Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53013.roa
File:                     AS53013.roa (raw, json)
Hash identifier:          TobcjQaNsmA/CXiheL0rfwhLlOdTSRnMaGKHFsdIEA8=
Subject key identifier:   81:F2:34:47:10:52:EA:FB:F9:FD:FE:60:AE:45:0B:F7:87:3C:2E:2D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       19E3397EFBB11C650B8E93F0B310704EF2B76E79
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53013.roa
Signing time:             Tue 15 Sep 2026 12:29:49 +0000
ROA not before:           Tue 15 Sep 2026 12:24:49 +0000
ROA not after:            Tue 14 Sep 2027 12:29:49 +0000
asID:                     53013
IP address blocks:        177.67.80.0/22 maxlen: 22
                          177.67.80.0/23 maxlen: 23
                          177.67.82.0/23 maxlen: 23
                          177.67.84.0/24 maxlen: 24
                          177.67.85.0/24 maxlen: 24
                          177.67.86.0/24 maxlen: 24
                          177.67.87.0/24 maxlen: 24
                          2804:574::/32 maxlen: 48
                          2804:574::/33 maxlen: 33
                          2804:574:3::/48 maxlen: 48
                          2804:574:4::/48 maxlen: 48
                          2804:574:5::/48 maxlen: 48
                          2804:574:6::/48 maxlen: 48
                          2804:574:8::/48 maxlen: 48
                          2804:574:a::/48 maxlen: 48
                          2804:574:100::/45 maxlen: 45
                          2804:574:2000::/35 maxlen: 35
                          2804:574:2006::/48 maxlen: 48
                          2804:574:8000::/33 maxlen: 33
                          2804:574:aaaa::/48 maxlen: 48
                          2804:574:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:39:7e:fb:b1:1c:65:0b:8e:93:f0:b3:10:70:4e:f2:b7:6e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Sep 15 12:24:49 2026 GMT
            Not After : Sep 14 12:29:49 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:47:af:1f:fc:9e:7c:c0:8c:ad:45:1c:b0:
                    05:3a:39:39:3c:87:86:10:05:9b:e5:27:bb:04:b7:
                    31:ce:ee:d0:7d:78:2b:cd:2f:fb:02:0b:20:4a:30:
                    11:77:75:a8:5b:a2:0b:91:61:e7:9f:11:39:54:60:
                    af:7c:b6:5c:d3:4e:8e:20:38:27:82:24:2a:47:aa:
                    06:92:49:f3:bd:0b:1d:ab:c7:a9:41:4d:23:6e:39:
                    30:a3:fa:80:f3:10:6d:25:04:1d:d4:75:e3:50:dd:
                    34:02:8f:73:87:6e:6a:64:c8:39:22:97:e6:d4:c4:
                    84:c4:fc:ed:03:38:81:63:57:49:64:43:6c:4c:bf:
                    33:dc:d0:d6:a2:2a:79:d9:2f:53:f7:bc:7d:1d:3c:
                    d0:02:0d:7f:7e:d6:a7:dc:b8:21:49:8d:a0:58:58:
                    3f:fa:49:f9:90:55:e1:36:06:d3:32:b9:82:b1:c6:
                    ac:43:d2:3c:c9:83:50:49:e3:55:81:4c:29:c5:9a:
                    63:2d:ac:ec:97:2d:2b:f3:13:0b:cc:c2:d3:a9:35:
                    29:1b:86:63:d8:b4:64:c3:03:6d:0f:0c:ef:71:84:
                    42:dd:b2:66:24:9f:3f:09:a8:59:a3:c4:86:c0:78:
                    8a:60:15:67:a2:ae:a2:6a:d7:c0:12:3c:1c:58:0b:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F2:34:47:10:52:EA:FB:F9:FD:FE:60:AE:45:0B:F7:87:3C:2E:2D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53013.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.80.0/21
                IPv6:
                  2804:574::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:f5:0a:8c:02:e1:04:4d:73:12:5e:5e:18:21:35:77:73:
         6b:85:1f:e1:36:3b:4d:c3:6a:df:24:5a:c2:c6:1b:5a:ae:78:
         65:7f:5a:3b:5d:4b:a6:08:91:6f:47:cb:3c:a6:4a:78:60:b2:
         e6:28:00:09:bc:fd:06:9f:e4:2a:67:69:bd:87:f1:40:ab:10:
         d7:42:95:9f:f0:77:f8:94:14:8a:5d:8c:7a:f8:80:61:65:ee:
         45:a8:d2:a3:7c:db:79:21:e1:56:87:dd:8a:0a:82:45:9c:92:
         81:44:15:be:14:5d:4a:c1:79:8b:7d:d8:b5:df:b8:d1:ad:13:
         dc:6b:52:5c:c3:68:96:e9:5f:36:6b:e2:aa:62:9e:78:dd:79:
         63:7b:82:3b:2f:5f:69:7c:6d:88:1b:9a:66:a8:1d:14:e2:4f:
         ca:49:32:d4:21:ac:82:9b:75:34:73:70:2c:e0:b0:cc:1a:6c:
         2e:c6:28:a6:5c:5d:cb:a4:59:4a:31:a4:ab:24:4a:09:27:b9:
         e9:c6:63:e6:66:15:bf:dc:57:49:04:64:03:78:d2:ba:7f:53:
         0c:30:7b:6c:f0:07:4f:08:51:9b:90:fc:bd:50:eb:e1:42:bb:
         af:e5:02:e9:31:19:55:fb:82:e1:2e:27:ff:6a:51:52:91:20:
         5b:e0:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:22:04 2026 by rpki-client