Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS52613.roa
File:                     AS52613.roa (raw, json)
Hash identifier:          JYXs5pSqDQHBG/9F3RN6tx3qQb3ftQAlqujfutq7q5M=
Subject key identifier:   7A:9E:A1:15:6F:EC:49:2A:A8:C1:44:1F:2B:9C:18:9E:6D:0C:E3:49
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       03C103F9D3D02D817C128BE34B9AA82CBFF2908E
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS52613.roa
Signing time:             Thu 23 Jul 2026 18:08:45 +0000
ROA not before:           Thu 23 Jul 2026 18:03:45 +0000
ROA not after:            Thu 22 Jul 2027 18:08:45 +0000
asID:                     52613
IP address blocks:        138.36.56.0/22 maxlen: 24
                          143.0.56.0/22 maxlen: 24
                          168.232.160.0/22 maxlen: 24
                          170.231.232.0/22 maxlen: 22
                          170.231.232.0/23 maxlen: 23
                          170.231.234.0/23 maxlen: 23
                          177.125.168.0/21 maxlen: 21
                          177.125.168.0/22 maxlen: 24
                          177.125.172.0/22 maxlen: 24
                          2804:d3c::/32 maxlen: 32
                          2804:d3c::/32 maxlen: 64
                          2804:d3c:8000::/48 maxlen: 48
                          2804:d3c:8004::/48 maxlen: 48
                          2804:d3c:8100::/44 maxlen: 44
                          2804:d3c:8140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c1:03:f9:d3:d0:2d:81:7c:12:8b:e3:4b:9a:a8:2c:bf:f2:90:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Jul 23 18:03:45 2026 GMT
            Not After : Jul 22 18:08:45 2027 GMT
        Subject: CN=7A9EA1156FEC492AA8C1441F2B9C189E6D0CE349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:1a:fe:34:5b:f2:ae:7e:b2:39:6a:67:38:
                    4a:9b:8a:bd:57:b9:d6:d1:79:8a:84:ad:b4:88:73:
                    22:e7:98:04:68:7c:e7:f6:59:37:4f:5b:71:f2:a1:
                    5c:7e:6e:1e:b6:ee:eb:70:af:15:37:6c:53:ee:06:
                    69:36:55:91:10:59:69:46:ff:fc:6d:8e:bf:99:68:
                    9d:c0:1a:bf:bd:ca:26:c9:20:bf:d4:e5:73:37:76:
                    88:ee:70:24:83:66:04:34:b5:d0:58:54:f8:72:4e:
                    e3:f5:71:8b:65:55:52:33:ef:f3:de:96:d0:63:14:
                    64:1e:3c:80:df:28:08:33:48:57:ba:f4:05:7e:e1:
                    6d:f2:af:46:50:b1:fd:68:b3:b2:24:12:c6:55:59:
                    a5:4b:d2:5c:2e:3e:8e:bf:1a:c3:df:79:89:4d:15:
                    fc:56:af:23:96:4e:92:25:2f:76:7b:db:22:79:43:
                    22:17:f6:b7:24:68:6c:7e:83:95:55:ee:e6:4f:c0:
                    ea:56:65:1c:34:67:15:62:25:5d:69:e3:6c:68:8a:
                    7b:15:d0:17:30:13:27:34:15:0a:f7:d9:7b:d3:ac:
                    08:76:ea:91:c5:7e:f9:a9:af:d0:34:2b:41:1e:44:
                    d3:a8:d9:78:62:55:e3:fa:01:e0:e7:c4:ec:86:21:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:A1:15:6F:EC:49:2A:A8:C1:44:1F:2B:9C:18:9E:6D:0C:E3:49
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS52613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.56.0/22
                  143.0.56.0/22
                  168.232.160.0/22
                  170.231.232.0/22
                  177.125.168.0/21
                IPv6:
                  2804:d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:1c:0a:d2:b6:bc:4a:97:02:76:48:af:49:04:e9:68:84:a1:
         cb:0e:4c:f6:71:ab:93:4f:b6:d8:db:f9:2c:02:15:c3:52:88:
         97:86:b3:92:16:42:55:f9:2c:51:c3:54:f4:ab:3b:7a:a9:00:
         ba:da:5f:50:4c:4b:12:bd:13:84:e2:7b:df:97:b9:e2:e3:fd:
         06:e2:81:4c:d6:06:f8:dd:77:5e:5a:6b:75:ce:f3:8b:58:26:
         65:ae:5e:67:55:dd:b6:7f:15:d1:ae:21:b6:21:0a:66:40:57:
         4e:35:0e:65:3f:b9:a3:6d:00:82:a4:a2:ba:8c:b8:3f:9f:1b:
         00:ac:94:09:ab:f9:6f:f1:d0:a2:5c:05:73:f4:14:c1:97:77:
         da:cb:fb:67:00:a5:b8:80:80:2f:ad:78:e9:1a:c0:44:4b:b0:
         89:91:0a:9b:ab:bb:84:dd:a6:c8:8c:19:19:79:28:db:40:7f:
         4d:95:25:36:b6:93:66:75:68:9e:11:ea:1d:00:c1:a9:1b:b2:
         91:7a:4a:a7:fc:7d:42:fc:14:a6:40:db:b7:76:11:1b:5e:ef:
         5f:4f:e3:fc:43:d2:44:4c:40:82:4e:aa:1b:dc:69:30:a9:82:
         c0:7a:25:ef:51:1d:48:99:4c:79:35:39:a9:60:df:aa:52:b1:
         a3:ab:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:19:06 2026 by rpki-client