Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          8fNTRg4ZFGg2Ymq+pgrBnehwbm8iq5AdHHdyx8GU0+g=
Subject key identifier:   0D:BC:BD:69:01:3C:13:E4:C9:4A:30:36:D5:94:47:8B:23:2B:3C:1C
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       65B48E762D0C6A0A34AECAA55E0914632AFB5B9D
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:53 +0000
ROA not before:           Thu 04 Apr 2024 08:21:53 +0000
ROA not after:            Thu 03 Apr 2025 08:26:53 +0000
asID:                     53086
IP address blocks:        187.33.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b4:8e:76:2d:0c:6a:0a:34:ae:ca:a5:5e:09:14:63:2a:fb:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:53 2024 GMT
            Not After : Apr  3 08:26:53 2025 GMT
        Subject: CN=0DBCBD69013C13E4C94A3036D594478B232B3C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:e3:a4:63:2f:8a:dc:38:08:1a:69:b4:05:
                    cd:e7:e0:9e:f4:97:f1:48:db:df:f5:77:d8:e3:01:
                    b7:5d:41:1d:ec:4b:20:de:78:4b:13:16:65:93:ed:
                    27:57:bd:10:bd:c2:a0:57:45:56:bf:87:53:25:32:
                    6d:23:ea:12:00:68:46:42:1b:00:ce:30:62:b9:35:
                    c1:b8:54:aa:1d:60:95:d5:42:4f:34:e6:d5:06:b6:
                    4a:1d:ad:b4:3c:f4:b9:39:1a:b2:99:4e:45:f2:a9:
                    a9:53:2d:c6:f7:18:e8:88:a1:48:05:88:e8:44:2a:
                    38:83:56:ea:5f:19:d1:81:1c:92:60:b9:b6:0e:f8:
                    1d:56:03:c7:a7:68:00:bb:4e:f4:f7:4a:c6:64:9b:
                    7f:e4:7f:88:d7:36:38:65:8d:9a:16:e8:d1:36:85:
                    57:46:00:63:93:ea:f6:cc:40:b4:cf:61:43:ef:b6:
                    5a:31:a5:78:c6:c9:a9:12:bb:78:dc:f6:94:00:7f:
                    3d:77:03:da:b9:2b:9b:e5:e8:89:cb:23:f9:13:a8:
                    12:ab:6c:49:2b:20:ba:23:c6:21:cb:c7:18:ae:14:
                    9e:bf:71:ba:95:51:8b:04:61:61:ad:ee:21:eb:c9:
                    c1:27:c4:67:a1:83:1a:c8:2e:ce:0d:32:8b:84:02:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BC:BD:69:01:3C:13:E4:C9:4A:30:36:D5:94:47:8B:23:2B:3C:1C
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:20:0c:30:98:ba:55:c2:b6:27:c7:ea:c2:de:f3:5f:a7:
         80:1b:f5:27:e4:3d:8f:57:3f:89:df:14:3c:c3:35:39:22:4a:
         55:85:5c:1c:28:1b:95:16:ca:d0:41:c1:84:fc:e6:60:96:07:
         b2:53:ca:d3:d0:15:cb:51:1d:3e:f6:62:fb:f2:14:43:fc:4f:
         76:2a:27:f9:62:00:34:3d:9e:c6:9d:ca:d1:8e:f5:c0:24:89:
         87:fe:16:b7:99:14:f5:3a:44:9b:e8:c6:bf:4c:36:37:d8:1f:
         1e:60:44:82:f4:8d:2b:db:c5:38:c3:5d:14:cd:f5:fe:56:45:
         73:f4:70:aa:cd:06:d3:ba:18:40:64:ba:8b:87:7d:a1:04:18:
         43:e8:9e:a8:a1:f9:b4:40:db:fa:c9:94:4c:82:3e:19:40:5d:
         9e:4e:b2:d6:38:b8:d1:42:bd:0d:22:f6:00:10:7b:04:71:5c:
         1c:e3:ae:32:d9:fb:ee:7a:d4:bd:90:35:80:e6:52:f1:1c:91:
         7d:08:85:9e:34:7b:b7:03:dd:de:2f:c7:09:06:7f:20:d0:b7:
         21:01:5b:38:37:d9:f8:44:cd:5c:11:23:2a:99:0c:b3:04:67:
         da:88:a8:27:96:12:3f:8e:ac:09:53:b2:1a:65:11:2f:a7:1f:
         11:bf:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org