Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230362e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230362e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          zBzktboSsWaT6kwY0D6pZ8gdDZW02VkXPO0Bhyp/1KM=
Subject key identifier:   1A:E7:D6:8D:A7:46:75:32:6A:35:6E:B0:46:F2:66:81:11:51:0E:3D
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       5FDC3C272C00512D40003693A9C8E420F389CEF6
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230362e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 10 Aug 2026 20:19:21 +0000
ROA not before:           Mon 10 Aug 2026 20:14:21 +0000
ROA not after:            Mon 09 Aug 2027 20:19:21 +0000
asID:                     53086
IP address blocks:        187.33.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:3c:27:2c:00:51:2d:40:00:36:93:a9:c8:e4:20:f3:89:ce:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Aug 10 20:14:21 2026 GMT
            Not After : Aug  9 20:19:21 2027 GMT
        Subject: CN=1AE7D68DA74675326A356EB046F2668111510E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:16:6d:97:ce:79:aa:36:61:c7:25:65:8b:
                    4a:87:16:05:d0:ae:a7:75:bf:81:31:21:ee:b8:27:
                    3c:ea:de:dd:71:5e:bd:d0:ae:b7:70:a2:4b:19:44:
                    73:40:0d:cb:f1:70:4f:99:c9:74:bf:52:c6:60:ec:
                    fc:05:5f:66:b2:64:7d:86:0d:56:74:be:00:d9:74:
                    a2:99:20:b0:61:53:a5:f7:9f:00:2e:e9:1a:aa:b7:
                    8a:fa:c4:40:fa:99:53:2e:6f:77:76:12:34:0e:a6:
                    53:bb:e9:5c:ab:44:74:44:69:93:4d:12:88:15:3d:
                    0e:ce:f5:0a:9e:88:c0:85:f3:22:70:44:0e:2e:25:
                    41:41:f2:de:d7:fe:d9:b8:4d:6a:16:d6:12:e2:27:
                    9d:53:0e:9a:6c:a7:91:f9:6f:34:34:38:1a:b6:32:
                    0c:90:6b:3b:d2:bf:c3:b1:4d:dd:81:c2:08:e3:46:
                    b8:f6:23:da:dd:19:43:3c:eb:b7:30:84:e6:58:af:
                    12:2a:b7:b6:c7:39:7e:a8:58:dd:7c:7e:34:90:36:
                    d8:08:b9:cf:9a:e5:e0:cd:be:33:3c:2b:e9:37:fe:
                    80:82:87:79:9b:0e:d6:e2:af:c5:bd:71:c0:9c:17:
                    02:48:0a:26:26:c1:71:ba:ff:d2:68:7d:87:2c:55:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:D6:8D:A7:46:75:32:6A:35:6E:B0:46:F2:66:81:11:51:0E:3D
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230362e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7f:4c:5c:eb:16:67:c6:b7:50:3a:28:1f:73:83:2d:5b:c9:
         49:9c:f0:e9:13:d2:54:34:d8:c4:3e:91:38:99:ca:d8:be:34:
         4c:77:23:29:d9:cb:f5:0d:95:d2:c7:5b:7e:fe:51:4d:59:97:
         ae:b0:43:28:e7:5a:35:e4:f1:c8:b4:74:cf:39:7d:48:69:78:
         5f:8e:c7:6b:aa:05:b4:5a:c7:0a:ad:1d:8b:c9:1a:7f:a1:68:
         41:7d:d4:63:94:76:28:c0:20:10:87:d2:a6:88:90:9c:37:68:
         5a:03:77:58:51:2f:a6:e3:a6:5d:4f:14:68:69:b1:54:59:ab:
         ef:66:03:c8:9c:d1:db:ad:78:38:46:6a:b6:b8:34:ff:22:13:
         fe:e8:79:33:a7:17:84:bb:07:52:32:41:56:07:71:7f:c2:1c:
         53:ec:11:1a:4c:6f:85:d0:be:ac:a5:02:2a:19:02:f1:2b:a7:
         8c:e2:f2:4f:28:23:82:f6:e6:e9:c2:5b:7e:34:35:b2:fd:d0:
         8b:d3:79:ad:c5:f4:42:8a:ce:6d:0b:15:95:bd:6a:bd:01:d5:
         15:8a:66:a5:8a:3c:57:12:7c:2c:ea:d1:5f:ea:47:2b:3c:9d:
         a0:6f:70:c1:b3:2a:7e:02:34:83:4a:8a:ab:1e:3c:1c:81:fd:
         68:d6:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:07:42 2026 by rpki-client