Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          ADJOPN8Oc9uJyd/ePD0Dg+HLrfIVAGa9dVbEcxaOhJA=
Subject key identifier:   36:72:CA:54:95:3D:D8:40:31:95:FD:96:F0:DA:55:A5:E7:78:E3:68
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       70349948F13FFBBA73B46E99AD01198568C32234
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 04 Jun 2025 13:33:05 +0000
ROA not before:           Wed 04 Jun 2025 13:28:05 +0000
ROA not after:            Wed 03 Jun 2026 13:33:05 +0000
asID:                     52871
IP address blocks:        201.157.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:34:99:48:f1:3f:fb:ba:73:b4:6e:99:ad:01:19:85:68:c3:22:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jun  4 13:28:05 2025 GMT
            Not After : Jun  3 13:33:05 2026 GMT
        Subject: CN=3672CA54953DD8403195FD96F0DA55A5E778E368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:e0:16:7d:18:7b:64:61:62:02:97:f6:c5:
                    43:84:8d:c2:df:08:7b:cb:b1:e6:9c:d8:70:c9:72:
                    54:50:ec:e1:63:ff:82:c7:cb:79:f1:8c:7c:bb:66:
                    eb:46:07:37:8f:e4:e4:67:84:e8:6d:ba:29:83:4d:
                    cb:af:58:fe:b2:6e:bb:61:c3:ff:3d:1e:d2:40:5c:
                    3d:ab:58:f2:f6:5c:6d:3b:23:47:58:3b:88:17:37:
                    fd:7a:be:97:41:0a:9b:d8:d5:96:71:c1:18:cf:7e:
                    4a:62:85:76:5e:77:1a:72:d8:0b:af:f5:11:ee:71:
                    c4:65:6b:fe:bc:ec:9d:cc:cd:62:35:34:db:58:36:
                    f9:bf:a2:24:4a:2d:ca:d6:15:ff:5c:d9:ec:95:a9:
                    c0:00:7c:46:f9:dc:36:a7:54:26:9b:e7:de:90:07:
                    1e:db:ae:8c:7a:14:d6:ce:66:29:78:ca:35:4f:a6:
                    3d:f6:19:7d:e4:78:03:9f:bc:b9:9b:45:ef:84:65:
                    25:9c:3e:44:bf:1e:26:6b:13:7c:a7:b1:94:c9:bc:
                    ef:db:63:25:f0:c9:56:4d:f6:80:ef:c7:9a:e6:a3:
                    fe:6b:b1:c5:bd:42:1b:83:f8:7c:bd:e9:b8:49:87:
                    3a:72:0f:23:5b:af:72:2a:30:bd:b8:2d:40:36:98:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:CA:54:95:3D:D8:40:31:95:FD:96:F0:DA:55:A5:E7:78:E3:68
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:ac:ca:7f:77:ac:00:c1:c2:81:90:a1:00:58:a5:cf:25:
         95:af:8f:0f:3e:d7:bf:ed:8d:45:31:37:e7:89:e3:72:6e:53:
         36:bc:f7:d7:fc:62:7d:b7:fd:0b:5f:a6:08:c4:55:22:40:66:
         85:68:2f:5c:ef:91:2c:60:03:ab:5b:52:eb:41:26:df:08:83:
         0d:1c:e3:76:24:7d:ad:fe:59:1d:e3:c4:0c:7c:7b:9b:7f:c6:
         cc:fa:a1:7b:14:55:a6:7a:ec:81:08:52:40:c3:c8:06:55:7a:
         26:d6:bb:33:29:f3:0f:e7:1f:03:7e:f8:b3:71:af:52:95:20:
         7f:a7:33:02:d4:22:1a:da:cf:1f:56:3f:46:01:ec:c1:f9:63:
         e1:a0:e4:79:20:d3:b7:e3:ad:ac:a5:f8:99:19:7a:cc:66:c6:
         d6:cf:92:23:d4:ac:9b:5d:2b:7b:48:14:bf:a7:3b:6c:5f:81:
         a3:48:af:b7:33:65:63:77:84:e0:8a:2b:18:3f:50:a2:07:85:
         d9:79:8c:f6:0c:8f:f0:dd:3c:96:45:19:1f:33:5a:56:4c:06:
         a7:26:7f:d3:d9:b7:d4:18:ee:1a:ce:a6:57:9f:0a:a7:b6:e2:
         89:3e:3e:b9:d5:43:fc:b3:8e:4c:b1:cc:82:fc:c9:a9:40:33:
         e3:1c:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:36:10 2025 by rpki-client