Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230342e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          V9HOrKXKHNp2kXR+wVVrOcz5pRU9lc0TqS2iJS6ABjc=
Subject key identifier:   1A:B8:2E:B2:50:14:AB:E0:9F:A2:FA:04:6D:5D:A1:57:21:D5:95:16
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       3A0C714FFBADD420B14770BEC5251C62F2D697AA
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 08 Sep 2025 20:02:40 +0000
ROA not before:           Mon 08 Sep 2025 19:57:40 +0000
ROA not after:            Mon 07 Sep 2026 20:02:40 +0000
asID:                     53086
IP address blocks:        187.33.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0c:71:4f:fb:ad:d4:20:b1:47:70:be:c5:25:1c:62:f2:d6:97:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Sep  8 19:57:40 2025 GMT
            Not After : Sep  7 20:02:40 2026 GMT
        Subject: CN=1AB82EB25014ABE09FA2FA046D5DA15721D59516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:73:35:b7:a9:7d:1d:6b:b5:25:5d:c3:65:
                    a5:18:b5:60:94:df:c4:da:4b:ca:27:52:4f:ec:98:
                    b9:49:a8:db:39:d9:ca:b2:0b:aa:3d:2d:18:61:8d:
                    18:5c:85:e8:21:7a:56:0e:4f:b8:bb:57:90:d7:22:
                    cf:d3:3d:e8:c2:00:64:6a:17:85:8f:f3:44:6f:81:
                    fa:65:61:ca:6f:e4:1a:b3:cc:58:67:86:8c:64:f9:
                    9f:23:45:4e:e6:98:47:bb:2b:40:b0:d0:c1:a8:4d:
                    91:32:a8:a4:14:5b:39:b3:d6:5e:6d:8e:d0:42:db:
                    a0:1e:a7:72:c0:df:f2:f7:04:80:78:24:fc:78:92:
                    82:49:f2:b2:2d:01:2d:31:09:27:1f:01:94:a3:3f:
                    c8:01:8c:e3:62:88:f9:ec:c6:32:3c:b4:50:12:0c:
                    90:3b:b7:9c:b9:df:67:b1:19:cf:52:9f:9e:57:4d:
                    8a:c7:ea:fb:7a:55:39:8b:eb:df:46:20:2a:01:88:
                    d2:26:4b:3f:40:b0:4c:ba:a3:0a:7c:d8:f9:c9:28:
                    ac:d8:0a:b4:c3:77:64:62:c4:c6:3c:a2:0a:1f:48:
                    0a:73:4e:e5:d8:1c:94:5f:a0:bf:45:2c:0d:1e:c6:
                    60:0a:71:6a:89:4d:97:74:7a:8d:a4:fd:eb:4d:5b:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:2E:B2:50:14:AB:E0:9F:A2:FA:04:6D:5D:A1:57:21:D5:95:16
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:9b:62:dc:c6:27:a2:6d:4b:cc:06:6c:4e:e5:4c:f7:87:80:
         ea:d5:f2:80:b9:f2:79:02:6f:c8:e5:e3:53:c6:5e:8f:9b:59:
         39:1f:ec:cf:d7:6f:2b:e7:6d:85:ff:54:b3:f0:27:92:b0:8c:
         c4:e1:f5:49:20:f5:ad:b2:bd:18:d6:75:8c:db:4a:a7:c9:9f:
         4b:d1:67:a4:22:0c:67:37:9f:a3:a8:20:61:fa:fb:89:59:c3:
         0a:ba:13:51:07:5e:fc:8c:99:05:46:7e:59:64:99:b2:f7:c0:
         36:7b:5c:d0:ac:85:a3:d6:c0:db:ed:75:00:da:f2:c6:2e:8b:
         50:62:eb:ab:5a:22:6a:30:cb:f1:69:e8:9e:99:78:dd:3d:66:
         68:c4:99:4a:3a:1f:ff:61:ff:b4:90:7e:97:f3:22:79:2e:d2:
         bf:17:f9:cc:d2:3c:f9:fe:d2:9c:d8:89:f3:21:6a:a4:22:f9:
         2e:e5:9f:a9:f5:84:5a:6d:78:cf:d3:be:c6:3b:f3:9b:6f:2c:
         0e:2f:39:fc:2a:97:5b:7e:b8:f6:06:d7:82:6a:c4:e1:0e:fb:
         4f:af:a3:6d:8a:c8:2d:63:f8:42:1f:78:4e:fd:ff:dc:d2:7f:
         1c:d2:e1:cd:d5:23:02:cf:1a:46:62:40:cb:87:aa:bc:fe:dd:
         dc:ae:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:17:12 2025 by rpki-client