Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Jtv8TGJpfbQ5PFE8coTGEMtYEiNaADcldk7h4rAjVHM=
Subject key identifier:   ED:8C:05:9C:81:24:06:EE:41:F1:65:8C:B0:79:F2:6C:93:79:A9:A5
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       1C3F3C7740D40D76D68178208E153CF4F1E18FC2
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:23 +0000
ROA not before:           Wed 05 Mar 2025 23:35:23 +0000
ROA not after:            Wed 04 Mar 2026 23:40:23 +0000
asID:                     52871
IP address blocks:        201.157.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:3c:77:40:d4:0d:76:d6:81:78:20:8e:15:3c:f4:f1:e1:8f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:23 2025 GMT
            Not After : Mar  4 23:40:23 2026 GMT
        Subject: CN=ED8C059C812406EE41F1658CB079F26C9379A9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:33:81:ab:57:46:12:14:a6:40:97:cb:14:
                    6c:dd:b7:bf:28:c5:07:d1:43:60:20:05:a6:35:84:
                    ec:78:e6:39:ab:e7:b4:d2:a7:4c:a8:40:4c:e7:ea:
                    32:59:82:4e:e8:68:65:e4:10:a8:25:c7:26:72:c7:
                    c7:a2:74:e4:d4:22:09:d4:ed:18:f1:ac:c3:27:bf:
                    2b:2d:9c:fc:76:74:97:cb:2c:de:80:6c:d3:f5:5a:
                    e7:b1:90:62:0b:b7:37:62:f6:d1:00:eb:df:60:cd:
                    08:ee:d2:1a:bd:ca:32:df:70:a6:16:c2:bb:7f:7c:
                    f6:69:d0:76:d7:86:fa:0a:ee:11:53:80:6d:86:78:
                    0f:9a:05:91:e6:62:1d:cc:a9:cc:03:b1:35:06:a3:
                    cf:9e:e1:79:55:de:19:32:87:88:ff:fd:50:f4:01:
                    02:d5:45:07:fa:1d:ba:aa:a2:eb:6f:83:cb:e7:b4:
                    8f:4a:08:78:3f:ef:5d:b1:6b:10:6d:35:d9:28:63:
                    16:67:a0:15:a5:69:1c:66:c6:44:57:39:0b:a6:20:
                    7f:c3:51:8a:82:b6:55:e3:ca:21:d6:d4:62:d0:8b:
                    1b:24:ca:1e:0f:b2:4b:c6:9f:08:1e:a9:03:c7:11:
                    c8:73:ea:dd:a9:70:d0:b7:63:54:9f:56:b6:b7:67:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:05:9C:81:24:06:EE:41:F1:65:8C:B0:79:F2:6C:93:79:A9:A5
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:10:f7:e3:ad:f8:ad:e9:c8:e2:2e:90:cb:fc:dc:ce:55:
         af:58:6e:3d:57:d9:b8:e9:65:8d:86:24:db:35:f1:04:c6:d7:
         9d:8c:b4:ff:a4:1f:0e:30:7c:35:8f:70:8f:52:3b:3b:1a:1d:
         e1:a3:97:f2:6d:4f:e4:c3:1b:d5:8e:23:54:5f:48:cd:03:29:
         89:eb:9a:48:73:06:20:e9:a8:35:26:48:ef:56:5c:f4:41:7d:
         1a:bd:cc:c8:ed:4a:ea:47:30:c4:bd:11:ab:09:90:e2:1c:0e:
         7a:58:45:51:82:de:a1:54:3d:10:e1:86:98:f0:fa:8c:4f:49:
         2f:cc:cc:d2:98:e5:ef:f4:20:48:5a:f8:e5:25:7d:5d:ab:33:
         36:9d:a0:20:8c:82:78:2e:7d:fb:25:ca:bd:24:a1:8b:66:06:
         67:c5:2a:11:06:82:7c:44:30:b9:3b:a0:09:c5:3e:06:fa:cc:
         d1:d8:bb:a8:b4:a4:d3:60:75:1f:2e:33:1f:53:9b:38:a6:f2:
         f7:f4:dd:f3:9a:73:12:4e:ff:4d:b7:6d:b3:65:8c:61:6d:1c:
         93:fa:46:8e:da:33:b0:bc:0d:c0:c6:53:ba:ab:10:ab:7f:e0:
         e2:98:3c:96:93:c7:f7:35:ab:2a:db:df:d5:11:09:80:e5:2c:
         cc:a2:26:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHD88d0DUDXbWgXggjhU89PHhj8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNTAzMDUyMzM1MjNaFw0yNjAzMDQyMzQwMjNaMDMxMTAvBgNV
BAMTKEVEOEMwNTlDODEyNDA2RUU0MUYxNjU4Q0IwNzlGMjZDOTM3OUE5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobDOBq1dGEhSmQJfLFGzdt78o
xQfRQ2AgBaY1hOx45jmr57TSp0yoQEzn6jJZgk7oaGXkEKglxyZyx8eidOTUIgnU
7RjxrMMnvystnPx2dJfLLN6AbNP1WuexkGILtzdi9tEA699gzQju0hq9yjLfcKYW
wrt/fPZp0HbXhvoK7hFTgG2GeA+aBZHmYh3MqcwDsTUGo8+e4XlV3hkyh4j//VD0
AQLVRQf6Hbqqoutvg8vntI9KCHg/712xaxBtNdkoYxZnoBWlaRxmxkRXOQumIH/D
UYqCtlXjyiHW1GLQixskyh4PskvGnwgeqQPHEchz6t2pcNC3Y1SfVra3Z7d5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7YwFnIEkBu5B8WWMsHnybJN5qaUwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJndQwDQYJKoZIhvcNAQELBQADggEBAGv4EPfj
rfit6cjiLpDL/NzOVa9Ybj1X2bjpZY2GJNs18QTG152MtP+kHw4wfDWPcI9SOzsa
HeGjl/JtT+TDG9WOI1RfSM0DKYnrmkhzBiDpqDUmSO9WXPRBfRq9zMjtSupHMMS9
EasJkOIcDnpYRVGC3qFUPRDhhpjw+oxPSS/MzNKY5e/0IEha+OUlfV2rMzadoCCM
gnguffslyr0koYtmBmfFKhEGgnxEMLk7oAnFPgb6zNHYu6i0pNNgdR8uMx9Tmzim
8vf03fOacxJO/023bbNljGFtHJP6Ro7aM7C8DcDGU7qrEKt/4OKYPJaTx/c1qyrb
39URCYDlLMyiJvA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net