Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa
File:                     AS53062.roa (raw, json)
Hash identifier:          cEAQmeo50zaWUEwnWVigrtqD3n1rLkF/UX5KpBLOAPY=
Subject key identifier:   15:44:1F:E6:55:E7:4A:B6:A4:94:31:F0:A3:C6:18:20:67:14:A9:1A
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       148B772B82AA2D925A54935042E7029152F13BB7
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa
Signing time:             Mon 25 Aug 2025 13:35:15 +0000
ROA not before:           Mon 25 Aug 2025 13:30:15 +0000
ROA not after:            Mon 24 Aug 2026 13:35:15 +0000
asID:                     53062
IP address blocks:        179.51.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8b:77:2b:82:aa:2d:92:5a:54:93:50:42:e7:02:91:52:f1:3b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Aug 25 13:30:15 2025 GMT
            Not After : Aug 24 13:35:15 2026 GMT
        Subject: CN=15441FE655E74AB6A49431F0A3C618206714A91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:6b:88:58:a1:2c:4b:1f:04:9a:56:20:9f:
                    d5:4c:2a:ac:25:e0:89:bf:a1:37:aa:3e:0c:09:38:
                    32:a7:e6:fd:1a:7a:36:70:6f:82:a1:b4:70:f9:65:
                    67:39:1a:00:94:9d:53:5d:00:ad:6c:49:2a:a3:c2:
                    f9:c6:f3:d1:b1:74:4b:f5:00:50:92:03:78:91:02:
                    2a:72:5c:e5:b8:77:84:b7:01:e4:47:58:95:77:aa:
                    61:6b:90:71:b9:fc:e2:cb:63:06:7c:81:49:6a:ed:
                    98:3d:62:94:2f:13:ae:0c:2f:0e:54:3a:d8:59:76:
                    95:76:d3:95:63:e3:ce:82:4c:0f:90:e5:e7:84:7f:
                    d5:a1:7d:3e:87:de:6f:db:e5:bb:57:65:65:51:a3:
                    1b:30:a9:8c:f0:aa:a3:f6:aa:3f:00:31:9d:ed:dc:
                    a5:0c:cb:d9:20:b9:37:b8:6b:10:62:3d:b2:41:97:
                    50:a0:93:8e:11:bd:15:aa:1c:4f:18:9d:6d:de:b8:
                    2d:75:5c:7f:c5:f9:1a:cf:da:60:b6:37:b2:80:63:
                    72:28:37:35:cc:31:4f:c7:a2:7b:ee:a3:bb:53:11:
                    be:02:46:57:c5:24:ce:cb:62:3f:e9:48:47:3f:93:
                    31:30:4e:4b:d5:c4:44:66:a3:fb:b4:70:09:0c:98:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:44:1F:E6:55:E7:4A:B6:A4:94:31:F0:A3:C6:18:20:67:14:A9:1A
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:05:94:1e:7d:7f:99:11:d1:5f:9a:36:c1:7a:5b:91:39:c1:
         e8:ae:d8:eb:25:51:d2:f8:d0:80:37:d7:10:1e:a5:58:5d:65:
         b9:43:48:d2:3d:d1:25:80:e7:52:05:9f:5f:f9:b1:a1:05:98:
         7a:95:3a:ca:c6:be:f2:fd:29:f9:5c:4a:75:09:0f:cd:70:2f:
         d7:8c:df:4a:08:11:01:4c:ce:d2:ed:46:e6:79:8e:21:58:b3:
         2e:ac:f5:e2:48:2c:ea:34:f9:df:73:90:c6:c1:d6:16:c0:54:
         ea:50:5d:09:35:71:c6:f1:17:21:91:cb:fb:9f:5d:37:9a:fd:
         ab:aa:a8:4d:4c:94:46:1b:3a:da:d1:13:83:ca:2b:fd:35:f2:
         09:f2:26:01:d1:cf:58:e8:89:fd:b9:38:d6:71:a8:e0:63:c2:
         04:82:41:23:9a:d2:d0:cc:86:6a:09:3c:c4:f5:71:8d:5b:91:
         04:3e:48:ee:06:24:a4:89:f5:54:0d:0e:39:2d:3d:65:a6:6e:
         58:35:8f:0f:cb:94:93:1e:16:cb:c0:33:d9:ba:84:86:fc:9f:
         60:6a:41:6b:09:f8:d8:fd:b2:35:74:41:e0:3a:0f:c6:56:a0:
         68:6e:85:e1:97:40:1f:15:28:a0:9e:e7:8e:3a:e1:46:fc:2e:
         6e:f8:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:02:36 2025 by rpki-client