Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230332e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230332e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          +tnRC0LZb0stmKss6Y2VUFEOz/n5KHQzpH+yFvyPeHI=
Subject key identifier:   B9:82:9D:A8:A9:9C:9F:32:1B:FE:1A:98:B1:AD:78:A3:FF:EE:14:0D
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       49E3E0391181BCCAE7BE90182737BD8815140FDA
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230332e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 10 Aug 2026 20:19:22 +0000
ROA not before:           Mon 10 Aug 2026 20:14:22 +0000
ROA not after:            Mon 09 Aug 2027 20:19:22 +0000
asID:                     53086
IP address blocks:        187.33.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:e0:39:11:81:bc:ca:e7:be:90:18:27:37:bd:88:15:14:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Aug 10 20:14:22 2026 GMT
            Not After : Aug  9 20:19:22 2027 GMT
        Subject: CN=B9829DA8A99C9F321BFE1A98B1AD78A3FFEE140D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:46:72:ef:80:78:11:14:b8:b9:cd:ba:96:
                    bb:59:d2:f2:22:5e:1f:47:ba:94:fa:01:c7:c4:5e:
                    fd:b9:01:7e:52:82:ce:25:9a:88:58:5e:aa:3e:a1:
                    46:83:e5:20:0c:7c:81:87:f8:f5:52:fc:d2:3c:bb:
                    43:10:33:23:ce:21:d3:fe:c3:c7:ce:72:5c:1e:04:
                    cd:1d:17:0a:9b:36:02:db:39:11:d2:0b:09:0e:2f:
                    b5:db:23:46:e0:90:4c:16:47:a2:8f:d6:a7:08:05:
                    e2:da:73:20:f2:51:d1:78:cf:fb:ab:fa:9a:9e:1a:
                    e4:32:84:c7:76:b6:c1:83:f1:7b:be:f1:1b:05:91:
                    c8:f8:71:1c:4b:d8:d8:46:69:5d:d6:a5:30:a2:fb:
                    bc:28:f4:a1:a5:8f:15:65:ac:f7:f2:66:d6:ba:bd:
                    ba:19:f4:a7:18:d2:78:b4:62:24:14:7b:d5:5e:bc:
                    3d:9b:3a:7a:19:8d:2f:36:b2:ec:83:43:9f:a5:d8:
                    50:5d:59:e9:b7:cd:8c:4d:5a:d1:f9:95:79:fc:75:
                    22:5a:ea:1b:a2:f4:b1:3f:27:a9:1d:d7:02:e6:56:
                    50:d3:6f:e0:d7:cc:09:43:6c:dd:51:ac:89:a7:64:
                    9b:1e:39:b6:3c:08:f3:2f:a4:34:3f:57:50:c9:0f:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:9D:A8:A9:9C:9F:32:1B:FE:1A:98:B1:AD:78:A3:FF:EE:14:0D
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230332e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c2:f6:ce:14:38:45:2e:5b:9b:39:7c:aa:18:cf:3c:19:90:
         85:03:1e:ed:85:48:94:f1:b2:93:53:d9:d1:0b:af:8c:ab:d2:
         bd:0b:0a:11:7b:bb:be:35:11:e8:1f:1f:b0:e8:b9:67:4a:dc:
         35:f5:76:43:92:5d:8a:e8:04:fc:9d:b5:7c:73:99:98:3c:ca:
         da:27:4b:a6:c9:fb:b4:ad:9a:65:41:55:55:22:10:83:7f:1e:
         a6:b3:2a:22:61:a9:a2:e8:bc:af:fb:11:78:0a:49:fc:b9:c9:
         c2:f2:e8:4c:de:45:d4:1c:0f:5c:b4:3b:96:d8:59:1d:ec:6a:
         8f:01:6e:23:8d:14:90:4c:d5:d7:9c:2c:df:f1:09:19:89:85:
         8b:83:eb:e5:fc:25:8b:d8:41:22:bc:c8:85:63:77:2b:65:9b:
         54:0e:14:07:c0:3c:e8:f4:29:50:0c:d8:b9:67:58:e5:f4:62:
         28:02:e7:76:6c:31:36:b9:30:66:44:29:e5:9b:1a:76:ff:07:
         41:f5:52:ad:19:c1:57:dc:bb:67:19:4e:6f:d6:b9:63:34:a9:
         5b:34:1b:16:b4:51:f5:6a:53:52:e3:b7:e6:81:e6:88:cc:5c:
         c6:9a:f9:66:4f:2b:b1:72:4e:dc:93:39:90:75:d2:bf:c6:a9:
         34:f8:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:20 2026 by rpki-client