Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          L2Acb8Jxhw0R9U0O2VRqJF04BV5r++63mdIokg356ro=
Subject key identifier:   CC:8E:70:8E:D9:47:71:5A:88:45:C6:BF:3B:BC:0D:CE:0F:30:EC:AD
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       1356D4261F8BA0E2DB0488A9C716E8327D1B84C2
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 24 Sep 2025 13:33:34 +0000
ROA not before:           Wed 24 Sep 2025 13:28:34 +0000
ROA not after:            Wed 23 Sep 2026 13:33:34 +0000
asID:                     52871
IP address blocks:        201.157.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:56:d4:26:1f:8b:a0:e2:db:04:88:a9:c7:16:e8:32:7d:1b:84:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Sep 24 13:28:34 2025 GMT
            Not After : Sep 23 13:33:34 2026 GMT
        Subject: CN=CC8E708ED947715A8845C6BF3BBC0DCE0F30ECAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:ca:ea:a0:54:17:3e:e8:f7:d9:06:e2:c8:
                    10:6c:5a:76:2e:fe:b6:02:2b:7a:4d:1b:2b:74:59:
                    17:39:94:78:5a:45:f7:9c:f5:79:f2:57:27:4b:2c:
                    48:60:eb:24:27:0a:85:e9:25:43:52:ec:75:0c:0c:
                    01:e1:8d:0d:2e:98:f3:7f:5f:e2:62:7c:72:35:7c:
                    1d:ad:53:25:7e:4c:c3:f9:3e:86:5d:56:fc:2f:b5:
                    e3:c1:62:3f:92:1e:e9:d5:74:d9:a7:b1:df:98:fd:
                    50:5a:d4:28:fd:7b:9f:cf:59:41:ba:e2:b5:04:e3:
                    6b:0d:c6:53:14:f5:16:a0:a5:6b:1e:63:b4:99:2c:
                    c5:76:0d:0b:0a:cf:bb:4e:57:da:da:14:d5:dd:cf:
                    20:61:81:05:5d:18:7d:6a:b2:a2:63:30:a7:db:c0:
                    90:5e:4f:6f:31:3d:7a:4f:29:19:92:74:9e:78:cf:
                    a2:f2:11:ca:63:88:3d:41:65:e0:eb:3d:69:9e:e5:
                    56:4b:9c:11:a8:3f:97:13:9f:36:8a:66:5b:64:f8:
                    77:f0:ba:9d:1e:c0:6c:48:8c:cd:c5:74:59:2b:cc:
                    1e:2c:40:ea:21:25:dc:5c:c4:35:13:ee:73:7b:11:
                    89:4b:eb:3a:00:19:02:20:c1:9f:03:7e:10:5e:7d:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:70:8E:D9:47:71:5A:88:45:C6:BF:3B:BC:0D:CE:0F:30:EC:AD
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:f3:6c:f9:dc:85:30:f6:ad:93:e8:09:a4:88:79:6c:be:
         70:b3:35:46:3e:93:68:34:87:ce:19:c2:9b:ef:59:40:4e:5d:
         07:4c:64:72:a2:9b:42:eb:61:c9:ec:58:ce:bb:60:68:0f:c6:
         eb:4e:6d:e4:64:3c:3d:e6:6a:73:71:d4:f0:26:67:7f:d2:02:
         e9:5c:64:ea:43:f1:92:54:bf:b3:0b:f7:42:57:ca:06:70:57:
         3a:99:75:f0:a0:df:05:b8:e5:58:2f:4a:28:c3:e3:76:ef:7c:
         ee:39:52:e0:b0:25:10:65:f1:11:c2:a8:cd:13:f6:87:4a:85:
         35:cd:1b:81:ce:cf:82:1d:62:87:65:a4:7e:c9:67:29:9a:18:
         d4:44:d2:a8:ab:bf:b4:f8:99:58:7d:8c:d3:9f:4d:9f:e9:6f:
         36:8d:e9:7b:33:ba:d5:8e:88:e6:06:59:39:7c:fa:4a:ac:50:
         a8:ca:65:55:25:15:50:ac:02:97:70:ee:68:8e:48:1c:2e:a2:
         10:63:03:12:de:e6:74:43:35:47:9c:8f:db:8f:09:20:a8:58:
         ab:7a:e1:44:06:8b:05:b0:be:dc:f2:69:ec:31:cb:2e:f3:30:
         6e:f6:43:23:ca:e7:b3:03:42:7f:75:f8:ef:8a:01:c2:df:09:
         84:cf:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:57:39 2025 by rpki-client