Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203238333436.roa
File:                     3230312e3135372e3235312e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          rdcezHcePS8VrraGGAOXZjxGMmNCrdeoVnSXbOA9WgM=
Subject key identifier:   AA:F5:05:47:AD:24:25:BC:22:B1:29:6D:E5:24:73:E1:23:94:DD:59
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       59934F7E624F1EBC270EAE029C98316C7D9C7DF9
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203238333436.roa
Signing time:             Fri 23 Aug 2024 15:59:15 +0000
ROA not before:           Fri 23 Aug 2024 15:54:15 +0000
ROA not after:            Fri 22 Aug 2025 15:59:15 +0000
asID:                     28346
IP address blocks:        201.157.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:93:4f:7e:62:4f:1e:bc:27:0e:ae:02:9c:98:31:6c:7d:9c:7d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Aug 23 15:54:15 2024 GMT
            Not After : Aug 22 15:59:15 2025 GMT
        Subject: CN=AAF50547AD2425BC22B1296DE52473E12394DD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:f0:d7:c5:ee:1a:7b:07:19:9e:7b:38:56:
                    b7:75:b5:e5:a4:a0:e7:90:36:5e:ba:38:0d:1c:55:
                    e6:7b:04:73:c8:da:df:2b:e5:65:bd:2c:36:13:96:
                    61:37:d8:5e:f3:58:55:58:0c:12:a9:81:c9:fa:0f:
                    d0:01:8a:de:5c:db:15:7a:90:a8:b8:63:34:75:fb:
                    58:e2:79:8a:a3:bb:6b:3e:8b:73:a5:df:fb:d2:3b:
                    e3:de:63:cd:b5:87:a2:07:80:1f:98:69:3f:26:39:
                    ba:22:25:b8:80:d5:0c:24:68:7b:4c:d5:f8:11:93:
                    f9:c9:36:ad:9f:00:3a:0b:d1:63:a1:31:83:20:bd:
                    52:10:ff:54:75:90:38:96:89:f2:e5:e6:2d:27:d6:
                    f3:fd:3b:98:9c:37:61:d6:6a:0a:de:c4:a4:1b:aa:
                    5b:2c:2f:c9:2e:a1:7d:45:a2:93:65:f7:88:ae:f6:
                    da:37:b5:f2:82:bf:c0:8c:c9:e5:4e:bc:80:c8:e1:
                    67:9b:18:73:6d:a0:96:9f:47:44:00:2f:75:82:f6:
                    93:4a:23:44:86:b9:58:24:fb:03:e3:23:10:70:5d:
                    04:ec:1f:c8:b8:1c:9d:db:3f:ed:ab:8d:4d:29:20:
                    2b:44:d8:a6:cf:e2:3f:bb:ba:53:17:9a:15:bb:c0:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F5:05:47:AD:24:25:BC:22:B1:29:6D:E5:24:73:E1:23:94:DD:59
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:4b:88:40:b7:e4:6b:f2:a7:49:9b:12:86:45:82:c3:d3:
         c3:72:b1:0f:0b:c1:d9:aa:07:19:e6:9e:1f:5d:ef:fa:5a:3f:
         48:13:5e:9f:cc:4a:5a:3f:0b:aa:bc:a7:37:4c:64:e9:4d:de:
         f0:23:0d:47:36:3d:70:9f:ae:7c:93:e0:f8:c1:50:ed:43:37:
         81:8d:41:d8:da:e9:ef:04:c8:0a:d0:87:f9:70:4f:d0:34:f8:
         01:c9:3b:52:0c:23:e8:fb:0e:ce:cc:98:69:5d:b8:b1:7b:9c:
         de:2f:69:c7:17:50:65:33:e2:2a:14:74:73:79:8d:11:ac:da:
         11:01:ac:9b:4b:89:53:67:49:92:ef:9c:cc:97:a1:42:f6:ce:
         8f:3f:1b:6a:46:cf:8f:a6:e9:95:a8:92:23:c3:1c:ec:9e:b1:
         5e:d5:e0:56:f4:01:6c:a0:bc:9a:20:5a:0a:b5:b8:f3:0f:86:
         c2:89:55:e5:7d:f4:55:22:9c:10:db:c2:77:5d:ca:f5:d4:82:
         ff:eb:14:79:a3:b4:73:d0:48:d1:1f:f1:ba:72:9a:2c:93:07:
         c9:f5:59:a1:fa:bb:3d:2a:3b:ce:89:94:d1:3d:b4:bb:89:19:
         83:86:ad:fe:22:63:90:06:db:fb:c2:2d:dd:af:36:f5:dd:c8:
         e9:2f:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org