Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS53107.roa
File:                     AS53107.roa (raw, json)
Hash identifier:          2LzgDPKeF6VauUyFDKp1p1A8UbKt9VfxLDVHYjtXdbA=
Subject key identifier:   CC:D5:59:09:B5:5B:8B:B7:65:02:78:D0:08:0B:D8:76:48:F0:ED:4D
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7171563DAD019BF58C0345FBF44EA781C598DA18
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS53107.roa
Signing time:             Wed 17 Sep 2025 14:48:12 +0000
ROA not before:           Wed 17 Sep 2025 14:43:12 +0000
ROA not after:            Wed 16 Sep 2026 14:48:12 +0000
asID:                     53107
IP address blocks:        186.216.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:56:3d:ad:01:9b:f5:8c:03:45:fb:f4:4e:a7:81:c5:98:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Sep 17 14:43:12 2025 GMT
            Not After : Sep 16 14:48:12 2026 GMT
        Subject: CN=CCD55909B55B8BB7650278D0080BD87648F0ED4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:08:ec:71:9c:7c:0a:00:69:91:d5:f8:c7:
                    fb:0c:4c:01:d1:d6:d9:4f:82:e5:18:77:a3:a1:ff:
                    3c:d5:89:23:88:6a:ec:63:7c:34:f8:10:cc:73:4f:
                    45:45:c1:07:e9:33:10:80:18:a2:da:fa:c3:ca:63:
                    e3:b8:73:61:fd:67:86:1b:e4:83:28:54:5c:99:2c:
                    d2:48:88:de:87:65:ec:d8:f6:cf:30:8b:a7:a8:e9:
                    e8:07:d6:be:1e:e9:85:69:df:b9:89:d1:5f:d8:36:
                    1c:8a:47:11:a5:44:12:4c:0d:e1:89:6b:54:75:3b:
                    19:5b:eb:67:d8:33:0b:a4:8d:d6:19:eb:40:ca:90:
                    97:75:70:e8:ee:2c:7f:65:67:93:47:3f:62:5a:1a:
                    74:3a:74:cb:7f:04:4e:ec:5b:28:6f:f1:e0:47:eb:
                    c9:cb:5e:23:ea:b5:2e:f5:6d:02:9f:5d:a0:24:84:
                    a8:7b:d1:b5:83:41:ad:a7:35:2b:1e:cb:1b:2e:08:
                    29:dd:19:93:d0:96:80:d0:88:d3:f1:2a:64:bf:ca:
                    75:23:5f:fd:08:e7:76:1d:46:b9:a9:c7:71:a7:84:
                    52:68:c0:c2:1c:ae:47:91:77:e5:41:c9:3c:af:c7:
                    2b:df:a9:14:2d:14:ff:77:b3:53:66:10:3e:5c:a8:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D5:59:09:B5:5B:8B:B7:65:02:78:D0:08:0B:D8:76:48:F0:ED:4D
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS53107.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:18:2e:1c:f3:a0:60:f7:1f:93:5f:06:37:f0:c6:6e:64:1b:
         0d:95:b2:7e:b7:bd:ac:00:81:93:cd:85:18:10:cc:b8:5b:9c:
         72:df:8f:55:03:d3:d5:51:1d:15:5d:68:df:26:69:24:0e:46:
         74:85:cd:3b:c8:fb:96:f6:34:12:5c:b2:e7:3f:37:9c:99:2b:
         d2:e6:cd:67:d8:d4:1c:1c:88:05:25:59:6a:1e:b4:16:d7:03:
         e7:03:c8:21:b6:b2:b6:62:93:0a:64:72:69:54:44:97:5e:44:
         d1:86:e6:4e:3a:b4:0e:64:1c:21:ba:2c:c0:d0:c4:1f:f3:7d:
         c1:ee:a1:89:7b:bf:53:e2:3a:ea:87:69:fc:de:9b:bb:67:32:
         b1:55:5e:a1:de:75:ac:50:d5:15:36:c7:a5:74:ea:27:71:c3:
         24:29:a3:d8:bb:b4:f0:fb:85:21:5d:88:5e:d7:35:d9:35:b2:
         bb:a4:37:e8:14:7d:a4:bf:47:f8:0c:aa:99:a7:fb:fe:a1:c3:
         ea:76:18:ff:85:e5:8f:08:70:d9:76:59:d4:b1:c1:5f:7c:05:
         d0:14:05:9b:c8:8b:81:f9:20:d8:61:12:85:6c:8a:8d:fe:0f:
         15:19:91:87:ad:a3:ec:3b:da:69:80:61:97:33:a4:3d:0c:42:
         3e:34:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:22:06 2025 by rpki-client