Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32312d3231203d3e203533303836.roa (raw, json)
Hash identifier:          dxEiYekFMeMp8pEZqMSnjginRM9qwSKvZqAcQfr+8Dw=
Subject key identifier:   76:CC:43:F1:FB:DC:4E:7F:29:44:39:DE:63:CA:FC:17:5D:07:13:36
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       75194D5902F6A08566C66FC32BA7DF5E6BE6F99C
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:21 +0000
ROA not before:           Thu 06 Mar 2025 08:40:21 +0000
ROA not after:            Thu 05 Mar 2026 08:45:21 +0000
asID:                     53086
IP address blocks:        187.33.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:4d:59:02:f6:a0:85:66:c6:6f:c3:2b:a7:df:5e:6b:e6:f9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:21 2025 GMT
            Not After : Mar  5 08:45:21 2026 GMT
        Subject: CN=76CC43F1FBDC4E7F294439DE63CAFC175D071336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:c2:75:5b:69:36:23:85:bb:e0:3d:fe:99:
                    b4:d8:35:47:ec:96:cc:4e:96:16:0a:4e:70:2a:ed:
                    b9:73:85:b6:32:05:39:6f:27:95:d7:b0:42:a8:e4:
                    76:02:86:80:8f:c7:33:26:02:4d:b6:a2:f7:ae:78:
                    30:e3:cc:d9:46:54:ed:d8:ff:40:b2:a9:6a:a7:02:
                    e7:60:23:ca:fa:e3:83:9c:e6:72:61:1f:39:29:70:
                    7b:17:4d:96:31:3c:b2:8a:8e:da:17:b7:d0:64:9e:
                    cb:78:5d:8a:9d:78:42:6c:4a:98:19:d2:65:da:28:
                    95:a4:13:d5:3c:ef:c5:d1:32:47:4f:b6:8f:bc:bb:
                    0e:63:d8:79:08:d0:2a:37:ec:3f:dd:28:52:e1:92:
                    96:c5:06:97:a8:a3:65:78:a8:12:cc:86:b8:a5:c7:
                    c8:35:97:3e:31:c8:5d:2f:7e:c3:fb:bf:9d:52:ac:
                    a3:13:70:1b:5b:d9:d3:a3:35:73:d6:b3:e5:1a:b5:
                    04:03:98:38:74:85:04:84:d8:3c:fa:22:09:61:dd:
                    d5:de:4e:f7:ae:b6:9e:5f:2a:cc:dc:11:af:de:eb:
                    b5:76:e3:7e:05:69:07:fe:f1:e4:66:f5:30:ca:64:
                    7e:59:b3:39:33:69:1a:0a:dc:7e:08:43:3c:de:4c:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CC:43:F1:FB:DC:4E:7F:29:44:39:DE:63:CA:FC:17:5D:07:13:36
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:b7:59:d8:63:2a:98:57:d5:16:c9:41:84:01:2e:ee:d9:
         05:09:de:29:9b:12:89:1e:a6:d9:6a:81:00:79:f1:78:08:dc:
         b5:7d:31:62:3c:fd:57:06:9f:5a:29:63:f6:bf:23:95:81:80:
         9c:04:91:48:70:63:a0:c0:4f:98:56:ef:6b:ba:3c:03:d7:ce:
         b9:a2:a7:ed:0d:66:92:dd:6a:07:33:67:f0:63:32:a8:19:b0:
         ea:92:d7:48:ca:6f:fc:4b:c9:e5:25:7b:ee:25:a0:8c:f5:7e:
         f9:97:99:ba:5a:0d:05:2c:b1:1d:16:23:20:8d:17:ee:90:19:
         d4:33:f0:a4:e4:a2:e3:bf:cc:ba:ba:30:2c:82:7e:03:44:3e:
         62:8c:88:a5:54:24:96:37:ac:30:bc:a2:5c:ae:6f:fd:b8:a3:
         c9:6c:0a:c8:b2:d5:78:34:42:7a:8d:19:d2:b1:0c:8d:09:ae:
         02:8d:2c:8c:f9:a9:5a:6f:84:56:58:d5:76:e1:4c:05:2d:75:
         61:ea:a7:25:c9:d0:a7:56:ac:fb:01:0c:43:d2:38:ca:60:cf:
         41:59:ba:25:5c:a1:1b:00:a4:d5:a7:f6:e4:fd:1a:f2:55:84:
         e0:03:2e:45:5f:ee:0b:15:a9:8a:48:46:85:bc:bc:e9:ef:0d:
         8b:fe:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:20 2025 by rpki-client