Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230342e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          7nQgwoetb+Yt8y9/aGXPcqIaHBRhOuEmuHrdOnBH5jg=
Subject key identifier:   1A:C6:8E:73:35:8C:A4:F2:7D:4A:D8:CB:B1:7E:E9:F7:8C:78:D4:FA
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       7B1634B6E4C6681BA53A8CD3C6F6B9539BCDFF28
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 10 Aug 2026 20:19:21 +0000
ROA not before:           Mon 10 Aug 2026 20:14:21 +0000
ROA not after:            Mon 09 Aug 2027 20:19:21 +0000
asID:                     53086
IP address blocks:        187.33.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:16:34:b6:e4:c6:68:1b:a5:3a:8c:d3:c6:f6:b9:53:9b:cd:ff:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Aug 10 20:14:21 2026 GMT
            Not After : Aug  9 20:19:21 2027 GMT
        Subject: CN=1AC68E73358CA4F27D4AD8CBB17EE9F78C78D4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:53:f1:6d:45:0d:f6:77:13:96:49:88:94:
                    53:f0:7a:7f:b3:80:35:0f:a0:b4:d7:30:85:fc:bd:
                    8f:f7:58:14:70:63:ab:35:45:63:7f:7d:03:67:e9:
                    36:af:be:6b:e6:70:cd:dc:71:e5:62:78:60:71:8c:
                    b8:fa:64:85:bf:46:f6:be:22:5a:86:c1:52:0b:cc:
                    89:57:88:09:0f:ba:58:57:1f:21:d1:c8:90:8e:e1:
                    43:91:ac:0a:6f:f3:ea:49:c8:66:b0:34:6a:45:3a:
                    5c:50:56:51:02:f0:bf:c2:a9:6b:52:bb:dd:8f:13:
                    91:55:70:68:0f:fb:93:82:77:6e:d1:70:dd:f2:31:
                    23:ad:59:df:fe:8e:1d:2c:35:09:fd:75:90:b3:58:
                    15:97:0f:80:f4:43:98:d9:9a:23:ab:2e:91:88:93:
                    41:97:3b:14:6a:ca:b8:2a:60:a5:fa:a1:9b:6d:bb:
                    5d:31:4a:ce:ec:bc:8a:ba:2e:d1:86:ef:f2:24:93:
                    3c:5d:b9:97:b5:67:af:03:89:72:38:38:15:f3:bc:
                    e8:b7:9b:01:46:9f:2a:e9:45:62:c1:b1:c7:98:0c:
                    05:c8:c9:58:3e:45:1f:f1:ce:29:dc:cc:d7:0e:6f:
                    7f:66:ee:f3:bc:46:1a:f3:98:79:b8:63:06:4c:5b:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:8E:73:35:8C:A4:F2:7D:4A:D8:CB:B1:7E:E9:F7:8C:78:D4:FA
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:7f:43:2d:2d:8e:40:02:56:a9:9c:08:bf:46:a7:4b:47:
         37:92:5b:d8:52:25:b8:08:ef:5d:e8:89:91:99:1d:0e:c0:6e:
         df:32:3f:1a:67:ec:5c:b2:69:9c:bc:d2:5a:05:3e:6b:15:c3:
         ee:f6:1c:ac:10:ca:d6:b7:59:fa:a4:22:99:2a:2c:b0:e1:5d:
         38:64:60:96:85:33:4b:f4:68:75:19:12:91:4e:cd:4d:c0:a5:
         5a:cb:ae:25:9b:36:18:04:67:e3:fa:57:73:ca:a9:a3:a5:ea:
         2f:1a:7c:ec:26:04:ba:79:c9:cd:1f:c5:7a:84:3c:e5:07:53:
         ff:3a:ac:90:3d:1e:2a:92:46:64:ce:a2:1c:2a:a0:36:05:5a:
         f2:44:33:77:5d:a4:5c:b6:41:a6:26:b6:0b:aa:28:2f:42:76:
         31:1e:f5:86:23:ff:58:c3:e7:fc:9f:7c:0d:ea:3f:8e:c4:0d:
         3a:54:78:85:1c:a0:b9:5d:81:0f:f6:05:7f:34:23:73:3e:07:
         60:6b:0c:3f:c6:ae:de:e4:b7:72:2a:d3:63:ed:7d:35:67:a0:
         57:cf:9f:90:88:89:49:52:29:5c:92:f0:49:31:3d:be:21:75:
         ff:b3:0f:f2:56:97:b6:1e:92:5d:93:12:6a:35:69:ce:9e:44:
         f9:37:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:21 2026 by rpki-client