Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa
File:                     AS53135.roa (raw, json)
Hash identifier:          CQibmLL0J+/X156f4BeQ8I1nCELQK3E8IOuji1NbDiU=
Subject key identifier:   E1:5E:55:13:65:B5:35:74:1B:70:6F:29:5B:FF:18:C2:E3:19:EA:B0
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       105740965979C6E40D3EC969EDB8BE20D8DA9E81
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa
Signing time:             Wed 10 Apr 2024 22:01:15 +0000
ROA not before:           Wed 10 Apr 2024 21:56:15 +0000
ROA not after:            Wed 09 Apr 2025 22:01:15 +0000
asID:                     53135
IP address blocks:        131.221.92.0/22 maxlen: 24
                          138.219.152.0/22 maxlen: 24
                          168.227.232.0/22 maxlen: 24
                          170.79.184.0/22 maxlen: 24
                          177.39.240.0/21 maxlen: 24
                          177.39.248.0/21 maxlen: 24
                          186.192.176.0/20 maxlen: 24
                          186.193.48.0/20 maxlen: 24
                          191.243.112.0/20 maxlen: 24
                          2804:1054::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:40:96:59:79:c6:e4:0d:3e:c9:69:ed:b8:be:20:d8:da:9e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Apr 10 21:56:15 2024 GMT
            Not After : Apr  9 22:01:15 2025 GMT
        Subject: CN=E15E551365B535741B706F295BFF18C2E319EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:e5:c6:f4:87:5e:63:f5:81:ce:42:09:5b:
                    53:67:b2:1a:ca:49:ae:0a:70:0a:b0:26:1b:a1:e5:
                    4a:ee:4a:2d:93:cd:4c:08:88:a2:be:ba:5e:9d:e7:
                    a1:21:e0:99:40:96:9b:bf:6c:81:c4:7d:a3:ca:d5:
                    fc:be:cc:7a:c5:cd:1b:92:2f:da:cc:90:30:45:02:
                    db:92:06:94:d2:ec:ab:c2:79:83:cd:f5:5a:0b:9e:
                    5f:96:ad:9c:87:db:ab:23:f1:ba:e7:bc:e3:42:e8:
                    2a:9a:67:3f:af:a4:58:c6:af:7a:14:4d:4a:07:6a:
                    ed:ec:50:e2:e0:be:1c:25:f1:f5:d3:cc:b4:a6:d2:
                    6b:7a:3f:df:dd:e9:7e:c7:46:1b:39:93:77:7b:96:
                    07:34:6d:85:3f:35:07:88:1f:ee:a7:ff:4f:a8:f9:
                    72:c5:e3:50:41:9e:4a:4c:84:5d:5f:63:90:d0:43:
                    d0:cd:4a:d7:d5:a4:3f:9d:d7:95:c1:0d:2f:18:cb:
                    ea:47:66:d0:7a:79:7b:41:16:28:9a:9f:d1:cb:d4:
                    9b:51:2c:5f:21:75:ee:d8:bf:f7:f7:5d:c4:74:31:
                    72:ef:23:dc:5f:df:eb:31:5e:b9:30:30:67:10:63:
                    fd:bc:cf:62:07:1d:11:a6:cd:f2:b6:14:05:2c:5b:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5E:55:13:65:B5:35:74:1B:70:6F:29:5B:FF:18:C2:E3:19:EA:B0
