Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3139362e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          +RdGjvfUgKRrsQ+6oWpcZEzUo6RIlfEY32VH7Yeql5I=
Subject key identifier:   05:5F:84:A6:6B:BE:D5:90:29:2D:57:03:90:D3:1E:3F:49:4D:03:60
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       564C1A11984B5766BA96B2CD570958AFD7174A28
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:20 +0000
ROA not before:           Thu 06 Mar 2025 08:40:20 +0000
ROA not after:            Thu 05 Mar 2026 08:45:20 +0000
asID:                     53086
IP address blocks:        187.33.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4c:1a:11:98:4b:57:66:ba:96:b2:cd:57:09:58:af:d7:17:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:20 2025 GMT
            Not After : Mar  5 08:45:20 2026 GMT
        Subject: CN=055F84A66BBED590292D570390D31E3F494D0360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:62:ac:b4:da:9e:3c:d3:66:fd:79:9e:5f:
                    3b:eb:f7:1e:60:5f:fe:2c:7a:47:2a:84:36:85:41:
                    d1:df:82:4a:7c:1f:5f:b7:a4:5b:2f:78:db:81:9b:
                    71:f6:27:45:bc:c6:4c:1b:f2:6e:e5:a7:5e:41:18:
                    ca:35:9f:c7:e4:b0:1e:27:2a:2b:4c:ed:76:51:d4:
                    22:99:97:14:2c:1f:f2:16:99:d2:f5:51:02:0c:cd:
                    0b:b4:80:24:d6:38:41:dd:a1:a8:06:de:0b:64:22:
                    49:a3:de:d1:2a:d1:0e:24:f5:a2:f9:a2:06:43:31:
                    fa:71:b8:27:9e:ea:99:c6:d3:0e:1c:af:2b:5c:0d:
                    40:23:de:4d:2f:11:94:cb:88:2e:04:16:a4:53:16:
                    68:cd:36:dd:3b:70:b5:8a:f4:6f:69:7e:c2:d7:4d:
                    6f:d5:74:ce:5a:e5:fc:52:e4:61:a1:44:5e:58:77:
                    ff:bb:1c:cc:2f:94:70:aa:d2:94:11:b0:5a:f3:87:
                    ce:5b:ba:67:0b:20:d5:05:8f:61:98:5f:0d:f9:79:
                    8d:dc:83:71:e5:e2:25:1f:a7:04:5d:dd:e6:07:5e:
                    b8:2b:63:75:65:2e:b0:e7:8c:6e:ab:ea:68:5e:9c:
                    56:0e:d4:1b:e3:c4:00:9c:e5:fd:83:37:bf:0d:f1:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:84:A6:6B:BE:D5:90:29:2D:57:03:90:D3:1E:3F:49:4D:03:60
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:59:48:f3:d0:f7:74:9c:32:17:7d:b8:01:b2:6d:d5:50:b3:
         96:59:c7:1a:57:4c:b8:98:94:8c:cf:96:68:13:29:64:05:69:
         fe:fa:de:c3:88:af:33:44:f7:de:4f:b5:d6:ee:7d:66:20:5e:
         be:db:20:e8:92:f0:b6:42:b9:dc:6c:41:9c:c5:5c:0f:ae:ac:
         6b:57:83:c8:8b:c9:3d:e8:46:c4:0e:78:8d:e4:61:75:23:91:
         1f:c2:25:c0:47:da:5e:9b:e3:55:4e:9e:50:83:ad:0d:6f:a5:
         22:b9:b5:ca:7b:29:37:5f:a8:aa:f4:94:87:9e:7c:b0:ed:2f:
         0f:4d:46:31:a8:87:d6:5d:94:c0:99:65:b3:b7:60:89:67:0d:
         4f:92:51:85:2d:b6:70:da:70:f1:65:ea:69:95:db:0d:26:71:
         8e:f8:6e:bb:0d:df:ea:35:c0:60:11:eb:20:22:82:62:70:ff:
         cb:52:c2:bb:9f:71:a5:ed:77:b0:67:68:c4:3f:53:e8:48:0f:
         31:ca:da:ef:f7:c1:3f:df:4d:22:d2:12:72:b8:f4:24:f2:bf:
         d6:2b:bd:72:48:d4:ac:7a:2c:89:18:1c:90:c6:9f:9b:ff:9a:
         17:ae:58:d7:36:db:83:0f:02:7c:dc:96:e4:37:41:da:72:66:
         f3:9a:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:38 2025 by rpki-client