Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          593HruszbqsY4YdZSZVgPip6gpAAo5+OVL9cSsprOLo=
Subject key identifier:   D3:11:A8:FA:37:2A:A2:0F:8A:14:51:FA:D1:85:C0:05:51:4C:97:90
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       29E72D40F80E285BCB5F9E41218E587566C47248
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        201.157.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:2d:40:f8:0e:28:5b:cb:5f:9e:41:21:8e:58:75:66:c4:72:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=D311A8FA372AA20F8A1451FAD185C005514C9790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:91:32:a6:8c:8e:5b:81:3c:37:06:21:46:
                    4b:2c:27:a6:6c:e9:3a:cb:cd:f1:c9:61:d2:3b:b8:
                    fb:68:3b:75:97:56:02:0c:a0:b1:00:d9:31:ae:39:
                    cb:99:c6:46:51:30:47:c9:2e:ac:e7:91:b3:bd:7b:
                    d9:2d:b3:52:cb:ef:4f:f4:f5:7e:e0:63:d3:ae:b9:
                    3f:2d:59:49:17:6a:ad:5e:2d:08:22:6b:01:cf:92:
                    90:84:f4:3f:1f:d9:75:41:2e:23:bf:c0:e5:0f:fd:
                    dd:94:1b:4a:1b:12:de:f4:b5:cc:e8:79:3c:9d:07:
                    0f:1d:4d:8a:07:16:d6:ce:d2:fd:30:c6:56:49:88:
                    6d:d5:f9:44:cd:3b:bd:65:a7:e5:66:59:67:af:41:
                    11:77:3d:e3:96:24:d7:71:c0:d2:25:7d:04:4d:e5:
                    8b:75:2e:5a:b2:5f:c7:a1:55:1a:5c:07:32:e8:d6:
                    d3:13:36:40:88:2e:e9:0b:39:4a:7a:d9:24:a0:d8:
                    f1:a3:f9:aa:38:cb:ad:80:ac:18:dc:00:27:83:78:
                    4d:a4:3d:05:18:9f:f4:95:82:30:f7:75:fe:da:f4:
                    e5:25:85:14:b0:66:3f:e2:43:2f:09:a4:92:b3:2d:
                    bc:e5:e6:07:48:24:8b:f6:5d:f0:69:78:3b:ce:a2:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:11:A8:FA:37:2A:A2:0F:8A:14:51:FA:D1:85:C0:05:51:4C:97:90
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:37:fc:5f:19:e2:d6:e4:cf:31:34:64:c6:f5:6c:c8:7d:
         2c:72:2b:7f:3d:44:6e:75:bb:41:3d:ae:6a:b7:e1:72:69:9c:
         99:20:83:30:75:d5:99:ce:6a:ce:2b:81:b0:c7:a2:c0:ba:c3:
         00:55:31:94:05:e8:d7:a6:92:c9:fb:82:da:89:94:da:06:2b:
         32:b0:87:47:2b:90:69:58:9a:95:e0:cb:04:8b:4e:e4:13:d2:
         e0:fe:ef:ca:f2:5d:9e:c3:5d:e3:4b:4f:a1:f2:a7:13:2a:b6:
         30:e0:01:ef:38:92:40:d6:9e:f0:1a:4a:95:30:77:58:48:bf:
         c4:42:4e:22:52:05:c5:b8:6a:99:aa:45:21:f8:a8:20:4d:0e:
         e2:62:a5:f9:14:29:c9:a0:84:b0:c3:b7:5e:ee:45:87:13:7f:
         91:41:00:2a:73:2c:80:3f:40:5f:0b:c2:c4:5f:17:86:3a:38:
         95:1d:33:fe:da:3e:7d:e5:5f:a2:b7:c0:92:28:06:59:78:5e:
         c7:84:d5:90:11:fc:dd:ba:bd:1d:fe:cf:61:52:78:aa:3b:66:
         cd:8f:45:3f:18:5e:bb:3a:ae:18:ff:01:13:c3:1f:88:c3:d4:
         34:22:02:7f:7a:c3:05:40:cd:00:1b:ea:14:29:65:a5:2f:80:
         ec:51:e4:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKectQPgOKFvLX55BIY5YdWbEckgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA0MDMyMzA3MjFaFw0yNTA0MDIyMzEyMjFaMDMxMTAvBgNV
BAMTKEQzMTFBOEZBMzcyQUEyMEY4QTE0NTFGQUQxODVDMDA1NTE0Qzk3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+pEypoyOW4E8NwYhRkssJ6Zs
6TrLzfHJYdI7uPtoO3WXVgIMoLEA2TGuOcuZxkZRMEfJLqznkbO9e9kts1LL70/0
9X7gY9OuuT8tWUkXaq1eLQgiawHPkpCE9D8f2XVBLiO/wOUP/d2UG0obEt70tczo
eTydBw8dTYoHFtbO0v0wxlZJiG3V+UTNO71lp+VmWWevQRF3PeOWJNdxwNIlfQRN
5Yt1LlqyX8ehVRpcBzLo1tMTNkCILukLOUp62SSg2PGj+ao4y62ArBjcACeDeE2k
PQUYn/SVgjD3df7a9OUlhRSwZj/iQy8JpJKzLbzl5gdIJIv2XfBpeDvOon8BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0xGo+jcqog+KFFH60YXABVFMl5AwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJnfwwDQYJKoZIhvcNAQELBQADggEBAKbvN/xf
GeLW5M8xNGTG9WzIfSxyK389RG51u0E9rmq34XJpnJkggzB11ZnOas4rgbDHosC6
wwBVMZQF6Nemksn7gtqJlNoGKzKwh0crkGlYmpXgywSLTuQT0uD+78ryXZ7DXeNL
T6HypxMqtjDgAe84kkDWnvAaSpUwd1hIv8RCTiJSBcW4apmqRSH4qCBNDuJipfkU
KcmghLDDt17uRYcTf5FBACpzLIA/QF8LwsRfF4Y6OJUdM/7aPn3lX6K3wJIoBll4
XseE1ZAR/N26vR3+z2FSeKo7Zs2PRT8YXrs6rhj/ARPDH4jD1DQiAn96wwVAzQAb
6hQpZaUvgOxR5K0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org