Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa
File:                     3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (raw, json)
Hash identifier:          +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=
Subject key identifier:   13:D1:41:9D:A4:05:46:81:33:B0:05:4F:09:2F:A0:5F:3E:89:00:7A
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       5F7D5EE528C5987256C742EAB485EE49042E70D0
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa
Signing time:             Fri 19 Sep 2025 13:09:55 +0000
ROA not before:           Fri 19 Sep 2025 13:04:55 +0000
ROA not after:            Fri 18 Sep 2026 13:09:55 +0000
asID:                     53138
IP address blocks:        177.53.224.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7d:5e:e5:28:c5:98:72:56:c7:42:ea:b4:85:ee:49:04:2e:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Sep 19 13:04:55 2025 GMT
            Not After : Sep 18 13:09:55 2026 GMT
        Subject: CN=13D1419DA405468133B0054F092FA05F3E89007A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:1f:20:f6:7c:e7:dd:fa:c5:e2:38:bc:72:
                    51:90:2f:d0:ee:2f:45:ae:45:72:f1:38:38:c5:1c:
                    a5:36:08:00:3d:3f:3b:f5:6f:37:e1:d0:70:8a:e5:
                    dd:87:63:65:54:88:11:c6:18:74:a4:1f:5d:e7:9a:
                    6f:a8:3e:20:cb:f3:5f:2e:67:0c:3c:85:4d:22:f4:
                    89:49:75:b7:67:03:bd:26:ad:66:5f:28:b1:34:ec:
                    19:fe:40:5a:d6:38:25:2f:fa:22:8c:8e:8e:91:64:
                    aa:71:ea:0d:5e:19:4e:c9:5e:12:91:13:3a:a9:c2:
                    05:60:b1:08:08:33:fa:34:a6:cd:7b:a5:b8:6d:e1:
                    b5:4e:d5:10:58:f3:b5:0a:e5:a2:82:c7:a1:c2:c5:
                    c4:89:ac:34:60:2e:21:dc:4e:e3:1f:9d:80:4a:45:
                    27:8f:38:eb:20:4d:00:15:c8:10:98:29:60:ed:dd:
                    58:7e:a2:02:07:8a:ea:48:be:54:d0:32:20:23:68:
                    92:0b:74:47:67:49:f5:1a:5c:83:39:f0:e1:a8:56:
                    2e:2d:b8:69:aa:dd:9d:ac:ff:b2:61:3c:57:e3:0b:
                    08:e0:c1:8f:de:05:a3:ce:b1:e4:19:07:7e:6b:97:
                    bf:ea:cf:32:b0:71:56:09:22:e0:b7:18:9c:02:df:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D1:41:9D:A4:05:46:81:33:B0:05:4F:09:2F:A0:5F:3E:89:00:7A
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:00:85:8e:d7:91:1e:20:3f:50:9e:e7:1e:14:1a:a2:97:0c:
         7f:10:e4:7e:9c:52:dc:4b:1b:a3:21:2a:60:fc:1e:1a:95:60:
         f5:64:06:56:70:07:70:8a:93:7e:53:26:4b:a6:d5:0e:c3:f2:
         ca:d7:6c:60:5b:6f:41:51:14:55:5f:26:58:7d:60:8c:94:2a:
         d1:b6:df:76:43:94:ec:50:d4:89:96:d9:2c:9c:a4:d3:26:09:
         ec:a9:a4:cd:fe:71:30:f7:28:17:fd:68:d7:f7:ce:e0:95:36:
         af:86:39:2e:0b:44:e8:52:49:cd:46:35:b6:47:84:c9:13:aa:
         4f:36:97:fc:8e:dd:3a:f6:77:e9:71:0c:fc:06:64:4a:a9:c8:
         e2:b4:99:bd:fb:db:79:88:66:80:1e:94:f9:35:7b:96:1f:4c:
         bd:1c:98:12:66:61:7f:be:52:09:58:aa:fb:4c:c2:fe:66:02:
         bb:3c:85:06:68:3d:b5:de:bd:f7:97:b8:8f:c3:5e:a2:de:4e:
         24:28:98:cd:01:e7:c7:3e:92:02:6d:aa:80:0d:00:f9:45:0a:
         33:04:2d:c1:20:13:1a:d1:1a:32:e3:6a:0f:fa:9b:23:4d:0d:
         89:0e:f9:5b:04:71:cc:7c:72:2d:2d:f8:fe:2e:d9:13:c2:ec:
         56:b8:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:16 2025 by rpki-client