Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          62HeFDLT+9PeY30UjlPCy6OUayav01FI55PRixMA9T8=
Subject key identifier:   FF:59:D5:0E:AA:19:9B:2B:80:F6:3E:33:CF:3F:79:61:4B:E3:55:0C
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       1040D95A5A75F44569E5E8A5FCCA5977347C7DF2
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:52 +0000
ROA not before:           Thu 04 Apr 2024 08:21:52 +0000
ROA not after:            Thu 03 Apr 2025 08:26:52 +0000
asID:                     53086
IP address blocks:        187.33.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:40:d9:5a:5a:75:f4:45:69:e5:e8:a5:fc:ca:59:77:34:7c:7d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:52 2024 GMT
            Not After : Apr  3 08:26:52 2025 GMT
        Subject: CN=FF59D50EAA199B2B80F63E33CF3F79614BE3550C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:da:63:20:40:3a:fa:67:ca:43:59:72:5f:
                    87:33:c9:b3:4d:b7:2a:50:5c:5f:e1:33:25:04:a0:
                    4b:97:7a:ae:5c:21:e3:e4:3a:51:70:3f:f0:98:25:
                    91:76:ef:3b:52:54:59:83:1c:4f:fb:d3:b8:9e:45:
                    da:1d:c3:2a:c1:d1:96:c9:8c:71:72:7e:a4:bf:2f:
                    5e:ea:61:03:06:42:b4:22:f4:d0:37:59:77:1b:e0:
                    ca:1e:b5:5e:3f:73:85:f1:eb:04:e1:98:67:4f:0a:
                    a6:d3:2d:03:6e:fe:8a:4a:3e:98:2f:c7:70:08:66:
                    0e:1f:23:0d:3f:7f:5e:cc:67:3c:cf:7a:d4:e1:d3:
                    ef:aa:1a:31:15:19:94:e8:4f:c0:6f:6b:03:ee:33:
                    85:41:40:df:2d:be:8b:e6:70:6d:fc:8b:ac:e5:ce:
                    a8:c5:17:8a:fe:aa:ec:42:af:f1:ef:17:d1:79:3d:
                    d9:c9:df:c7:1f:5d:e3:fe:e0:2b:76:47:85:4a:f6:
                    47:16:5b:b3:9f:3f:80:2a:f8:45:a4:09:7c:e8:c7:
                    97:db:12:9c:e4:da:4f:d6:ac:d0:af:0c:38:a0:31:
                    a8:6b:64:c0:15:03:c7:d5:32:11:d3:b4:5d:d4:12:
                    8a:85:73:e1:91:be:2d:48:d3:c9:c1:b4:9b:49:df:
                    01:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:D5:0E:AA:19:9B:2B:80:F6:3E:33:CF:3F:79:61:4B:E3:55:0C
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:80:cf:0d:ab:32:b0:f5:8b:aa:a5:72:18:78:d6:47:92:
         09:b5:50:ab:07:e4:c9:ea:0b:23:56:2f:78:2f:42:01:20:57:
         6d:29:fa:b9:a2:03:c0:e6:a4:c4:6d:fc:31:91:ab:8a:1b:91:
         e5:a8:14:d8:7e:1d:77:95:86:90:a2:b1:0f:b7:60:5a:d4:a7:
         84:14:33:de:ce:50:50:db:ec:92:8f:e1:7c:5c:b9:6a:21:65:
         a5:57:f6:70:2b:97:4d:5b:3c:ea:f1:7f:04:13:96:3e:2b:f1:
         49:6c:2c:75:99:18:ff:50:f6:91:69:29:b9:2f:84:a6:ab:fd:
         a5:aa:30:70:ec:0b:df:ec:e1:fd:d0:2c:6d:21:b4:62:9a:e4:
         d5:62:b0:6f:ff:97:e2:36:81:e0:09:2e:1e:17:ed:6b:28:7b:
         10:b8:b5:bf:20:47:ae:2d:42:26:e7:2f:8d:0c:87:c7:ed:81:
         10:c1:80:66:85:7a:fb:5b:d0:78:43:9d:32:ec:0b:2e:90:19:
         93:bc:34:84:2c:6f:e7:a9:d2:75:82:dc:6f:fa:81:b0:2e:f8:
         dd:09:66:9c:fb:28:9c:e4:13:9b:f3:41:42:5c:19:4c:8b:ed:
         a6:cc:9e:9c:07:56:6c:29:b4:62:89:4d:4b:69:c8:15:b3:78:
         54:01:a6:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEEDZWlp19EVp5eil/MpZdzR8ffIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNDA0MDQwODIxNTJaFw0yNTA0MDMwODI2NTJaMDMxMTAvBgNV
BAMTKEZGNTlENTBFQUExOTlCMkI4MEY2M0UzM0NGM0Y3OTYxNEJFMzU1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcdpjIEA6+mfKQ1lyX4czybNN
typQXF/hMyUEoEuXeq5cIePkOlFwP/CYJZF27ztSVFmDHE/707ieRdodwyrB0ZbJ
jHFyfqS/L17qYQMGQrQi9NA3WXcb4MoetV4/c4Xx6wThmGdPCqbTLQNu/opKPpgv
x3AIZg4fIw0/f17MZzzPetTh0++qGjEVGZToT8BvawPuM4VBQN8tvovmcG38i6zl
zqjFF4r+quxCr/HvF9F5PdnJ38cfXeP+4Ct2R4VK9kcWW7OfP4Aq+EWkCXzox5fb
Epzk2k/WrNCvDDigMahrZMAVA8fVMhHTtF3UEoqFc+GRvi1I08nBtJtJ3wENAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/1nVDqoZmyuA9j4zzz95YUvjVQwwHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzEzODM3MmUzMzMzMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuyHIMA0GCSqGSIb3DQEBCwUAA4IBAQCKHYDPDasy
sPWLqqVyGHjWR5IJtVCrB+TJ6gsjVi94L0IBIFdtKfq5ogPA5qTEbfwxkauKG5Hl
qBTYfh13lYaQorEPt2Ba1KeEFDPezlBQ2+ySj+F8XLlqIWWlV/ZwK5dNWzzq8X8E
E5Y+K/FJbCx1mRj/UPaRaSm5L4Smq/2lqjBw7Avf7OH90CxtIbRimuTVYrBv/5fi
NoHgCS4eF+1rKHsQuLW/IEeuLUIm5y+NDIfH7YEQwYBmhXr7W9B4Q50y7AsukBmT
vDSELG/nqdJ1gtxv+oGwLvjdCWac+yic5BOb80FCXBlMi+2mzJ6cB1ZsKbRiiU1L
acgVs3hUAaau
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org