Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa
File:                     AS53054.roa (raw, json)
Hash identifier:          tBVOE5N/dng+wg40JTvvEkVEVH+V6P707fgE4QZEmFA=
Subject key identifier:   F0:B7:E0:35:55:7D:D6:1C:2E:40:F2:3F:33:38:20:37:CD:1C:0E:30
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       141FA19889404F93D627B86569191580172EFB01
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa
Signing time:             Tue 21 Oct 2025 18:00:38 +0000
ROA not before:           Tue 21 Oct 2025 17:55:38 +0000
ROA not after:            Tue 20 Oct 2026 18:00:38 +0000
asID:                     53054
IP address blocks:        187.73.192.0/19 maxlen: 19
                          187.73.192.0/19 maxlen: 24
                          187.73.208.0/20 maxlen: 20
                          187.73.210.0/23 maxlen: 23
                          2804:a3c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 11:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1f:a1:98:89:40:4f:93:d6:27:b8:65:69:19:15:80:17:2e:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Oct 21 17:55:38 2025 GMT
            Not After : Oct 20 18:00:38 2026 GMT
        Subject: CN=F0B7E035557DD61C2E40F23F33382037CD1C0E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:96:b0:1c:85:43:53:99:bf:1b:a7:63:39:
                    a2:e4:20:90:73:27:eb:ca:00:21:bf:ad:04:4e:2e:
                    29:f2:93:45:9f:e4:f8:85:ef:69:73:4e:91:59:c2:
                    0a:80:d8:9b:cb:76:47:61:46:12:70:1a:b4:a8:5c:
                    d4:db:49:2d:2f:40:91:40:48:af:87:9c:ea:a4:ab:
                    b3:af:15:98:5c:d5:90:ac:60:87:b7:2f:f2:3d:47:
                    f4:64:8d:25:02:df:32:32:97:17:92:41:37:71:87:
                    00:3c:b9:26:f6:07:c6:25:18:27:b3:3c:13:fc:1f:
                    15:b5:29:d8:6f:69:f4:70:05:47:c7:f9:0d:a5:12:
                    d1:ea:81:39:30:79:7f:85:be:70:29:39:87:ee:0e:
                    f4:f1:5e:3f:c7:c9:84:73:ec:41:d1:fc:44:24:a2:
                    bb:e0:12:70:b0:e5:4a:90:58:3e:03:e9:f0:60:5d:
                    2c:14:55:9e:a5:e1:6b:fa:08:c4:ab:a2:40:3a:b6:
                    08:a2:8d:7e:9b:5a:7a:73:81:0c:d7:8f:2e:19:6e:
                    b1:9e:63:41:24:17:44:b5:3a:d0:0c:73:83:c3:9e:
                    22:1a:3c:72:9d:b6:f3:8c:55:f5:98:57:33:18:f7:
                    a4:10:3b:82:42:83:e5:f1:73:89:72:2f:ab:0e:87:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:E0:35:55:7D:D6:1C:2E:40:F2:3F:33:38:20:37:CD:1C:0E:30
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:66:34:06:73:5f:f2:40:e2:78:33:0c:31:6f:76:e7:32:18:
         e9:9f:68:66:4d:96:ed:67:a3:c6:78:17:52:ea:48:c6:98:93:
         3d:f8:4c:53:43:d4:1d:db:f4:25:5d:89:f8:60:16:7b:35:9a:
         d1:83:f7:1c:7d:25:cf:b4:33:e0:fe:cc:25:7f:28:bf:f1:9a:
         30:cf:b6:20:f5:be:85:ba:19:24:98:b5:09:f2:97:fa:70:cb:
         c7:a6:ef:f7:69:56:29:bf:42:84:24:d5:f2:8f:66:ff:c6:2a:
         b4:1e:65:63:da:6c:31:2a:dc:76:3f:13:0a:1e:9f:e1:2b:7d:
         67:8a:70:6f:a0:c7:86:1f:79:4d:9d:79:7d:54:c9:a2:2a:e2:
         0b:91:bc:5a:8a:9f:97:95:99:9a:11:8d:c0:92:41:87:de:7b:
         d6:b4:72:e0:20:f1:c5:51:13:39:0b:e5:4d:0e:26:66:0b:77:
         31:dc:73:7b:0a:e7:d6:8f:8c:40:11:99:c0:5e:dc:bd:2a:fb:
         7f:f5:f4:a6:15:90:48:e3:31:dd:22:eb:b2:92:f7:51:7b:c8:
         7c:b5:0a:2d:2f:39:9e:be:b9:6d:aa:ab:7b:8d:62:2e:ff:fa:
         37:8c:0e:1a:c5:a3:fe:68:e9:9f:d0:a0:e1:b6:63:6e:f6:3c:
         39:ca:eb:66
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUFB+hmIlAT5PWJ7hlaRkVgBcu+wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYyRkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMw
QUU4Q0EwRTAeFw0yNTEwMjExNzU1MzhaFw0yNjEwMjAxODAwMzhaMDMxMTAvBgNV
BAMTKEYwQjdFMDM1NTU3REQ2MUMyRTQwRjIzRjMzMzgyMDM3Q0QxQzBFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOZawHIVDU5m/G6djOaLkIJBz
J+vKACG/rQROLinyk0Wf5PiF72lzTpFZwgqA2JvLdkdhRhJwGrSoXNTbSS0vQJFA
SK+HnOqkq7OvFZhc1ZCsYIe3L/I9R/RkjSUC3zIylxeSQTdxhwA8uSb2B8YlGCez
PBP8HxW1KdhvafRwBUfH+Q2lEtHqgTkweX+FvnApOYfuDvTxXj/HyYRz7EHR/EQk
orvgEnCw5UqQWD4D6fBgXSwUVZ6l4Wv6CMSrokA6tgiijX6bWnpzgQzXjy4ZbrGe
Y0EkF0S1OtAMc4PDniIaPHKdtvOMVfWYVzMY96QQO4JCg+Xxc4lyL6sOh/AjAgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQU8LfgNVV91hwuQPI/MzggN80cDjAwHwYDVR0j
BBgwFoAU9i+lQOWbhXAgxLIJVCMODAroyg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9GNjJGQTU0MEU1OUI4NTcwMjBDNEIyMDk1NDIzMEUwQzBBRThDQTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MkZBNTQwRTU5Qjg1NzAy
MEM0QjIwOTU0MjMwRTBDMEFFOENBMEUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNTMw
NTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAW7ScAwDQQCAAIwBwMFACgECjwwDQYJKoZIhvcNAQELBQAD
ggEBAGNmNAZzX/JA4ngzDDFvducyGOmfaGZNlu1no8Z4F1LqSMaYkz34TFND1B3b
9CVdifhgFns1mtGD9xx9Jc+0M+D+zCV/KL/xmjDPtiD1voW6GSSYtQnyl/pwy8em
7/dpVim/QoQk1fKPZv/GKrQeZWPabDEq3HY/Ewoen+ErfWeKcG+gx4YfeU2deX1U
yaIq4guRvFqKn5eVmZoRjcCSQYfee9a0cuAg8cVREzkL5U0OJmYLdzHcc3sK59aP
jEARmcBe3L0q+3/19KYVkEjjMd0i67KS91F7yHy1Ci0vOZ6+uW2qq3uNYi7/+jeM
DhrFo/5o6Z/QoOG2Y272PDnK62Y=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:11 2025 by rpki-client