0b:cc:39:ad:6f:68:98:11:61:3e:44:13:
         5e:1b:6f:df:bc:9d:07:43:21:d7:b4:f8:3d:83:99:7d:a8:f2:
         89:d7:46:eb:95:40:02:ef:db:82:c6:da:48:11:8e:b0:de:55:
         c8:d4:bf:1f:8f:0f:45:79:97:93:da:a4:cd:6f:f9:df:1c:0d:
         5b:ad:c3:f0:66:fe:0e:5b:ff:82:45:f1:7a:ea:a1:04:fe:e2:
         3c:5c:5e:43:96:60:d3:02:0e:10:8b:0c:82:d9:f9:f1:ee:54:
         e1:fd:28:22:9b:1d:7e:1b:81:bb:50:66:09:9f:bd:53:50:c8:
         8a:a0:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org