Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
File:                     3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa (raw, json)
Hash identifier:          A06v3/wAiC4mUIYeM0g3SavL+GJs6AzSFKomCgAJSJU=
Subject key identifier:   C6:16:C2:0C:21:B5:32:D5:B0:53:70:01:D8:A9:F1:5F:AC:39:3C:30
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       0CE66C2178BE63FEDC290EBD10529F690263A278
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
Signing time:             Fri 12 Sep 2025 19:19:56 +0000
ROA not before:           Fri 12 Sep 2025 19:14:56 +0000
ROA not after:            Fri 11 Sep 2026 19:19:56 +0000
asID:                     272654
IP address blocks:        201.157.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e6:6c:21:78:be:63:fe:dc:29:0e:bd:10:52:9f:69:02:63:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Sep 12 19:14:56 2025 GMT
            Not After : Sep 11 19:19:56 2026 GMT
        Subject: CN=C616C20C21B532D5B0537001D8A9F15FAC393C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:79:2a:bc:31:27:c8:05:11:a3:d3:5c:2b:
                    51:71:4d:db:e8:c6:b4:17:3f:6a:ff:df:31:66:bf:
                    9d:0a:27:1b:fb:f6:31:e5:64:0a:57:70:af:d6:f1:
                    4a:9c:0b:c4:81:ec:d7:24:72:70:ac:b4:83:4c:5f:
                    8b:58:ae:d2:23:be:9d:e3:f4:c5:76:70:97:25:16:
                    c9:3e:af:a5:41:26:42:70:09:7f:85:4f:26:22:22:
                    03:b2:7c:dd:bb:f7:81:1c:e1:6e:49:10:15:90:5f:
                    a3:74:66:c4:f1:c1:df:fe:d8:d5:e3:cf:34:db:0c:
                    8c:bc:59:99:fd:da:73:b4:b4:07:3a:e2:8c:c6:4a:
                    e7:ff:34:da:c9:dd:55:2f:96:31:d1:63:4c:58:60:
                    a5:5d:e5:a4:8a:e7:f2:ae:a6:d9:da:ee:d7:ab:af:
                    4d:df:2a:bb:bb:f6:3a:3a:6d:92:08:ff:d7:06:ba:
                    08:95:bc:cf:00:0f:f2:2e:b3:e4:79:dc:ae:a8:8b:
                    6b:19:b9:89:3e:63:63:5a:d7:22:a2:38:b7:31:fa:
                    3b:5d:48:d6:a9:82:73:f9:f5:4d:77:28:98:58:4b:
                    9b:36:c5:01:73:b7:d8:4d:fd:19:8c:46:9d:ef:ac:
                    f4:38:ef:c3:76:1b:7a:0a:cd:19:4c:0c:8b:0f:d1:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:C2:0C:21:B5:32:D5:B0:53:70:01:D8:A9:F1:5F:AC:39:3C:30
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:8b:ba:ea:0e:a6:ac:00:69:d8:d4:3d:a7:12:a6:b0:13:
         f4:5e:63:6a:c9:0e:c6:23:72:36:ce:99:4f:aa:3b:9a:33:e3:
         2d:e1:bf:00:50:89:ca:85:7e:b2:17:cb:cb:17:4f:b4:d5:e7:
         88:f6:1f:6f:08:d3:9b:be:cd:c9:b2:a7:8c:6b:5c:f6:7a:d9:
         af:86:7c:20:3f:d1:a3:8e:22:d8:f7:4f:a0:00:9c:2a:c0:30:
         34:ed:80:97:e4:e7:b5:6e:38:3a:36:7f:68:ad:67:95:fb:c0:
         e2:aa:fe:3f:53:61:33:79:2a:29:99:32:f8:cf:1d:81:1b:d3:
         50:df:90:b0:5f:eb:8b:88:51:6c:ec:6b:eb:96:46:07:10:29:
         4e:d9:4b:c6:e6:bc:d6:3b:86:57:83:7d:c5:2e:1c:1d:c1:69:
         0a:b6:3e:04:01:d0:1f:e9:5c:f7:fe:f6:4c:be:36:6d:30:cd:
         57:f8:91:6a:41:48:fa:02:13:61:68:d5:de:5c:76:69:92:d9:
         58:b6:f4:41:0f:24:a7:18:8a:19:ed:79:07:8a:82:d9:d3:12:
         54:83:7c:d4:48:92:78:88:6f:8c:ca:ac:ea:44:e3:24:ea:56:
         c4:de:c0:1c:49:57:c3:af:73:05:fc:6f:b1:19:2b:11:a2:56:
         1d:4a:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:40:34 2025 by rpki-client