Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
File:                     AS52866.roa (raw, json)
Hash identifier:          sY43Q11mlrZ3qM7+yZtCZSHWYwTu3qCh+Eo3za0a0N0=
Subject key identifier:   EE:7F:F2:BD:DC:95:81:50:B2:34:82:52:93:A3:14:98:25:DF:46:BC
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       7017AB706734F8C3B49DE671926046B3952574A3
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
Signing time:             Wed 10 Apr 2024 22:11:50 +0000
ROA not before:           Wed 10 Apr 2024 22:06:50 +0000
ROA not after:            Wed 09 Apr 2025 22:11:50 +0000
asID:                     52866
IP address blocks:        131.100.128.0/22 maxlen: 24
                          138.94.112.0/22 maxlen: 24
                          170.81.244.0/22 maxlen: 24
                          177.125.24.0/22 maxlen: 24
                          186.233.220.0/22 maxlen: 24
                          2804:bdc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:ab:70:67:34:f8:c3:b4:9d:e6:71:92:60:46:b3:95:25:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Apr 10 22:06:50 2024 GMT
            Not After : Apr  9 22:11:50 2025 GMT
        Subject: CN=EE7FF2BDDC958150B234825293A3149825DF46BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:d8:62:8f:87:f1:cf:aa:3b:db:69:03:c5:
                    b3:bb:75:8c:61:46:70:72:42:4c:0a:cc:1d:1b:c3:
                    48:9d:a0:fa:40:ba:e9:6c:e2:06:9c:1e:be:0b:a4:
                    b4:4b:18:8a:67:46:63:7b:33:68:2b:95:06:da:5d:
                    ae:23:b9:9b:5f:bb:e5:1c:77:bb:06:f5:eb:bc:54:
                    7b:aa:c9:01:17:dc:0b:8c:af:57:6c:a5:dc:62:a0:
                    c8:36:d3:ce:c9:7e:e5:b6:9a:af:7c:b4:19:23:9a:
                    f4:19:da:e9:c3:64:ea:02:34:c7:cd:28:6d:f9:eb:
                    4f:38:08:6d:d3:4f:c7:74:e4:98:fd:65:b4:14:4c:
                    7f:e2:2a:8b:59:95:7a:9a:cf:13:d7:90:5e:02:95:
                    6a:6c:79:14:3a:bf:29:3d:c6:ee:80:2d:31:8b:71:
                    97:c9:10:35:de:c7:76:ef:ab:90:50:f8:9e:8a:32:
                    70:e3:6c:39:b4:dd:c9:9c:82:f7:fe:d6:e3:1d:90:
                    6a:7a:b6:b7:5e:9e:a4:45:8b:6f:02:37:bb:95:2a:
                    df:8e:78:1b:f6:dc:4a:40:fa:9f:b3:28:8a:7a:d5:
                    df:ad:38:29:b1:06:e0:90:e6:30:09:ef:cc:43:ff:
                    cd:af:b7:dd:07:65:3f:3f:dd:8d:26:0f:a2:96:cb:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:F2:BD:DC:95:81:50:B2:34:82:52:93:A3:14:98:25:DF:46:BC
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.128.0/22
                  138.94.112.0/22
                  170.81.244.0/22
                  177.125.24.0/22
                  186.233.220.0/22
                IPv6:
                  2804:bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:b7:7a:70:a1:03:f3:90:48:2c:a3:35:8c:49:a5:0d:6d:
         54:e8:87:c2:2e:bf:aa:8c:71:09:cb:e4:ac:da:c5:16:c7:f0:
         f1:96:a1:78:38:75:fc:54:5b:a6:b8:64:ec:b6:46:d9:5d:56:
         01:b1:10:d2:9b:cd:5d:a5:37:fc:34:05:d5:0a:31:fb:5a:eb:
         06:a3:b7:fa:38:d7:ce:ad:b0:e0:ad:a3:2d:f3:de:91:7a:34:
         15:bd:29:b1:c4:b0:3f:3d:55:78:8a:7f:c7:89:04:5c:5c:61:
         7a:2d:72:47:83:81:97:3f:05:5f:43:56:a6:31:39:ff:f2:3d:
         5e:56:6a:7a:2a:35:a9:46:74:bd:d1:a7:ff:64:40:24:22:88:
         3d:0d:01:df:44:97:ae:35:7f:b2:f5:4d:64:86:5f:d3:77:52:
         ea:88:55:2e:a2:f7:3d:03:9e:cc:58:c1:ba:ea:2b:b5:20:d0:
         1e:79:28:89:3c:cf:97:5e:5e:e1:4a:50:0d:1a:bc:d5:5b:ed:
         b8:08:87:86:8c:54:11:41:16:5a:b1:12:de:86:5e:e2:7c:42:
         9b:4b:2b:7b:06:34:bd:9c:f2:c9:b3:be:ec:80:33:da:e7:94:
         10:2e:3a:5d:ac:45:1d:6e:5f:9f:dd:51:0d:44:b0:0a:fb:49:
         e7:7f:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org