Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230352e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230352e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          mgkrLvZ88WSqOp2NfFmPAngLExrnIfO79vtvcubWRI8=
Subject key identifier:   60:EE:2E:FC:08:72:1B:C3:B5:DB:8D:0E:95:B6:8B:BF:F9:09:FB:1B
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       382F478816D3261EC412C262228F20D6DEDF15
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230352e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 08 Sep 2025 20:02:23 +0000
ROA not before:           Mon 08 Sep 2025 19:57:23 +0000
ROA not after:            Mon 07 Sep 2026 20:02:23 +0000
asID:                     53086
IP address blocks:        187.33.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:47:88:16:d3:26:1e:c4:12:c2:62:22:8f:20:d6:de:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Sep  8 19:57:23 2025 GMT
            Not After : Sep  7 20:02:23 2026 GMT
        Subject: CN=60EE2EFC08721BC3B5DB8D0E95B68BBFF909FB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:f6:75:ca:a0:a8:bd:97:9f:78:43:41:9a:
                    8f:7f:bd:63:a9:9a:15:b9:e5:17:b7:ea:79:6e:c1:
                    b4:fd:61:f7:e7:7f:fb:56:87:ff:8a:13:f2:65:0c:
                    ee:b9:81:2a:19:1e:41:71:99:04:10:97:44:22:d2:
                    f3:1a:c2:85:96:70:1b:9a:ad:91:56:db:83:1a:30:
                    0e:ff:45:d1:2f:f0:8b:d3:c7:48:96:a2:93:ae:86:
                    bd:e2:9e:5e:1a:45:74:92:b0:26:c7:2a:bf:e5:7e:
                    1e:b3:77:a9:da:c8:c4:84:f1:46:14:85:eb:34:32:
                    85:b0:29:f8:6f:b8:3d:e0:75:3a:7c:1e:c7:00:6f:
                    ff:5c:8a:f4:32:04:d8:ad:cd:5e:ef:ad:b7:b3:50:
                    bc:0f:a9:ee:53:72:98:f7:9e:f2:6c:28:95:d3:80:
                    08:c6:89:db:e2:4c:d4:cd:14:2b:70:f2:f6:6e:19:
                    16:05:f2:00:29:16:d1:b5:50:36:1a:5c:8f:45:d0:
                    86:65:d9:45:fa:58:2a:78:48:b8:2d:49:af:27:f3:
                    65:c3:39:a8:89:f7:61:a6:f7:de:6b:ab:66:89:0e:
                    fd:e0:ec:b5:75:5d:91:bb:a6:9d:a0:d8:63:83:f7:
                    81:a3:8c:9d:f3:92:70:f6:e3:8f:86:70:91:55:b0:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:2E:FC:08:72:1B:C3:B5:DB:8D:0E:95:B6:8B:BF:F9:09:FB:1B
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230352e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:47:94:ab:ad:91:c5:41:c9:0e:60:03:d0:a9:c6:b6:03:f0:
         45:6a:b7:75:d5:5a:55:cd:85:6f:4d:ff:35:94:ea:fd:50:fa:
         16:be:df:d8:f0:83:f0:88:61:8f:a3:6d:9d:36:f7:5a:cf:55:
         e3:9d:f4:1b:91:c4:84:16:fd:f5:0d:d5:95:36:16:c9:4c:ec:
         6a:8d:4c:ea:b3:33:ce:9b:3c:43:af:65:87:cd:27:fc:bd:88:
         99:be:bf:29:0c:c4:4b:af:d9:c6:dc:d7:52:cb:87:de:76:93:
         90:57:d7:c6:5a:fd:6e:ad:36:00:be:20:db:7a:e6:31:b6:fd:
         05:8e:0c:09:92:c4:c9:7b:16:da:d8:e5:27:b1:c1:8c:41:e9:
         4b:37:0f:41:ea:3d:cb:ca:a0:42:02:35:91:bd:e4:7f:69:b0:
         e3:c5:08:b2:80:e9:19:4e:1f:ab:ae:9d:5d:c1:24:ac:df:f0:
         1e:39:2b:e8:28:e3:e9:6e:be:ed:63:0b:fa:72:6b:f0:b2:e8:
         05:d2:d2:45:a3:ee:b7:0d:fd:31:9b:3e:e6:02:a5:b9:ca:93:
         78:12:cd:b1:82:fd:8c:0e:48:c3:3d:db:7e:23:ce:f1:b1:e5:
         e7:6a:7b:66:3f:d1:43:5e:ce:81:45:0c:9d:f5:3a:f8:fd:e8:
         83:cc:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:22:25 2025 by rpki-client