Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa
File:                     3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa (raw, json)
Hash identifier:          pwR5xetyG/Qr0ilnDauzfdGHMzmAgUuing/iQAfxXW4=
Subject key identifier:   B9:C6:38:FF:1F:2F:95:3B:36:FB:E8:4B:B8:0B:13:57:0D:F5:C3:E3
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4AE99B8ECC5AA870E483D93A37ABF139EF6C3591
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa
Signing time:             Wed 24 Sep 2025 13:33:34 +0000
ROA not before:           Wed 24 Sep 2025 13:28:34 +0000
ROA not after:            Wed 23 Sep 2026 13:33:34 +0000
asID:                     52871
IP address blocks:        201.157.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:9b:8e:cc:5a:a8:70:e4:83:d9:3a:37:ab:f1:39:ef:6c:35:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Sep 24 13:28:34 2025 GMT
            Not After : Sep 23 13:33:34 2026 GMT
        Subject: CN=B9C638FF1F2F953B36FBE84BB80B13570DF5C3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:43:a5:a3:5d:26:cd:d8:e8:79:71:e0:1e:
                    e6:54:3e:61:cb:6d:86:f3:30:89:04:e9:ab:fd:67:
                    1a:c0:79:b3:e7:10:fb:48:5e:71:1b:1b:57:16:d7:
                    3d:f0:70:fa:e3:35:85:17:15:1f:f2:92:34:8b:89:
                    f2:cb:eb:5c:cb:6c:b4:c1:a2:ad:ac:98:d9:fd:2e:
                    14:e1:e6:2d:8d:2c:e8:2e:08:c1:e6:87:7a:64:20:
                    ce:75:75:cc:08:a9:5b:03:2b:af:c3:13:62:7f:23:
                    89:08:bb:80:a4:a8:e2:69:e5:c6:f7:de:ef:f6:5b:
                    c8:f1:c4:dc:9f:38:17:91:e9:9b:9e:d0:0b:df:93:
                    cc:ba:2e:df:b3:7e:db:7c:d5:c5:8e:8f:83:d7:85:
                    94:46:4f:75:e2:12:7d:46:f7:d8:e7:18:8f:f0:48:
                    35:34:54:39:d2:20:25:a9:e4:61:81:04:28:e6:cb:
                    39:ac:a8:0b:f6:05:5a:fd:74:44:f9:52:32:0f:e4:
                    da:05:fe:7c:84:64:5f:2a:81:80:bd:5b:ac:95:ca:
                    14:48:1a:b0:b5:eb:3d:99:b8:b7:25:a1:8c:5e:e2:
                    9a:71:3d:3e:ff:66:ea:ef:4a:d5:49:c8:3a:1f:6f:
                    ff:c4:1b:14:16:08:37:d7:94:2b:4f:0f:70:de:c2:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:38:FF:1F:2F:95:3B:36:FB:E8:4B:B8:0B:13:57:0D:F5:C3:E3
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:14:2a:aa:5d:9a:c7:c1:7b:0c:33:c0:06:8a:a5:d9:40:
         1d:03:ae:01:e4:da:c3:53:23:8a:c1:52:7f:bf:13:dc:79:59:
         bb:b1:aa:9f:c3:8e:2e:c5:7e:b9:49:0b:1c:16:6f:9e:0d:2b:
         d8:d5:d9:41:de:60:0e:e7:b1:ae:31:17:89:bf:61:8c:ac:6b:
         73:32:a0:82:fc:ec:f6:34:a0:ea:06:92:60:28:cd:9d:e5:53:
         fa:8c:f0:ca:4b:e7:93:df:a0:c7:ab:3b:2d:3a:27:66:51:e9:
         30:e0:c0:95:b5:26:99:63:e2:d4:e1:36:af:a1:f1:ab:4d:b8:
         36:03:6c:f2:1e:0e:d1:39:49:46:8e:87:4d:f1:eb:ba:89:2c:
         bf:1b:02:df:81:26:5d:43:2d:cb:d9:6c:1d:fc:73:f2:58:aa:
         b0:17:25:f4:2d:53:9d:3f:6c:8f:c2:5c:e3:a8:4e:17:ca:b0:
         56:1f:41:4c:55:e8:7f:58:26:86:74:f4:d7:ce:54:b1:59:cc:
         21:67:84:90:77:d6:20:a9:b3:3f:60:ad:18:c0:3d:e1:d3:c8:
         3c:8a:84:bf:1c:ac:ba:11:3e:d9:fc:1f:d4:c2:9a:95:10:94:
         77:1f:5b:40:f9:7c:24:b2:67:a5:c9:68:21:10:63:14:97:80:
         bf:ff:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:57:51 2025 by rpki-client