Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa
File:                     AS53191.roa (raw, json)
Hash identifier:          YRj5jFdYku7hBACKoPIF6cTj6CYqCKeoK+TmUR6pUAY=
Subject key identifier:   93:A3:F7:D5:B1:14:56:85:46:05:4E:07:55:07:12:72:B9:BC:D8:E1
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       4A3D1D9D81157E38BFD1037DC29A87218B978118
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa
Signing time:             Mon 25 Nov 2024 16:59:29 +0000
ROA not before:           Mon 25 Nov 2024 16:54:29 +0000
ROA not after:            Mon 24 Nov 2025 16:59:29 +0000
asID:                     53191
IP address blocks:        177.8.216.0/22 maxlen: 24
                          186.232.128.0/21 maxlen: 24
                          2804:f2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 03:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:1d:9d:81:15:7e:38:bf:d1:03:7d:c2:9a:87:21:8b:97:81:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Nov 25 16:54:29 2024 GMT
            Not After : Nov 24 16:59:29 2025 GMT
        Subject: CN=93A3F7D5B114568546054E0755071272B9BCD8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:3d:36:6f:26:a3:d5:24:27:c2:6c:2f:7e:
                    53:7b:f9:15:88:50:df:69:17:09:2a:1a:94:25:47:
                    86:83:64:13:e1:b8:90:24:e7:5f:dc:51:10:c3:13:
                    08:bd:62:cd:b9:e7:99:87:05:36:92:06:97:60:27:
                    93:0d:b4:5d:5d:a6:01:fc:94:2b:36:6a:78:24:15:
                    52:c3:85:08:42:f5:1f:b8:32:55:2c:48:fd:2a:92:
                    2f:73:71:fe:10:af:c7:db:ff:16:a6:d9:da:88:37:
                    33:b3:cd:83:34:35:23:d6:53:06:6a:5b:34:be:36:
                    3b:9b:85:3e:eb:42:ae:22:5b:a1:25:e6:85:00:6a:
                    86:13:80:f8:65:f0:51:8a:65:1c:2e:5d:12:d8:ed:
                    81:da:de:98:9d:21:e4:80:8f:17:ff:8e:eb:a9:fb:
                    17:ea:c6:62:c5:e6:3f:56:91:49:3d:a9:55:3e:4a:
                    b9:27:4a:d4:4b:18:71:df:de:5b:f8:7a:5e:da:49:
                    74:45:8d:b9:37:77:87:70:84:21:b0:bc:33:fc:11:
                    68:11:95:a3:9c:9e:0b:b3:9d:f9:e1:79:ac:47:2d:
                    70:cc:ce:27:d9:84:cb:ee:92:ca:e6:04:8e:b9:fe:
                    43:dd:9c:a6:f2:97:21:05:69:ca:32:1d:a0:27:aa:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:F7:D5:B1:14:56:85:46:05:4E:07:55:07:12:72:B9:BC:D8:E1
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53191.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.216.0/22
                  186.232.128.0/21
                IPv6:
                  2804:f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:6c:00:0b:99:17:01:3a:f5:0d:99:dc:c8:e4:6b:92:bf:68:
         b8:79:61:d5:a4:95:a0:7f:0c:07:a0:01:f4:0b:96:c8:ef:f7:
         74:89:9f:02:bd:8a:95:57:cb:a7:77:aa:ff:b0:ec:e5:57:8e:
         3d:57:92:45:bd:7c:53:26:02:da:78:e7:5c:35:77:45:ea:2c:
         98:02:3a:04:32:5f:33:5a:35:8b:c8:50:eb:62:df:cd:c8:94:
         d5:fd:49:06:2a:07:b4:70:a3:a6:27:a1:5a:aa:22:ac:70:98:
         0b:4e:87:72:d4:5d:ff:4a:3c:1f:67:e2:a0:83:82:77:0e:08:
         e3:c6:4e:da:6a:bc:84:0f:73:9a:16:8c:61:f5:bd:ab:16:a5:
         c7:ac:78:d2:46:b7:6d:d7:ff:40:bb:3e:d4:1b:df:75:9a:e4:
         ab:79:9f:1d:0c:e7:88:54:3d:ee:0d:a7:22:2a:c2:d2:1d:fc:
         1e:1c:13:c6:40:c3:2c:57:38:54:5b:ff:8e:bb:35:a7:b9:4d:
         5e:3e:16:77:5e:5e:c4:51:bf:ee:b8:31:93:ba:e9:04:c8:a8:
         1d:da:ee:0a:7c:00:a4:a9:da:0b:fd:8a:54:b5:61:ba:9d:14:
         5e:e0:80:a2:ea:dc:90:21:cb:c5:a0:69:18:63:f5:1c:fc:8f:
         9b:8d:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:14:02 2025 by rpki-client