Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS53191.roa
File:                     AS53191.roa (raw, json)
Hash identifier:          NUMoyuTtJqpZ+ory/uU+6xDGvWBQP5sQwnidBLlinTM=
Subject key identifier:   92:D7:7B:74:D9:2D:70:B9:70:12:D7:33:1F:CE:5D:3B:D8:3D:CE:DE
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       2D014D2BCFB5DD1AB8B9345B2329931626B9EB8D
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS53191.roa
Signing time:             Mon 29 Sep 2025 11:46:40 +0000
ROA not before:           Mon 29 Sep 2025 11:41:40 +0000
ROA not after:            Mon 28 Sep 2026 11:46:40 +0000
asID:                     53191
IP address blocks:        177.8.216.0/22 maxlen: 24
                          186.232.128.0/21 maxlen: 24
                          2804:f2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:01:4d:2b:cf:b5:dd:1a:b8:b9:34:5b:23:29:93:16:26:b9:eb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:40 2025 GMT
            Not After : Sep 28 11:46:40 2026 GMT
        Subject: CN=92D77B74D92D70B97012D7331FCE5D3BD83DCEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:f2:ec:67:8c:68:a3:33:17:e8:31:eb:f2:
                    12:48:53:97:84:31:a3:6f:4a:e9:94:96:19:81:8b:
                    b3:a6:b1:a9:79:f8:cf:4e:5f:39:4e:6a:cc:44:3a:
                    2a:dc:fb:27:f3:d3:6c:8e:b3:40:55:62:32:29:4d:
                    b9:6b:01:fb:40:a1:d9:12:66:88:53:39:51:07:bb:
                    9c:91:e5:22:e0:ed:a1:3b:d3:b7:9b:99:29:2a:cd:
                    c5:0f:26:e7:13:a6:16:22:8b:c4:e6:66:49:18:dc:
                    26:87:5f:23:6f:29:8b:33:8b:e6:13:26:e6:92:31:
                    e7:f7:ba:19:a1:0e:88:43:56:7b:a3:4d:e3:0f:2f:
                    cd:e2:8f:fb:64:8a:88:e1:b4:22:57:ef:b4:96:c0:
                    6d:71:a5:30:79:a2:e4:94:56:1e:1e:e6:48:87:b9:
                    b1:60:6d:9b:0d:0d:ac:5d:18:7e:eb:25:c0:5f:e1:
                    a0:8a:f0:94:1d:a1:db:a0:a5:97:82:85:e6:b3:de:
                    0e:b3:bc:91:52:51:8b:98:14:c8:75:2b:df:3d:8f:
                    d3:3f:79:be:85:c5:db:3a:c9:9b:6f:54:79:09:e5:
                    79:5b:fd:4f:16:4e:09:57:73:7e:3e:5d:3e:09:d0:
                    b7:ae:b3:56:6a:bd:6b:81:ee:22:2d:1c:a0:d7:c0:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D7:7B:74:D9:2D:70:B9:70:12:D7:33:1F:CE:5D:3B:D8:3D:CE:DE
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS53191.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.216.0/22
                  186.232.128.0/21
                IPv6:
                  2804:f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:77:de:0d:4d:0b:82:65:88:f3:2d:a3:11:6a:1c:9f:b1:
         69:27:2d:9b:c8:30:a4:85:aa:29:a8:68:5d:4c:72:4d:13:f0:
         a1:17:5c:88:6f:6b:3a:f2:a9:b4:18:36:f4:b7:bd:8a:4c:be:
         ed:ea:e0:50:e0:0c:3a:8d:36:19:00:1e:a7:a5:2c:fa:32:bc:
         cd:b8:46:13:2d:53:f6:59:8a:4c:5b:ea:b2:2d:1f:62:a3:d3:
         95:16:fa:06:8c:06:3e:5f:be:cd:59:70:1e:0c:de:11:d5:77:
         fc:03:22:01:8f:5f:d8:f1:46:ed:ec:46:6b:69:2c:23:15:e5:
         13:40:46:ea:e7:97:96:d6:da:57:bc:ee:0c:19:10:19:c8:f1:
         bd:47:b7:41:25:97:78:6d:1b:f1:e6:0a:f6:4d:e1:ac:93:1c:
         a8:7e:c3:c6:a0:db:1b:ce:c9:05:f5:d9:84:21:34:5d:cd:ad:
         f1:5b:41:88:6d:7c:24:c4:5b:54:86:2d:9a:02:cd:21:a7:64:
         e6:20:e0:23:2a:8f:95:2d:ee:a5:f0:31:c5:2a:65:69:a1:07:
         c8:c0:cb:48:b4:dc:7c:4d:d4:f4:52:cc:0e:ad:48:b3:1f:60:
         e6:a1:9b:64:0d:52:99:d7:dc:50:82:19:d4:35:16:1c:49:45:
         52:04:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:34 2025 by rpki-client