Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          WlQDKrGgTb/N8wIRXj4tJGti9oU/GNkYsDs3brISN9Q=
Subject key identifier:   E3:21:16:DA:31:3C:8A:C3:73:99:51:9D:B3:94:3C:F7:3E:05:CF:0E
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       04F06041434645091D14A2D6B98446F59FE5E248
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     52871
IP address blocks:        201.157.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f0:60:41:43:46:45:09:1d:14:a2:d6:b9:84:46:f5:9f:e5:e2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=E32116DA313C8AC37399519DB3943CF73E05CF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:c4:2d:12:9c:5a:d1:25:a2:ca:a5:5b:ac:
                    c3:64:21:d9:18:62:b9:fd:43:f0:f9:7f:87:74:9d:
                    d4:01:d1:a6:06:22:20:e4:4c:ee:ec:82:85:e3:6f:
                    a0:66:13:7a:58:81:d2:3b:9e:8c:9f:a0:ff:c4:4e:
                    7d:60:b7:37:15:8a:4d:93:c7:70:b6:5e:bc:da:dd:
                    ef:88:fb:24:1c:ac:fc:ac:37:ec:77:a7:08:70:0f:
                    00:fc:46:8e:e5:02:56:37:6b:b6:d3:c2:0c:43:44:
                    41:9d:76:87:40:1a:a9:23:24:c6:c6:45:ea:41:22:
                    6c:b8:ed:c4:f2:6e:47:b0:e6:e6:cf:27:54:df:94:
                    a3:b4:11:76:7a:96:75:f6:d1:75:4f:aa:0a:83:90:
                    63:6e:fe:21:3c:ed:f1:2c:9d:47:77:9c:7e:96:cb:
                    11:4e:83:fb:74:b9:87:d2:45:62:61:b9:e0:f2:80:
                    a2:3c:eb:22:d5:44:8a:fc:58:80:72:88:9d:88:5b:
                    e1:bf:91:95:c3:26:27:f8:aa:c2:55:40:f4:ad:32:
                    ec:e2:26:28:7d:a2:d0:27:3c:68:af:48:e7:b8:ee:
                    49:1b:5e:d0:75:96:c4:e0:50:12:ae:ab:13:ca:61:
                    38:bc:f2:5e:c0:78:37:8f:0f:93:26:ad:53:ff:1c:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:16:DA:31:3C:8A:C3:73:99:51:9D:B3:94:3C:F7:3E:05:CF:0E
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:02:b6:17:93:c1:81:05:22:1d:be:47:a1:88:4f:0c:09:
         90:c4:47:8e:3a:09:38:52:4d:e6:9d:fb:07:86:32:04:fa:ab:
         cd:25:b5:91:6b:c1:0e:f2:b8:38:f0:50:02:be:7e:6f:aa:c2:
         54:e8:df:f1:ef:96:bd:0d:a9:f5:5a:5f:77:e0:aa:0c:cd:db:
         a5:46:33:c9:99:06:f0:c9:94:4b:90:cd:a3:c1:31:ea:05:01:
         fa:58:23:aa:e4:72:3e:a3:4b:00:86:18:d9:0e:cc:43:45:51:
         b3:d9:8a:24:93:d1:25:6e:64:f8:14:6d:f8:db:a3:28:b0:c4:
         f5:c1:e1:f3:98:3b:34:c5:9e:0a:2e:86:5e:41:06:b8:1b:0d:
         89:44:43:9e:d0:29:89:79:eb:98:24:ca:e3:fb:51:61:aa:31:
         93:a4:3a:54:6c:b8:bf:1f:8c:84:8a:c2:4b:d8:64:b5:7b:4b:
         3c:fd:db:37:69:80:25:7b:43:66:54:cf:ed:f5:1e:54:be:6f:
         e2:46:3e:81:39:05:cc:9a:e0:80:3e:81:7c:7c:24:3f:16:cc:
         6e:09:20:c6:7d:01:e3:e5:fe:ed:3c:e3:87:f1:75:27:d5:47:
         2c:d0:27:95:e4:31:cb:7d:c4:3a:0b:af:9b:0b:71:36:c8:98:
         56:30:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:39:24 2025 by rpki-client