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.92.0/22
                  138.219.152.0/22
                  168.227.232.0/22
                  170.79.184.0/22
                  177.39.240.0/20
                  186.192.176.0/20
                  186.193.48.0/20
                  191.243.112.0/20
                IPv6:
                  2804:1054::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:53:0f:ac:02:ba:64:6a:ef:2c:e4:72:40:f0:82:09:5d:
         6c:c1:12:cd:7c:81:e6:de:e6:b0:57:5e:1a:b9:87:e3:66:25:
         3c:c8:c0:a7:27:4e:82:67:ce:bb:93:9f:aa:94:fa:74:2c:b1:
         88:a1:b3:5a:9b:ef:61:bd:83:a9:12:a4:b8:fc:df:c2:87:04:
         54:39:a8:96:73:db:3c:15:8e:8b:83:34:d8:94:6e:c1:e1:35:
         b3:52:e1:ce:cc:39:93:f7:51:d7:50:fc:48:f3:0e:85:ac:e6:
         01:fe:18:43:d9:6c:68:93:16:6a:e5:7e:e0:68:63:48:25:17:
         8b:af:cb:b5:49:d7:a3:00:47:48:81:fe:da:17:45:fd:51:97:
         c0:ca:f8:25:08:82:ea:f6:51:29:b1:43:2c:1b:24:96:d0:80:
         06:28:4b:9e:2b:6e:81:17:a6:df:53:ff:3b:3b:33:35:19:1f:
         42:69:25:96:b8:2e:ae:82:5a:07:62:80:fb:33:dd:7a:62:d6:
         f2:2c:39:3c:ae:48:06:ff:42:3c:a9:d0:b6:c2:b3:8e:2d:89:
         64:89:a0:2c:dd:d1:52:28:72:e1:90:cf:25:c0:79:86:7c:6d:
         96:ae:4a:af:c5:79:1d:3e:0c:c3:20:b4:a0:da:49:70:08:a1:
         9d:13:a5:e0
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUEFdAlll5xuQNPslp7bi+INjanoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNDA0MTAyMTU2MTVaFw0yNTA0MDkyMjAxMTVaMDMxMTAvBgNV
BAMTKEUxNUU1NTEzNjVCNTM1NzQxQjcwNkYyOTVCRkYxOEMyRTMxOUVBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjOXG9IdeY/WBzkIJW1NnshrK
Sa4KcAqwJhuh5UruSi2TzUwIiKK+ul6d56Eh4JlAlpu/bIHEfaPK1fy+zHrFzRuS
L9rMkDBFAtuSBpTS7KvCeYPN9VoLnl+WrZyH26sj8brnvONC6CqaZz+vpFjGr3oU
TUoHau3sUOLgvhwl8fXTzLSm0mt6P9/d6X7HRhs5k3d7lgc0bYU/NQeIH+6n/0+o
+XLF41BBnkpMhF1fY5DQQ9DNStfVpD+d15XBDS8Yy+pHZtB6eXtBFiian9HL1JtR
LF8hde7Yv/f3XcR0MXLvI9xf3+sxXrkwMGcQY/28z2IHHRGmzfK2FAUsWzT7AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU4V5VE2W1NXQbcG8pW/8YwuMZ6rAwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTNTMx
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8E
STBHMDYEAgABMDADBAKD3VwDBAKK25gDBAKo4+gDBAKqT7gDBASxJ/ADBAS6wLAD
BAS6wTADBAS/83AwDQQCAAIwBwMFACgEEFQwDQYJKoZIhvcNAQELBQADggEBAEAK
Uw+sArpkau8s5HJA8IIJXWzBEs18gebe5rBXXhq5h+NmJTzIwKcnToJnzruTn6qU
+nQssYihs1qb72G9g6kSpLj838KHBFQ5qJZz2zwVjouDNNiUbsHhNbNS4c7MOZP3
UddQ/EjzDoWs5gH+GEPZbGiTFmrlfuBoY0glF4uvy7VJ16MAR0iB/toXRf1Rl8DK
+CUIgur2USmxQywbJJbQgAYoS54rboEXpt9T/zs7MzUZH0JpJZa4Lq6CWgdigPsz
3Xpi1vIsOTyuSAb/Qjyp0LbCs44tiWSJoCzd0VIocuGQzyXAeYZ8bZauSq/FeR0+
DMMgtKDaSXAIoZ0TpeA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org