Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa
File:                     AS53125.roa (raw, json)
Hash identifier:          c5zf4FKKPJu26fGFKZcUyWqKK3WRwr3qMkO9PeTcics=
Subject key identifier:   27:7E:F2:18:E2:59:93:E7:15:3F:3D:A6:FA:B7:9A:59:18:27:53:BB
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       57CE5D0E75E01845811807B14FAF0CA9F9B29152
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa
Signing time:             Thu 11 Sep 2025 20:20:16 +0000
ROA not before:           Thu 11 Sep 2025 20:15:16 +0000
ROA not after:            Thu 10 Sep 2026 20:20:16 +0000
asID:                     53125
IP address blocks:        187.108.112.0/21 maxlen: 24
                          187.108.120.0/21 maxlen: 22
                          2804:27cc::/33 maxlen: 48
                          2804:27cc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ce:5d:0e:75:e0:18:45:81:18:07:b1:4f:af:0c:a9:f9:b2:91:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep 11 20:15:16 2025 GMT
            Not After : Sep 10 20:20:16 2026 GMT
        Subject: CN=277EF218E25993E7153F3DA6FAB79A59182753BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:0d:1e:69:ff:18:98:2b:8b:af:58:b9:4e:
                    43:02:c9:a4:f8:33:b0:47:44:82:34:19:7b:a1:95:
                    f4:0d:60:71:3e:21:88:b8:d8:2f:f1:d8:71:9b:15:
                    9a:ee:92:19:4a:18:2c:f9:83:0c:78:81:95:8a:64:
                    16:ea:16:e0:7d:5d:54:ac:e4:5a:9c:60:00:80:14:
                    b0:d0:fc:1c:1d:7e:00:7e:a7:4b:79:b9:09:93:85:
                    6f:27:29:9b:4b:21:21:de:d2:0d:9c:73:52:e8:d6:
                    eb:95:ec:fe:97:f0:cf:37:1f:9c:0b:1c:ea:d8:c2:
                    27:2b:92:95:e7:f0:2f:5a:84:9b:ba:ac:ee:fc:ca:
                    e1:be:d6:39:2e:54:8e:67:1e:54:b1:39:b1:f9:84:
                    6c:79:e7:48:7e:b0:c4:d3:63:f8:80:f8:80:83:28:
                    fc:50:ea:51:3d:f2:42:e9:2b:9e:af:e9:70:31:5f:
                    b0:58:4e:84:b8:57:cb:04:be:6a:d8:4f:40:57:d6:
                    8c:21:16:b8:b6:6c:71:c0:7e:01:bf:e1:bd:4f:f7:
                    1c:54:05:8f:8d:e9:6d:bf:bf:a6:bb:2f:2a:74:3d:
                    03:44:aa:d9:59:fd:c8:24:73:af:63:9b:7a:5b:b4:
                    69:59:83:97:7e:dd:bc:b5:b4:e2:30:4f:92:fd:4e:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:F2:18:E2:59:93:E7:15:3F:3D:A6:FA:B7:9A:59:18:27:53:BB
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.112.0/20
                IPv6:
                  2804:27cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:41:d9:76:66:a9:c4:48:40:cc:ab:aa:63:46:3d:64:a7:
         0f:33:0e:97:31:f4:97:32:c7:4a:90:8e:39:0a:69:54:b7:f1:
         2e:06:5c:2e:8a:b1:64:16:2b:7b:10:3e:cd:40:c7:5f:d4:a7:
         52:f0:88:bf:23:48:cc:4e:59:6e:54:cb:67:26:da:9c:f2:84:
         34:86:4c:96:85:06:81:80:35:a8:a5:59:96:2c:0f:a6:7a:ff:
         86:72:8a:1d:e3:eb:6b:17:0e:23:76:13:7b:97:df:a3:3d:8d:
         14:78:0f:d4:15:eb:c6:e4:60:b2:c4:8c:da:73:ef:58:b9:f0:
         f8:4d:7b:a6:c4:e6:d1:d4:da:d3:92:03:c3:a5:ad:cc:4a:98:
         6d:a2:91:4b:7e:c8:f4:71:32:f1:d6:85:de:03:3c:3d:7c:b1:
         db:9e:e2:1f:38:d2:58:52:c2:d5:f3:35:a7:79:8f:48:fc:5b:
         13:f6:71:08:82:5b:4f:f0:17:72:83:e5:ce:4f:34:91:74:eb:
         2f:73:49:b9:81:e3:78:61:78:23:30:37:cc:97:73:ab:f9:96:
         ac:df:ea:b0:1a:20:3c:93:f9:25:da:75:1f:07:b6:ee:54:c0:
         1a:73:73:fe:95:54:c8:e3:4b:02:fd:5f:69:30:6e:56:a8:36:
         b3:ca:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:45:37 2025 by rpki-client