Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa
File:                     3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa (raw, json)
Hash identifier:          51n3ayew2h/v7obVWbgYFaLOL9OhzyAWSOIqWxXONuY=
Subject key identifier:   5B:57:5A:65:F3:75:8F:E3:74:9C:CF:D6:A6:8F:93:87:08:2E:35:01
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       53455D3EB7384AD749E872E8D2CD7AABD374691F
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa
Signing time:             Mon 31 Mar 2025 14:21:13 +0000
ROA not before:           Mon 31 Mar 2025 14:16:13 +0000
ROA not after:            Mon 30 Mar 2026 14:21:13 +0000
asID:                     28153
IP address blocks:        164.163.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:45:5d:3e:b7:38:4a:d7:49:e8:72:e8:d2:cd:7a:ab:d3:74:69:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Mar 31 14:16:13 2025 GMT
            Not After : Mar 30 14:21:13 2026 GMT
        Subject: CN=5B575A65F3758FE3749CCFD6A68F9387082E3501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:01:9a:b8:48:52:71:7c:37:0a:ce:d6:f4:
                    82:5c:4c:c1:16:d5:bf:cc:f7:aa:ad:35:83:e1:e7:
                    f9:62:ba:89:23:14:8f:3f:e9:91:eb:70:f1:fd:25:
                    05:e7:0e:2a:64:5b:2b:92:0d:89:85:c2:15:6b:a2:
                    25:83:9c:91:1d:79:b3:04:4d:f3:30:e7:4a:05:f8:
                    cd:01:2e:0f:cf:5d:c7:b7:bf:95:ac:16:6f:34:61:
                    e8:a6:a6:85:ed:1f:c6:06:79:b6:3d:34:91:f9:8b:
                    6a:d2:38:00:8f:67:16:f6:ac:54:5c:2a:98:33:f3:
                    6f:c4:ce:5c:05:90:c9:62:67:61:70:27:ee:8d:fb:
                    36:62:fa:49:a8:9f:c4:a9:7f:25:f6:21:40:9b:d3:
                    33:de:8a:d1:05:7e:c3:51:45:c0:61:be:af:9d:8d:
                    a0:d3:bb:55:2c:6c:23:4a:f4:21:bc:b2:9c:e9:51:
                    de:aa:b9:9d:9b:2c:7b:29:90:6d:53:56:b9:70:01:
                    14:18:ff:4d:fb:0c:67:f0:e8:0c:19:13:5a:54:3c:
                    07:86:91:f2:35:10:55:81:db:90:95:38:21:bf:68:
                    b7:eb:e2:99:fd:39:99:30:19:a9:a7:e2:89:6d:84:
                    43:a9:a5:be:a5:c4:d9:4c:20:0b:ec:87:c4:f7:d5:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:5A:65:F3:75:8F:E3:74:9C:CF:D6:A6:8F:93:87:08:2E:35:01
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:71:8c:b4:79:f5:a0:80:1d:3f:99:ca:39:21:45:ad:73:
         5e:a7:16:43:fb:b6:35:71:78:59:b5:ea:c8:4d:a7:80:a1:dd:
         41:da:d4:4e:dd:f4:95:1e:e1:71:95:ea:12:83:a3:4b:4f:23:
         75:e1:93:68:99:76:1d:af:1d:cb:c2:36:61:5e:b6:08:f9:9c:
         5c:bd:65:5f:08:2c:5c:36:c7:88:91:29:00:a1:a2:e6:e8:01:
         1d:94:61:32:73:22:33:db:c3:bf:0d:e8:a0:c8:e4:42:b4:00:
         fe:f8:5c:41:bd:16:32:aa:ed:13:d6:c8:2d:8f:19:2f:a0:28:
         59:4c:48:19:de:9d:38:00:df:84:3a:78:cd:fe:15:47:97:e5:
         a6:41:14:33:ee:d7:ec:b5:7a:e3:78:e5:4b:8f:c3:c9:5f:7c:
         43:aa:e1:21:1b:9b:c0:2d:1a:ec:8e:e3:6f:04:cb:a9:b8:fc:
         ad:66:4d:5f:1c:68:5a:71:7a:b5:31:ac:ba:d1:f3:c9:e3:77:
         f3:12:c5:d5:56:08:82:fc:7a:01:c5:b9:21:aa:b1:41:8c:23:
         fd:5c:20:e2:68:9d:d0:64:d5:33:aa:81:d8:78:54:c1:31:f7:
         21:fe:ae:e8:36:58:4c:99:de:e1:40:8d:cb:69:27:e9:ee:bf:
         43:d3:4d:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU0VdPrc4StdJ6HLo0s16q9N0aR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwMEFFNDhBRkJCQjM3OTNEMEUxNDI1QjhGQzZEMzhG
NDNCREM1MDAeFw0yNTAzMzExNDE2MTNaFw0yNjAzMzAxNDIxMTNaMDMxMTAvBgNV
BAMTKDVCNTc1QTY1RjM3NThGRTM3NDlDQ0ZENkE2OEY5Mzg3MDgyRTM1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApAGauEhScXw3Cs7W9IJcTMEW
1b/M96qtNYPh5/liuokjFI8/6ZHrcPH9JQXnDipkWyuSDYmFwhVroiWDnJEdebME
TfMw50oF+M0BLg/PXce3v5WsFm80YeimpoXtH8YGebY9NJH5i2rSOACPZxb2rFRc
Kpgz82/EzlwFkMliZ2FwJ+6N+zZi+kmon8SpfyX2IUCb0zPeitEFfsNRRcBhvq+d
jaDTu1UsbCNK9CG8spzpUd6quZ2bLHspkG1TVrlwARQY/037DGfw6AwZE1pUPAeG
kfI1EFWB25CVOCG/aLfr4pn9OZkwGamn4olthEOppb6lxNlMIAvsh8T31RsDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW1daZfN1j+N0nM/Wpo+ThwguNQEwHwYDVR0j
BBgwFoAUUwCuSK+7s3k9DhQluPxtOPQ73FAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXp5cmJadEgydEFnWG03dm9kTndoRFM3NTJLckZjVkVzQkxVa0hBb0xk
aUcvMC81MzAwQUU0OEFGQkJCMzc5M0QwRTE0MjVCOEZDNkQzOEY0M0JEQzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzMDBBRTQ4QUZCQkIzNzkz
RDBFMTQyNUI4RkM2RDM4RjQzQkRDNTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6eXJiWnRIMnRBZ1htN3ZvZE53aERTNzUyS3JGY1ZFc0JMVWtIQW9MZGlHLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKko4wwDQYJKoZIhvcNAQELBQADggEBAC8QcYy0
efWggB0/mco5IUWtc16nFkP7tjVxeFm16shNp4Ch3UHa1E7d9JUe4XGV6hKDo0tP
I3Xhk2iZdh2vHcvCNmFetgj5nFy9ZV8ILFw2x4iRKQChouboAR2UYTJzIjPbw78N
6KDI5EK0AP74XEG9FjKq7RPWyC2PGS+gKFlMSBnenTgA34Q6eM3+FUeX5aZBFDPu
1+y1euN45UuPw8lffEOq4SEbm8AtGuyO428Ey6m4/K1mTV8caFpxerUxrLrR88nj
d/MSxdVWCIL8egHFuSGqsUGMI/1cIOJondBk1TOqgdh4VMEx9yH+rug2WEyZ3uFA
jctpJ+nuv0PTTcI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:37:21 2025 by rpki-client