Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          WTIK9Ytkqv6mf+j3mFUYVJe1PnGLFwx9HH11PACpLXI=
Subject key identifier:   2D:CD:14:07:7B:8F:C1:A4:4B:C3:32:4B:AD:8E:27:44:73:38:DB:DB
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       5A1B06EDD0013FD2CC3D719EF02011ED0565ED57
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:23 +0000
ROA not before:           Wed 05 Mar 2025 23:35:23 +0000
ROA not after:            Wed 04 Mar 2026 23:40:23 +0000
asID:                     52871
IP address blocks:        201.157.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:06:ed:d0:01:3f:d2:cc:3d:71:9e:f0:20:11:ed:05:65:ed:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:23 2025 GMT
            Not After : Mar  4 23:40:23 2026 GMT
        Subject: CN=2DCD14077B8FC1A44BC3324BAD8E27447338DBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:cc:60:9e:d5:83:d4:39:2a:79:b6:9e:dd:
                    b9:f5:0c:af:64:47:5b:25:af:f2:7c:7e:a8:0b:c6:
                    51:54:78:d0:9a:f8:24:10:7d:1e:de:91:44:b8:fc:
                    f0:2f:a3:e5:25:27:78:c2:89:40:f4:7c:35:6f:69:
                    95:a5:15:c3:82:f0:73:b9:dc:32:f8:8d:85:36:a0:
                    4e:51:90:86:b0:e8:18:31:1c:d8:a8:54:2c:25:dd:
                    f9:7c:97:4e:b3:a1:93:99:c7:45:47:e1:b9:6e:15:
                    58:78:a9:a2:b6:94:e1:b4:e7:b7:97:3b:1a:64:b1:
                    d6:db:2d:c1:da:2d:10:8d:ec:e0:d5:ea:70:ed:1d:
                    d0:c3:ac:ab:c1:53:a4:98:a7:bf:77:8c:32:5b:89:
                    a2:56:14:22:76:24:82:a6:5c:37:7b:50:73:6f:77:
                    1e:47:28:30:02:65:86:c8:9c:f1:89:25:32:0b:18:
                    d7:29:11:8c:12:a7:95:29:ed:28:34:54:6d:65:f7:
                    d4:98:76:99:de:ae:c5:d1:49:81:db:c7:f1:f2:92:
                    da:25:36:af:ed:6c:f4:df:de:e3:f3:45:31:39:86:
                    20:01:f9:6e:17:f7:ee:73:4f:be:89:35:78:fc:86:
                    07:a0:51:b3:a6:af:2d:fe:2a:a6:24:27:33:67:14:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:14:07:7B:8F:C1:A4:4B:C3:32:4B:AD:8E:27:44:73:38:DB:DB
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:9a:0c:fa:0d:5d:1a:7b:99:61:7b:63:3c:55:63:ac:42:
         ce:2b:c4:36:d7:cd:4a:2a:4e:b0:d5:79:21:a7:19:a3:49:37:
         0c:05:50:a8:e5:7a:d8:75:3b:f1:da:81:22:9b:f3:f5:86:92:
         cb:9b:07:06:89:0a:89:bc:ab:b3:62:cc:f6:e4:c4:c4:0c:54:
         05:c9:d5:66:43:3b:1f:0b:d0:e5:21:20:98:d7:00:94:df:ed:
         58:db:b2:e8:52:cf:c6:c0:8d:ae:40:09:9f:e2:bc:50:7b:46:
         c8:8e:07:4d:03:41:49:b6:f8:43:dd:34:9e:5a:27:b0:1f:b3:
         d9:82:08:d9:18:9b:09:fb:64:11:d4:00:43:ef:72:5b:e6:db:
         dc:e4:d2:96:5a:f8:a5:f6:a8:35:98:23:10:dc:0b:d8:53:f5:
         c8:2d:b2:65:da:c1:b6:59:31:70:20:d9:de:f2:91:cc:2e:c7:
         8a:b2:52:01:27:8b:2b:f8:72:59:4b:53:35:04:31:08:7b:b8:
         28:38:4a:c1:14:f0:04:15:09:0a:95:80:c6:cd:c7:55:24:79:
         36:99:bd:cc:b6:2c:4e:30:03:29:a7:a6:4b:5c:35:11:c8:48:
         41:a0:d4:d0:f8:67:12:cd:3d:a9:ca:31:d2:bd:e5:2b:40:0a:
         bc:39:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:51:45 2025 by rpki-client