Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
File:                     AS52866.roa (raw, json)
Hash identifier:          t1xp8cgcwusJDFmCRDHkFb5HdcIr8m49J+1uav1FUIc=
Subject key identifier:   64:64:1A:A7:02:69:81:23:74:CE:49:EE:B1:4B:F2:18:2C:C1:9D:BD
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       6F181197B12D6A8FDAA9084B3D168DFBDC39358C
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
Signing time:             Wed 12 Mar 2025 23:23:52 +0000
ROA not before:           Wed 12 Mar 2025 23:18:52 +0000
ROA not after:            Wed 11 Mar 2026 23:23:52 +0000
asID:                     52866
IP address blocks:        131.100.128.0/22 maxlen: 24
                          138.94.112.0/22 maxlen: 24
                          170.81.244.0/22 maxlen: 24
                          177.125.24.0/22 maxlen: 24
                          186.233.220.0/22 maxlen: 24
                          2804:bdc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:18:11:97:b1:2d:6a:8f:da:a9:08:4b:3d:16:8d:fb:dc:39:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Mar 12 23:18:52 2025 GMT
            Not After : Mar 11 23:23:52 2026 GMT
        Subject: CN=64641AA70269812374CE49EEB14BF2182CC19DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:24:4e:32:a9:e4:21:9e:d0:55:49:e7:9c:
                    ff:1d:80:0f:5d:bf:f4:f6:fe:17:99:7c:3d:28:cc:
                    41:c2:44:01:51:4c:e4:65:8d:70:c2:55:94:22:ad:
                    30:7c:52:9f:9d:c3:d6:c8:44:73:eb:59:8d:5d:8c:
                    af:c4:97:2d:b4:ac:34:fc:34:da:f4:d7:76:76:67:
                    4e:64:32:6d:4b:f9:9f:12:48:21:fc:bf:33:ee:23:
                    ac:f1:d1:e0:08:3f:37:f6:d4:fe:fe:d5:99:85:bd:
                    3a:a3:78:15:40:cb:2d:3f:c7:aa:a0:c2:b8:1c:1b:
                    57:e9:c6:53:f2:99:4c:81:7f:e9:cc:be:e5:08:0a:
                    ff:39:2b:f8:8d:64:81:3f:bf:0b:fa:09:62:b2:0b:
                    4e:63:c9:6a:7b:5d:10:a8:da:f9:4d:3e:2d:91:ad:
                    76:bb:02:c8:08:e6:a0:16:5f:c0:88:35:3d:46:e3:
                    52:7b:b5:6c:5d:d7:40:68:cb:3b:fe:83:db:ee:18:
                    5b:1f:cd:9d:5b:2c:6a:6e:a1:ce:6b:9a:c2:78:12:
                    e3:78:5d:60:14:f9:ef:35:a9:ef:98:fc:3d:c9:15:
                    1e:da:fd:5d:bf:8e:92:fe:c1:f0:48:a9:5b:d2:78:
                    0f:8d:29:7b:90:57:eb:5d:9e:81:2c:e3:33:7d:a9:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:1A:A7:02:69:81:23:74:CE:49:EE:B1:4B:F2:18:2C:C1:9D:BD
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.128.0/22
                  138.94.112.0/22
                  170.81.244.0/22
                  177.125.24.0/22
                  186.233.220.0/22
                IPv6:
                  2804:bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:c4:1e:19:6a:51:ab:09:68:56:eb:cb:29:9f:47:d4:72:
         c2:e7:43:63:9e:7e:b0:11:bb:d4:98:13:e2:98:fb:dc:91:8f:
         f6:b4:52:01:54:fe:d2:c9:70:8e:42:ed:a0:d0:b2:92:d7:15:
         45:e5:4f:c9:0c:18:d8:93:01:c9:6b:e1:7c:8f:12:57:70:cc:
         9f:55:fa:b8:41:36:4e:db:70:ef:c0:32:29:e8:3c:4d:82:6b:
         be:b7:d8:d3:2d:7b:88:cd:af:2c:90:b6:6b:5c:48:24:1d:12:
         9c:cc:d0:de:bb:df:4e:a8:37:c7:cb:39:86:ec:c9:22:31:76:
         3a:2f:66:71:3e:ba:53:94:4a:eb:83:c0:71:fa:a2:15:83:b2:
         88:eb:bc:f5:68:bf:80:36:b7:18:d1:4c:91:ad:08:86:53:54:
         1d:28:dc:3d:9f:63:86:57:ca:7f:00:6e:a2:28:54:69:1f:b6:
         5d:5a:c3:5a:bd:35:6f:ba:b7:1e:41:60:28:6c:76:da:e9:07:
         70:1e:d0:22:14:e3:64:67:d4:5b:c2:f2:26:38:37:ed:52:ca:
         78:86:a7:a4:40:04:66:4d:4d:2e:1f:9f:98:28:82:62:c3:25:
         f7:62:b1:d3:ef:88:13:96:da:40:7e:20:e6:3e:da:d7:00:b5:
         a6:66:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:21 2025 by rpki-client