Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139342e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3139342e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          24snl6YGt1kivxhUVewapLaNZafQ74Aih/qnKUKt/yk=
Subject key identifier:   0D:EA:15:A5:9B:3E:65:2C:EA:4E:7C:42:F7:78:F3:5C:DF:07:29:65
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       3FBFF284A2DEDFED21D209510F3E6E81381590F6
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139342e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 10 Aug 2026 20:19:21 +0000
ROA not before:           Mon 10 Aug 2026 20:14:21 +0000
ROA not after:            Mon 09 Aug 2027 20:19:21 +0000
asID:                     53086
IP address blocks:        187.33.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bf:f2:84:a2:de:df:ed:21:d2:09:51:0f:3e:6e:81:38:15:90:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Aug 10 20:14:21 2026 GMT
            Not After : Aug  9 20:19:21 2027 GMT
        Subject: CN=0DEA15A59B3E652CEA4E7C42F778F35CDF072965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:dc:f0:68:b0:88:c5:ce:63:9b:07:b8:87:
                    e2:83:50:bc:e1:38:51:45:7f:e4:a9:56:94:ba:4e:
                    3b:04:13:d1:b0:ae:cd:ae:a3:cf:04:89:d6:f9:37:
                    ab:03:09:5e:62:d3:b1:4c:d8:8d:4f:5b:26:6b:a6:
                    b3:9b:70:6a:96:bc:77:4e:0a:c9:3a:47:4a:74:8a:
                    5a:ac:ce:16:8b:ba:57:f7:21:5c:c8:1c:26:b3:53:
                    b7:0d:cc:43:b6:b1:c6:c5:3d:65:5d:f2:51:c6:ac:
                    41:c3:f5:ae:23:2f:34:5e:e1:61:a8:7a:4d:8a:10:
                    2d:d3:a9:fa:67:fa:6d:7f:d9:23:4d:c0:50:c3:86:
                    c0:11:06:b5:40:dc:a4:9f:de:be:db:e2:c7:e0:91:
                    9a:1a:f1:89:ed:4d:5c:a1:fa:b0:b5:48:24:86:26:
                    7f:d0:c9:61:2b:a0:d1:f2:d6:cf:0e:4b:bb:db:80:
                    b7:86:9e:57:37:4b:ad:6d:a3:d1:43:44:73:83:da:
                    68:9f:4f:0e:35:35:fd:0c:b4:31:7c:53:fb:01:e0:
                    00:c2:9e:75:61:6b:6c:1b:3d:bc:5f:28:d4:8d:45:
                    d9:e7:27:f6:bf:66:47:a5:44:b7:b5:73:9b:e0:32:
                    e3:a8:5c:69:9d:eb:3a:11:c1:80:23:7a:82:85:f7:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EA:15:A5:9B:3E:65:2C:EA:4E:7C:42:F7:78:F3:5C:DF:07:29:65
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139342e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:ae:6c:b0:51:7e:2b:bb:6d:20:63:74:da:a1:4b:3f:e0:
         37:81:e7:c6:82:d9:58:ef:12:60:25:c9:7d:36:be:5a:58:25:
         e2:6a:46:72:e5:09:dd:19:62:5d:ca:1b:27:df:01:de:cc:f3:
         61:3a:c2:69:fa:98:da:0d:5b:bb:2e:99:09:42:dd:7e:98:cf:
         e2:b9:48:d8:f4:4a:b9:ea:f1:b7:43:23:27:3e:19:f4:05:b5:
         ed:b9:4b:a4:46:96:41:1a:fb:66:8c:e1:e5:d1:a6:06:03:fe:
         83:1d:e0:05:d1:fa:5a:1b:05:c3:71:f4:a3:14:6b:2a:38:82:
         dc:28:58:98:48:91:46:e3:d4:a9:25:4f:30:08:1e:ad:58:2a:
         6c:6f:99:80:af:38:ba:1e:7a:b2:b9:d8:8a:f4:de:38:12:e2:
         73:64:9b:ba:ed:75:89:d2:98:1f:ce:30:0a:d4:ff:e4:af:c3:
         4e:7b:da:55:b4:13:1d:24:97:54:b0:95:6a:01:b2:ca:ad:30:
         f1:30:26:86:93:42:d3:39:3d:4c:bb:f3:50:68:87:d9:ea:81:
         07:01:b3:0c:7b:18:1e:3b:59:39:07:40:9d:25:53:ec:5e:08:
         41:75:7c:3b:a8:32:cc:a1:33:80:ec:3d:cd:ca:77:81:c3:d8:
         7a:dd:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:17:10 2026 by rpki-client