Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
File:                     3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa (raw, json)
Hash identifier:          IYatK1qDMlC78Lrd3qyTJvy6v+fe0MPKL5cV3xdyeVU=
Subject key identifier:   5F:B8:E0:5E:6B:19:46:35:7C:ED:B4:98:03:AA:B9:57:3D:A7:AC:23
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       51CBAB69E683DD4FE4D5B7843225CBEDE36A047A
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     272654
IP address blocks:        201.157.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cb:ab:69:e6:83:dd:4f:e4:d5:b7:84:32:25:cb:ed:e3:6a:04:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=5FB8E05E6B1946357CEDB49803AAB9573DA7AC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:da:a5:75:ee:b5:81:2f:92:17:b3:63:de:
                    6f:5b:cc:c5:24:97:23:bd:85:b0:56:fd:92:e4:2a:
                    ea:3a:47:48:9c:0f:92:5e:33:ca:43:2c:64:e6:8b:
                    5d:e1:6e:e6:45:ab:58:7c:dc:9c:fd:42:91:41:66:
                    39:1d:26:50:37:54:ca:c2:64:62:16:e0:84:cb:de:
                    d6:e6:48:76:8e:c8:47:c2:56:18:de:49:e8:cf:18:
                    49:5c:d5:4d:06:33:1f:37:e9:fe:44:a1:3b:8f:d0:
                    43:86:62:ba:41:c9:de:92:62:18:bd:c8:65:14:e1:
                    c0:31:77:43:24:de:9f:8e:f9:ea:e2:3c:a9:ac:6e:
                    4c:39:d1:b7:fa:27:46:b6:c8:04:48:82:21:f4:51:
                    e2:0a:57:bb:dc:43:e6:d2:5d:82:56:b8:88:be:42:
                    e6:67:8f:b1:e9:2c:ea:4e:43:db:16:02:2e:17:43:
                    25:4f:88:da:b5:53:98:fa:65:09:29:d4:4e:a3:dd:
                    17:41:05:51:dd:96:f8:a4:77:6d:96:ec:82:fb:8d:
                    8f:26:6e:79:07:e7:f6:1e:8b:36:33:ea:3c:29:dd:
                    e5:93:12:94:6d:db:aa:9d:cc:64:d6:3a:ba:05:53:
                    96:25:af:69:d5:04:ff:f4:1f:d7:1c:dc:05:34:66:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B8:E0:5E:6B:19:46:35:7C:ED:B4:98:03:AA:B9:57:3D:A7:AC:23
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:90:a4:fb:c5:47:c9:e8:45:4d:25:97:96:6a:05:b1:f4:
         7c:e8:c9:ec:52:f5:6f:89:37:9e:bc:47:c0:4c:72:8d:72:8d:
         15:c0:ea:aa:30:4f:26:0f:25:fe:39:b3:47:77:22:80:ba:f9:
         d8:b1:15:ba:e1:12:00:a8:cf:35:8d:22:ed:47:23:1a:2f:13:
         04:8c:b8:ef:8c:4e:e0:ac:32:c3:34:2a:5a:67:46:bc:cf:c4:
         eb:64:6c:37:29:02:ba:e7:8c:77:6b:3f:92:51:2e:19:6c:e8:
         8f:59:91:7e:11:55:3e:7f:37:b2:03:97:5a:d7:5c:c6:b5:81:
         b6:45:c8:95:5f:eb:56:a1:9d:01:fb:e6:5b:d3:b1:5b:05:d7:
         c7:1e:d7:fa:2f:54:48:79:cc:33:40:b1:1d:a6:b0:e6:a7:30:
         e2:64:5f:b0:2c:5f:f2:e2:f6:8f:83:64:f7:74:ef:5a:12:16:
         30:81:90:6d:b1:35:17:ef:12:3b:33:f2:e4:4a:cf:68:48:4a:
         1b:16:6a:75:0a:55:94:9d:74:40:0d:83:ff:d0:6e:c7:5a:f6:
         dc:12:c6:6b:30:2f:43:73:32:44:6c:fd:32:a4:16:8f:05:8a:
         f3:45:a2:7c:3f:01:df:d8:87:ee:c4:15:aa:42:9f:9a:fe:b4:
         95:8a:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net