Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          ZCFIudSFIkih9GR0BomkQeyrKvK+l3xv3gAX6hTNW8o=
Subject key identifier:   C6:0B:A1:44:41:FE:EE:93:D7:18:F1:36:37:42:87:60:C7:26:08:18
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       65FBC40F5D18F2801EB25195E7A179FE93B60A30
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Jul 2024 12:41:49 +0000
ROA not before:           Wed 03 Jul 2024 12:36:49 +0000
ROA not after:            Wed 02 Jul 2025 12:41:49 +0000
asID:                     52871
IP address blocks:        201.157.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:c4:0f:5d:18:f2:80:1e:b2:51:95:e7:a1:79:fe:93:b6:0a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jul  3 12:36:49 2024 GMT
            Not After : Jul  2 12:41:49 2025 GMT
        Subject: CN=C60BA14441FEEE93D718F13637428760C7260818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:d2:f9:08:9b:06:45:99:9a:62:bd:ee:11:
                    ac:7f:f5:35:41:bf:15:ce:34:85:47:98:9e:bc:ee:
                    37:5c:50:c4:43:72:4b:0a:19:65:ec:9e:74:53:5a:
                    17:2c:c0:ce:79:a2:a2:d9:99:f1:1c:fc:0a:f9:05:
                    93:35:d4:9e:08:12:ea:ec:79:b9:29:c4:fa:b6:0b:
                    e2:5c:c1:a3:74:78:1f:ea:c2:ea:12:2b:29:89:72:
                    b8:fd:e9:65:75:9f:70:fe:c9:ba:c1:ed:3e:90:ea:
                    2b:fd:ef:3b:4f:cf:96:a1:b6:8e:3c:66:e4:1e:0c:
                    48:32:af:fb:99:d6:bb:60:c3:7c:e3:8d:f8:21:47:
                    9d:83:48:f1:0b:3f:ce:e0:48:4c:ec:1c:e4:b5:2b:
                    54:9b:54:0e:91:07:60:fe:59:51:a4:c6:f4:71:19:
                    de:ca:04:17:bf:31:1d:74:f9:39:12:0c:4f:ea:ce:
                    f8:aa:e9:da:8a:60:28:6a:a4:a5:95:a1:1e:d6:a9:
                    8b:89:8c:e0:d6:98:5d:ad:2e:20:8c:f1:c5:43:8c:
                    00:79:09:c4:3a:3b:f0:19:99:95:ac:f6:86:6e:87:
                    98:0c:fb:fb:f9:d6:44:56:5f:51:8b:e4:6b:a5:71:
                    4c:5a:1a:3b:36:16:0d:e4:44:1e:42:fd:17:c8:11:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0B:A1:44:41:FE:EE:93:D7:18:F1:36:37:42:87:60:C7:26:08:18
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:d2:58:1d:c3:f1:7c:9e:a0:fa:f0:c0:4b:f1:0c:08:f7:
         0c:70:de:f5:ae:66:e7:f0:56:9c:88:fd:38:f4:34:34:56:ad:
         67:e1:e5:d2:91:94:8f:5b:19:d1:59:87:e7:53:40:f4:5d:ae:
         d0:27:98:38:26:31:c2:b2:6f:1b:a6:66:36:be:62:39:2e:85:
         c3:91:8f:5a:7e:6f:da:25:18:31:04:11:0a:31:3b:87:31:42:
         1a:b3:f7:24:fd:89:e1:e1:41:6d:af:9e:ac:16:3e:7c:db:87:
         b6:3b:ca:64:43:82:28:39:4c:d1:cb:e5:09:74:54:69:0f:14:
         64:17:34:a1:4d:4d:29:77:cc:d1:46:11:4c:b4:85:26:7c:f0:
         ca:3d:2e:b2:3a:be:ec:d9:7b:e0:ed:64:1e:1c:db:b8:ea:83:
         93:cf:a1:97:1c:a5:dc:8d:50:5f:c5:6a:ba:b3:c0:2d:bf:63:
         8b:6b:61:7b:ad:2d:80:d6:87:f2:d1:6a:59:af:ab:14:3b:59:
         33:53:33:ba:a4:22:34:77:e7:c9:07:a8:49:f5:0e:bc:56:9c:
         59:a9:1d:92:45:9b:f9:b8:9d:08:91:74:65:63:a9:91:58:ea:
         00:70:55:59:68:ef:86:97:57:4f:54:31:4a:fb:b0:a4:07:98:
         35:62:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org