Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139332e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3139332e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          mtTZ28x9bQYe651+DLsfD3T7iGTWGzpmcsUPd1oNf1Q=
Subject key identifier:   AA:80:0D:71:BB:20:4D:F2:05:5D:D9:4E:84:91:07:C8:C7:B3:46:00
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       116BE38666E19A0E590F2AB5F12A229737494ADE
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139332e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 08 Sep 2025 20:01:30 +0000
ROA not before:           Mon 08 Sep 2025 19:56:30 +0000
ROA not after:            Mon 07 Sep 2026 20:01:30 +0000
asID:                     53086
IP address blocks:        187.33.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6b:e3:86:66:e1:9a:0e:59:0f:2a:b5:f1:2a:22:97:37:49:4a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Sep  8 19:56:30 2025 GMT
            Not After : Sep  7 20:01:30 2026 GMT
        Subject: CN=AA800D71BB204DF2055DD94E849107C8C7B34600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:66:3c:6d:65:a7:69:a7:87:0d:33:9c:4b:
                    c4:6b:44:ab:09:68:cf:c5:2c:65:a2:3c:ec:8c:82:
                    96:f1:83:2c:af:4c:1e:cf:12:0d:1a:cd:6b:de:2c:
                    6d:9a:c8:90:9e:43:9b:13:6f:61:15:50:e5:36:93:
                    57:97:f3:7e:6f:76:48:5f:86:9d:9f:9f:72:92:1c:
                    45:a7:5e:b6:af:47:ac:f5:9d:fb:94:40:2c:3b:48:
                    aa:64:eb:c0:39:f6:b4:28:60:84:59:98:fe:bf:33:
                    9f:a5:ed:cf:88:39:ce:59:fb:7b:c2:4a:2e:b2:fe:
                    41:8d:3f:42:5f:a8:8a:84:9f:99:61:25:9f:6f:40:
                    b3:03:73:82:82:5d:87:ca:15:78:f3:54:7d:13:4b:
                    b8:02:f6:de:f7:68:fb:37:b0:61:de:f0:b5:ea:b9:
                    38:73:bc:1f:bb:e3:0d:cf:6f:f4:a6:5d:17:b5:cd:
                    ef:2a:69:6c:e2:e4:ee:fb:10:1f:26:95:b3:21:f2:
                    45:c6:e4:37:62:a9:9b:f4:eb:b2:87:26:dc:7b:cf:
                    df:b4:85:fc:29:ea:23:c0:6c:56:fd:68:78:7f:90:
                    19:ef:34:27:90:f2:15:80:7e:72:8f:51:3d:60:96:
                    d1:1d:ff:bc:b5:71:ca:11:31:cb:49:6c:47:04:5a:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:0D:71:BB:20:4D:F2:05:5D:D9:4E:84:91:07:C8:C7:B3:46:00
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139332e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:91:3c:48:61:4b:ba:c4:1f:74:03:99:29:96:ed:60:2b:
         4c:ee:45:c0:1c:a5:15:74:c9:3e:3e:59:c3:ee:d2:75:34:c3:
         11:45:66:92:e7:db:e2:54:af:11:74:04:2f:24:60:98:b7:d3:
         ce:3f:f2:a7:12:7d:93:13:6f:e4:40:21:43:f1:db:36:f2:c9:
         e8:91:08:a0:fd:10:ed:67:33:56:22:3c:c6:56:f1:4b:a4:2b:
         e7:5c:2c:64:9f:24:15:dc:87:09:76:4b:3c:82:f2:c0:3f:6f:
         50:79:1f:83:01:bb:80:c9:fb:d1:d6:68:eb:aa:32:c5:f5:ad:
         7c:f9:11:7b:8f:48:ad:a4:b2:7d:25:8a:ca:74:a5:f5:f0:f8:
         22:68:63:17:6e:e9:51:3e:21:40:0e:7a:4f:97:52:52:57:f1:
         f4:00:c9:22:ab:88:9d:4a:55:f2:8b:e7:8e:5b:18:01:66:fd:
         d7:d7:de:46:14:c8:5b:11:42:64:75:cb:60:3f:ad:53:65:52:
         31:08:86:df:90:97:a8:2b:73:cd:48:3a:9f:01:89:2e:63:22:
         b8:f3:99:7c:33:c9:92:31:08:24:8f:71:b5:47:92:f4:fc:28:
         98:e5:c5:00:ae:e3:44:d5:ce:89:09:c8:63:78:94:31:20:92:
         2b:4a:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:26:25 2025 by rpki-client