Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
File:                     3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa (raw, json)
Hash identifier:          WYSd0XEo5BOYMAzeS/WN+6huRzMokP0LwDsKoJdnfL4=
Subject key identifier:   01:0D:F1:B7:1C:B7:DF:16:1B:CA:5E:2E:38:E7:A1:25:15:97:B9:8D
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       599F1AC8AF480FB5556D731A6C865A946BBE8A20
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
Signing time:             Wed 24 Sep 2025 13:33:34 +0000
ROA not before:           Wed 24 Sep 2025 13:28:34 +0000
ROA not after:            Wed 23 Sep 2026 13:33:34 +0000
asID:                     52871
IP address blocks:        201.157.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9f:1a:c8:af:48:0f:b5:55:6d:73:1a:6c:86:5a:94:6b:be:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Sep 24 13:28:34 2025 GMT
            Not After : Sep 23 13:33:34 2026 GMT
        Subject: CN=010DF1B71CB7DF161BCA5E2E38E7A1251597B98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1b:ef:2a:e2:75:ce:01:96:cb:0d:32:79:86:
                    67:34:b4:a3:39:48:f9:d6:7f:f8:b7:95:99:d2:73:
                    c8:76:19:b7:80:b4:96:7b:bf:93:c6:6d:70:6c:62:
                    cb:98:a6:7f:bf:2c:39:65:d7:01:9c:b1:83:5b:08:
                    02:91:f3:24:dc:c7:37:25:37:7a:a9:92:54:ec:df:
                    51:a5:24:2b:0b:d9:c6:fe:a1:8e:65:bd:d5:9c:2c:
                    89:1f:5a:50:99:77:97:20:4c:03:9c:dd:a1:54:6c:
                    ce:bd:bb:5d:69:17:3d:2a:fd:d1:19:82:c5:a2:5b:
                    50:a3:c6:91:7b:11:67:15:ef:e9:4f:64:5f:d4:0f:
                    b0:98:94:6d:84:10:d8:5d:3b:e2:e1:fa:ac:78:cf:
                    3f:95:4e:3a:72:02:2c:80:b4:67:18:01:f6:c1:1d:
                    f9:e3:5d:1d:06:c8:9f:d1:ae:c4:f1:45:35:0d:09:
                    9c:60:b5:49:54:c1:3e:bc:d1:c5:80:8f:af:91:0d:
                    5c:0c:d7:0f:a2:fe:64:e9:6a:69:dc:14:8f:ea:e1:
                    25:a8:c1:3a:8e:af:37:dc:70:4b:cb:d6:83:8c:a8:
                    8a:e0:9b:fc:31:cf:0c:f5:59:ea:c5:3b:51:b9:ef:
                    65:aa:3a:04:03:50:43:9a:c0:03:e0:97:9f:ca:8c:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:F1:B7:1C:B7:DF:16:1B:CA:5E:2E:38:E7:A1:25:15:97:B9:8D
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:4b:3c:88:0a:c4:36:30:19:18:ad:3a:dd:bc:87:b6:8a:
         5b:8b:a2:49:66:41:cf:42:99:9b:0c:eb:34:59:67:f8:68:0f:
         fe:bf:98:8e:5b:7b:f2:5c:94:f9:5e:94:ff:a8:78:c3:4e:53:
         1f:87:4a:3a:75:dd:3c:9c:6c:c2:ab:ce:3d:44:bf:22:f2:3f:
         f3:1b:f9:52:68:25:c1:05:ea:b0:d9:05:1b:68:03:79:64:f1:
         42:83:d9:77:91:09:b4:50:d4:b8:77:91:fe:60:da:24:1c:02:
         15:3f:44:24:c5:7e:7e:71:e2:41:2d:58:30:69:6e:b0:7b:44:
         58:f0:69:f0:b3:b5:54:0b:ea:c6:80:9e:4b:0f:94:bf:b2:11:
         fc:4f:bc:99:0d:07:8b:0b:da:39:de:a7:9e:b8:f4:9a:b3:7f:
         83:19:99:ad:91:24:db:89:a0:32:92:91:d6:e2:2f:81:6b:4e:
         5c:51:f2:28:4f:a9:f5:b4:7c:ef:db:d1:9b:08:da:9e:61:b5:
         6f:53:89:74:0a:d6:43:e2:f7:ff:ee:73:bc:25:2f:c3:ac:a4:
         4c:83:09:6d:15:7b:41:81:eb:fc:20:04:45:c0:63:6b:0e:0e:
         a5:34:37:91:f3:84:cf:c6:fb:21:cf:f6:cc:24:eb:4b:bd:a2:
         b7:d1:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:35 2025 by rpki-client