Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131352e302f32342d3234203d3e203532393434.roa
File:                     3230312e3135302e3131352e302f32342d3234203d3e203532393434.roa (raw, json)
Hash identifier:          5wMdCW5CVN+NDBUfu3X78q20XPJXmCchq17YjochlAM=
Subject key identifier:   5C:3A:13:AB:F7:38:F9:A0:AE:6D:73:9F:B5:63:0A:EE:79:18:65:08
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       62BA2E585023825418AFC6B4FAC0020238229353
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131352e302f32342d3234203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:32:31 +0000
ROA not before:           Tue 06 May 2025 14:27:31 +0000
ROA not after:            Tue 05 May 2026 14:32:31 +0000
asID:                     52944
IP address blocks:        201.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ba:2e:58:50:23:82:54:18:af:c6:b4:fa:c0:02:02:38:22:93:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:27:31 2025 GMT
            Not After : May  5 14:32:31 2026 GMT
        Subject: CN=5C3A13ABF738F9A0AE6D739FB5630AEE79186508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:80:cd:6e:e7:be:09:36:21:c9:4c:97:c4:
                    88:6f:56:46:95:9f:dc:45:0c:28:43:1e:7c:f1:ca:
                    ed:f5:a3:32:f2:eb:ba:16:9e:a0:3c:a4:40:b5:b2:
                    b0:44:60:42:e1:8b:0b:47:78:c4:9d:42:2d:7a:ac:
                    72:17:8d:5f:d8:76:b0:5b:47:b5:ab:40:32:97:a8:
                    2a:e8:bc:72:ec:5f:24:3e:d5:c2:c2:50:56:ad:8b:
                    69:6c:98:3c:84:3e:e6:74:d5:4d:0d:30:9c:35:5d:
                    b4:b1:62:b7:5d:6d:5a:3a:bc:c0:6c:ca:fe:93:30:
                    60:2c:b9:2d:76:58:7c:91:9e:e9:e1:f8:83:c5:07:
                    ae:f0:fd:bd:e4:fa:f4:8d:f5:f2:cc:0e:89:d5:4f:
                    ef:48:41:e7:47:88:c7:a9:e4:69:09:82:d0:7e:08:
                    2b:c3:53:42:d2:ee:92:39:fe:23:54:04:36:85:6b:
                    cc:cc:0b:e6:50:05:6c:e5:5e:d2:0b:78:88:df:07:
                    ca:25:6b:af:c6:33:f3:1c:d7:3e:b1:8a:3b:aa:93:
                    52:da:24:4d:98:87:f9:1b:c3:5b:47:6c:7c:7d:a0:
                    a9:fb:33:51:03:82:a3:b1:12:91:6e:1c:21:0a:12:
                    6d:e7:27:cc:2a:b4:61:65:9f:0b:56:6a:cd:52:7f:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:13:AB:F7:38:F9:A0:AE:6D:73:9F:B5:63:0A:EE:79:18:65:08
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131352e302f32342d3234203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:25:83:5e:fe:2e:1d:01:0f:0e:d4:1d:be:17:42:8d:b5:
         45:19:96:82:09:7c:e3:b8:03:16:75:ba:51:44:35:59:50:d8:
         a2:dc:b0:09:65:da:eb:06:93:19:8f:32:ce:25:5c:ad:c5:9b:
         75:1d:c8:22:20:ad:43:1a:70:8a:66:28:1e:89:a1:46:4e:c2:
         56:c6:85:0e:f4:68:9f:ed:dc:57:9f:df:0f:aa:a9:50:44:da:
         2e:71:19:f2:1b:b4:8e:c9:1c:b4:98:44:ba:9f:80:e6:c5:a5:
         28:28:a2:6e:f9:12:58:b6:6b:fa:c1:e2:96:be:0d:32:c6:b5:
         a7:12:e9:bf:63:60:4c:33:80:27:4c:a1:3e:87:0c:9a:5e:8e:
         39:30:36:b7:1c:bd:2a:ff:96:9e:01:4a:41:ff:98:0c:67:49:
         90:57:73:3b:5b:16:2c:2d:0b:34:2b:e5:53:e1:d7:88:2e:f1:
         00:ad:8b:e3:ee:d8:c5:a3:02:ba:6e:75:46:62:7b:77:88:ec:
         ac:dd:9d:fa:3e:1a:59:45:af:b6:aa:44:17:18:1f:a1:40:88:
         d5:d8:9e:09:77:29:e3:8a:16:f6:72:5a:8f:59:93:cd:92:31:
         b4:a8:01:a4:d0:b5:bb:d9:bd:fc:40:59:f2:d2:66:df:91:e7:
         aa:cf:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:41:40 2025 by rpki-client