Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3139322e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          /sm0R67g79lHnvSB1P81eg7zj7fOHKkn8SA1X47D8W4=
Subject key identifier:   76:ED:31:3A:39:19:BF:24:F4:71:04:4D:32:13:F1:98:5E:4A:03:7B
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       258A065E2D3B32EC9820D45A273199905C527D1F
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:22 +0000
ROA not before:           Thu 06 Mar 2025 08:40:22 +0000
ROA not after:            Thu 05 Mar 2026 08:45:22 +0000
asID:                     53086
IP address blocks:        187.33.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8a:06:5e:2d:3b:32:ec:98:20:d4:5a:27:31:99:90:5c:52:7d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:22 2025 GMT
            Not After : Mar  5 08:45:22 2026 GMT
        Subject: CN=76ED313A3919BF24F471044D3213F1985E4A037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:c7:e3:1d:8f:5c:e0:19:33:5d:60:37:17:
                    ba:4d:79:c8:63:e6:eb:9e:a2:a4:f7:db:57:47:75:
                    d0:8a:c2:b5:65:41:92:64:17:11:10:f8:f8:52:75:
                    b6:3e:45:06:05:a6:3a:23:6b:63:a1:be:e7:8b:31:
                    e1:5b:d6:fb:33:dd:af:54:14:c6:82:3e:42:6f:dd:
                    f2:11:8c:03:5a:77:e2:e9:4b:33:2c:3f:07:d4:09:
                    c1:47:6c:6e:45:8d:19:00:6e:4d:d8:3d:e2:37:98:
                    fd:02:87:51:4c:20:a4:19:81:f1:97:dc:25:aa:82:
                    26:9e:89:07:9f:c1:b4:6e:4c:f5:67:0a:82:8c:ef:
                    58:3f:f8:7c:b9:4c:6e:35:97:05:0e:95:c1:a3:aa:
                    9e:b4:d7:3d:92:97:e0:fd:fe:27:e8:34:9c:21:53:
                    82:4d:4e:fb:30:8f:b8:4e:a5:67:22:82:6d:60:a4:
                    c0:2e:cf:1c:81:88:1c:5c:c4:33:cd:ce:b5:f4:f2:
                    4b:bc:e6:0a:ae:aa:af:cc:01:be:92:e6:e4:a0:44:
                    ed:f6:ff:7d:da:83:f7:94:55:0e:d2:3e:de:29:50:
                    58:37:f9:72:c2:15:bf:73:43:da:ba:a7:ee:2d:01:
                    92:d8:64:5d:ea:f0:d0:55:a2:a0:34:9d:89:f4:c2:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:31:3A:39:19:BF:24:F4:71:04:4D:32:13:F1:98:5E:4A:03:7B
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:81:38:b1:9b:e1:ad:46:b6:92:19:3b:85:ce:8f:44:f9:
         c8:97:99:ea:ba:69:bc:2f:48:95:a5:fa:56:ea:57:c6:25:55:
         72:2b:9f:93:11:ee:a5:de:0e:63:a4:fc:41:a9:8e:f4:d5:b7:
         08:69:9c:52:7f:11:70:94:f4:3c:58:3b:de:a9:77:dd:d9:b3:
         cc:1a:cd:05:2d:78:32:e3:66:14:f2:3e:48:85:87:c5:24:0c:
         19:ea:dc:e9:6b:73:82:25:4c:d0:d6:79:f9:80:51:fa:10:d6:
         32:8f:11:f1:7e:e2:40:5b:81:5f:ab:d4:47:6f:fa:17:3f:ea:
         15:63:83:eb:b8:45:b4:40:dd:13:a5:03:75:d6:2e:97:1b:0d:
         f9:74:8b:d8:61:4f:e4:d3:94:1b:62:c5:06:7c:bc:1c:72:3c:
         bd:82:61:f0:97:87:e3:1d:df:c6:65:6e:b5:24:a4:b1:3a:29:
         b8:31:c8:bf:56:9a:6e:2e:93:ba:66:9c:73:41:78:88:be:b2:
         23:ca:37:ba:5e:71:1e:06:be:60:b1:c6:d6:27:13:ad:d8:48:
         d6:73:10:38:3a:f9:96:eb:a5:b8:6d:e7:de:f3:b4:e6:49:37:
         85:15:c7:13:50:80:72:4e:01:db:10:62:77:98:45:14:ed:42:
         10:23:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:08 2025 by rpki-client