Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
File:                     AS53085.roa (raw, json)
Hash identifier:          8vAExpicZ/abVsjAhgFumFN+VegnHZs5khm7zgkOa6g=
Subject key identifier:   AC:65:79:AD:D5:FC:EE:90:0E:92:F6:51:EC:A6:60:A4:41:09:C7:64
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       5EAC360C0CC873D0451A09F303995A88694E5A27
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
Signing time:             Wed 29 Apr 2026 19:45:01 +0000
ROA not before:           Wed 29 Apr 2026 19:40:01 +0000
ROA not after:            Wed 28 Apr 2027 19:45:01 +0000
asID:                     53085
IP address blocks:        132.255.148.0/22 maxlen: 24
                          187.33.160.0/20 maxlen: 24
                          191.5.144.0/20 maxlen: 24
                          2804:1790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ac:36:0c:0c:c8:73:d0:45:1a:09:f3:03:99:5a:88:69:4e:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:01 2026 GMT
            Not After : Apr 28 19:45:01 2027 GMT
        Subject: CN=AC6579ADD5FCEE900E92F651ECA660A44109C764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:19:9a:6e:b2:67:84:13:81:80:95:7a:ab:
                    48:cc:1b:9b:8b:3c:eb:fc:13:ed:24:5a:b0:e2:ac:
                    a6:c6:5e:d6:df:b7:40:fe:51:86:59:92:23:9b:40:
                    9b:72:3e:3c:2f:f0:c6:c5:5c:81:43:bf:4b:06:0e:
                    24:a7:8f:07:22:ed:40:9b:c8:e1:b6:7a:cf:0e:cf:
                    73:12:0b:7d:0d:10:2b:5d:55:f6:dd:d7:e0:c7:a5:
                    fd:b9:26:f7:7d:3d:41:89:6e:5e:83:e9:b6:ae:36:
                    a0:e7:a4:e0:f1:84:9a:16:21:af:0b:3d:44:ac:09:
                    82:9c:03:7b:0e:15:58:20:7c:60:fa:d6:e7:00:83:
                    49:b8:c6:43:ae:86:c5:6b:c9:92:f8:e5:ed:06:79:
                    65:22:b9:c8:8d:0b:91:a8:fd:61:75:97:31:6b:7d:
                    ef:46:e7:6a:73:4d:46:38:c6:7c:a0:19:59:ec:be:
                    82:ba:94:f9:05:10:10:43:d6:6f:0b:02:65:0f:83:
                    83:d8:ff:16:95:51:c6:0e:9f:90:96:a7:c7:23:33:
                    b6:21:7a:60:e0:d6:8d:68:ec:4a:e9:ba:3d:9b:12:
                    b8:d7:a6:06:03:ee:86:b6:fd:71:48:34:1b:bf:c0:
                    98:4b:6d:be:e7:e9:5f:e5:67:9b:a8:55:ef:4a:2c:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:65:79:AD:D5:FC:EE:90:0E:92:F6:51:EC:A6:60:A4:41:09:C7:64
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.148.0/22
                  187.33.160.0/20
                  191.5.144.0/20
                IPv6:
                  2804:1790::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:3a:1f:16:cb:3b:92:1c:40:da:8c:b0:79:d6:df:88:ab:
         39:f4:1a:70:3f:32:a9:b1:4f:05:0a:00:58:8b:aa:e2:70:a6:
         6d:0b:ee:ff:45:bc:01:c7:7e:1a:41:72:d2:37:db:f5:1a:09:
         07:e1:77:f7:c2:c7:be:63:ea:83:2e:aa:69:09:21:e4:bf:22:
         30:45:c5:6c:84:48:63:58:01:47:ce:66:aa:99:0f:6f:d3:94:
         24:d3:e8:0e:ba:c2:7f:97:f9:d5:a2:68:ca:7c:c1:31:db:98:
         0e:03:d9:11:44:f1:01:24:d1:1e:0b:2e:ad:58:5f:94:07:bc:
         7c:0f:77:66:17:df:06:7c:2f:9b:7c:6f:7c:f4:0b:ce:0b:d0:
         85:14:5d:34:b5:de:e0:fb:8e:24:68:68:1d:24:08:ef:e6:33:
         ff:75:9e:77:a2:ec:8e:f7:ef:78:24:b2:1f:b1:20:3f:4c:79:
         16:2d:ab:df:df:32:7a:2c:31:b3:82:55:53:5f:34:1d:86:59:
         a6:77:d6:71:41:53:0b:e9:77:eb:f7:22:e5:72:f6:fb:a0:a8:
         94:6e:d1:a6:5a:9c:20:be:c2:93:88:48:e1:3d:89:77:f3:bd:
         d8:26:cd:98:0d:2b:ec:18:28:b9:5c:48:0e:b9:08:1f:73:1d:
         0e:3e:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:42 2026 by rpki-client