Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          xHZV5Mvpz8knQT153cJdWiSkiBDR9j3NBRkB0h7wjyY=
Subject key identifier:   0D:29:91:97:FC:DE:E2:D4:0F:AA:AD:86:BC:CA:3C:FD:74:BD:90:3B
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       7DEEA461058202720EA7695DEA898FB54ABBCB4D
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:21 +0000
ROA not before:           Thu 06 Mar 2025 08:40:21 +0000
ROA not after:            Thu 05 Mar 2026 08:45:21 +0000
asID:                     53086
IP address blocks:        187.33.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ee:a4:61:05:82:02:72:0e:a7:69:5d:ea:89:8f:b5:4a:bb:cb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:21 2025 GMT
            Not After : Mar  5 08:45:21 2026 GMT
        Subject: CN=0D299197FCDEE2D40FAAAD86BCCA3CFD74BD903B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:39:11:40:66:f8:af:85:a1:d7:10:02:25:
                    88:d5:d5:b9:46:9c:75:5b:5c:c2:f6:11:94:fc:d8:
                    2d:5e:70:f1:4e:ec:8d:11:d2:83:39:52:90:76:da:
                    ff:a9:34:1a:44:36:06:eb:a4:9c:90:be:e1:b6:d2:
                    9b:d3:09:46:d6:ca:22:da:a7:04:62:4a:a9:d3:70:
                    05:6b:62:78:c5:19:e3:3f:46:53:37:3e:ee:f7:f4:
                    44:bf:cc:5e:4f:c5:1f:13:22:55:12:a3:e9:ab:c2:
                    36:b5:21:59:b3:bb:be:20:60:db:ff:9a:26:e7:12:
                    6d:61:d4:72:f8:71:41:9c:1d:76:17:53:00:97:f7:
                    95:2a:2a:48:d5:d2:de:29:3f:e4:22:1d:56:b1:3e:
                    f7:22:39:68:bf:7a:6b:21:7b:c2:1d:7c:93:9b:26:
                    b0:fe:9d:76:17:af:8f:5d:e6:10:2e:7e:d2:04:40:
                    bc:a8:3e:c4:c6:08:c2:38:d9:08:8c:82:b9:7b:8c:
                    6a:17:96:c9:42:4b:db:d3:82:dc:3d:2e:be:87:cb:
                    cb:e5:23:3d:c5:22:82:22:2e:51:8c:41:b1:76:3f:
                    fe:ec:be:33:2c:64:24:ac:1a:52:78:50:80:67:cf:
                    8c:42:6d:ee:b2:b7:4a:42:3e:c0:6f:d8:89:09:b8:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:91:97:FC:DE:E2:D4:0F:AA:AD:86:BC:CA:3C:FD:74:BD:90:3B
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:09:d7:ae:f2:e2:28:1e:9b:89:e3:8b:42:89:37:ad:08:
         46:1d:a2:ce:fe:df:cd:19:55:9b:1a:ba:ed:fb:0b:f5:dd:9b:
         fb:b5:32:4c:f0:f0:55:8f:f7:98:1d:8a:d2:03:3c:06:91:03:
         47:b8:52:c1:b6:16:a3:60:73:ee:08:b0:89:3d:8e:09:4c:c3:
         69:0b:c3:21:a1:0a:a7:56:4c:b1:60:97:4d:09:2a:7c:24:35:
         c1:0f:be:09:66:b6:5d:77:fb:d2:0c:1a:5e:0b:ca:97:29:d4:
         05:29:c2:dd:2e:03:53:d7:2c:16:79:33:a1:ab:cc:2a:c3:4c:
         15:1f:2f:05:d1:e6:30:a3:af:c1:98:be:28:d1:fa:69:96:15:
         95:a2:fd:ea:99:f3:2f:3e:ab:fb:16:4f:24:99:05:67:16:26:
         4c:42:87:de:19:2e:ff:c0:65:3e:33:e3:44:b9:af:0a:67:ea:
         6b:4d:87:8e:bb:ab:a1:2f:34:4e:41:b4:1c:c1:72:32:9c:aa:
         5e:e8:68:1a:3e:00:0c:d9:5d:3f:9c:0b:60:4d:86:53:4f:32:
         7c:ed:c1:ef:11:4b:bd:c3:b7:ad:48:44:f8:dd:c9:34:48:83:
         e7:73:d6:b0:d2:7f:2c:ad:3c:2e:e5:fe:92:e1:af:ef:64:8f:
         df:af:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:26 2025 by rpki-client