Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3230322e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          keoqGvVSK1d5gPPR4jCPi2MlVUgRpERJLk52UxrJlV8=
Subject key identifier:   66:13:6A:0F:5D:AC:10:1D:F4:B6:39:72:ED:C7:9B:3D:63:4C:C5:03
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       6353AFD3408E66EA1F7868AD8835C95E0EF0DDF2
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:21 +0000
ROA not before:           Thu 06 Mar 2025 08:40:21 +0000
ROA not after:            Thu 05 Mar 2026 08:45:21 +0000
asID:                     53086
IP address blocks:        187.33.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:53:af:d3:40:8e:66:ea:1f:78:68:ad:88:35:c9:5e:0e:f0:dd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:21 2025 GMT
            Not After : Mar  5 08:45:21 2026 GMT
        Subject: CN=66136A0F5DAC101DF4B63972EDC79B3D634CC503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:c6:78:4a:a0:dc:6a:a8:a1:53:07:87:e8:
                    ca:c4:d7:66:db:11:27:f9:8f:bc:ad:ca:9e:56:cd:
                    84:06:f1:e3:25:4c:92:ea:20:ca:b9:c4:9e:1e:0a:
                    90:90:4a:32:a8:0f:05:59:1e:3b:82:ee:f3:c2:f4:
                    67:2b:1b:e8:df:cf:ea:a9:4c:f5:ce:b1:fd:8a:13:
                    c7:b1:eb:ba:31:80:c6:2e:05:52:ba:7d:6a:5d:7c:
                    64:95:3c:c9:f7:2e:f4:e7:f2:57:03:f0:ac:b6:13:
                    98:09:27:96:fd:a6:21:36:af:09:22:88:f6:a6:52:
                    14:b3:df:e7:0a:1b:ba:1f:cd:7d:9b:f2:ba:68:7d:
                    c2:8b:19:0e:cc:9f:39:77:68:90:f0:a8:08:41:60:
                    34:b4:93:3b:e8:b0:e5:cc:6c:41:b1:c8:0a:ef:09:
                    b9:12:04:66:6b:b2:94:68:97:48:58:1c:b5:4a:ce:
                    88:4c:e4:91:24:22:84:45:8d:fe:a8:0b:65:ea:16:
                    ae:bc:bf:57:ba:af:d5:21:48:c1:6b:e0:bb:7c:08:
                    77:82:51:42:95:9e:eb:30:43:e8:f7:a1:e1:84:f8:
                    45:7a:67:7a:5d:c5:72:ea:63:cd:09:b8:83:72:e6:
                    e6:39:54:56:15:7b:fb:26:f8:fc:77:31:b7:7c:9f:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:13:6A:0F:5D:AC:10:1D:F4:B6:39:72:ED:C7:9B:3D:63:4C:C5:03
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:57:82:78:95:51:82:a9:56:a6:3b:42:93:1a:3c:ee:97:e3:
         ff:77:6a:82:48:93:da:7c:28:8e:ec:11:5f:40:55:2e:6f:fb:
         36:0a:5c:2b:64:46:8e:2d:09:59:05:b1:6d:11:f2:1d:90:ec:
         9f:72:29:54:57:13:40:59:51:be:3c:eb:cc:ec:8d:fd:28:7a:
         f9:c8:b9:b0:07:9e:21:51:14:e7:c6:98:9a:7f:51:f6:35:15:
         7c:99:4c:63:3d:5d:bb:b5:6a:f6:99:d1:77:7a:45:f0:51:b4:
         3b:ca:e3:99:2b:ab:b9:e2:e1:6b:98:c5:2c:d5:64:ff:74:bd:
         7f:96:5b:43:6b:13:7d:86:a8:65:11:fd:0a:bb:99:e1:6d:2f:
         71:0a:98:75:01:46:0b:1a:28:0d:2f:52:c4:1b:b4:fa:ac:9b:
         43:00:a0:50:77:7e:66:fe:d9:03:5f:b5:a6:60:91:60:be:90:
         2b:e7:9c:20:d7:45:12:01:6e:c7:9f:6b:e4:18:8e:8f:e9:c3:
         ee:04:d1:e2:a4:62:60:2d:6b:dd:9b:8f:ec:7b:ff:9b:ae:b6:
         61:71:9b:91:fd:12:1c:76:da:5d:26:ab:96:20:ef:78:7c:55:
         99:5c:04:b2:4f:5e:77:b4:55:ac:8a:e4:66:ed:00:02:7e:98:
         c2:6e:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:26 2025 by rpki-client