Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230372e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          97bOwm6F7ebNMdLO7q7UdqW81zDu8hFcyI/TONDlBlM=
Subject key identifier:   25:FE:DE:79:66:25:18:57:50:86:D7:B4:50:30:30:D3:DF:ED:BA:AC
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       1AF0803F65679B8F1B0EE73B0032194BB21601C2
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 10 Aug 2026 20:19:22 +0000
ROA not before:           Mon 10 Aug 2026 20:14:22 +0000
ROA not after:            Mon 09 Aug 2027 20:19:22 +0000
asID:                     53086
IP address blocks:        187.33.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:80:3f:65:67:9b:8f:1b:0e:e7:3b:00:32:19:4b:b2:16:01:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Aug 10 20:14:22 2026 GMT
            Not After : Aug  9 20:19:22 2027 GMT
        Subject: CN=25FEDE79662518575086D7B4503030D3DFEDBAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cb:72:b7:ef:3e:d6:3b:b1:24:80:d3:17:4e:
                    e8:9b:18:16:43:8a:f9:da:e7:49:49:e6:af:81:18:
                    d2:59:27:fd:f5:ef:c4:a6:9d:2f:b8:62:fe:b3:b2:
                    3e:37:eb:c5:3f:e6:63:cd:49:b7:e9:14:93:d3:d5:
                    41:8a:00:b4:09:ea:ca:55:56:7f:6d:a3:c3:42:54:
                    fb:a9:5d:ea:22:cc:a5:1b:1a:a0:99:4d:fe:83:63:
                    9c:85:9e:b9:57:90:87:19:96:59:c8:94:1d:47:50:
                    7f:11:1f:3a:e4:c2:5c:92:00:9f:39:3f:35:ea:d9:
                    d5:9a:43:a2:15:53:09:b2:a1:96:c1:67:8b:ee:17:
                    9b:a0:5e:49:17:6f:28:f7:b8:6b:96:82:d0:12:06:
                    3c:f5:2f:bb:49:14:49:7d:4a:e4:aa:b1:49:ce:b8:
                    5f:f2:57:bc:bd:3d:a6:9c:1f:6b:a3:76:46:e9:67:
                    1e:cc:4a:1f:96:d4:49:56:67:80:13:f4:4a:0a:fb:
                    03:ca:a9:e5:28:27:5f:4d:c3:8f:6d:24:5f:6d:1b:
                    7a:0d:7c:df:a5:df:8d:6c:dd:c2:48:f8:d8:4e:28:
                    4f:16:20:87:8b:d3:54:e5:8b:48:a9:c5:e6:95:c0:
                    92:6c:99:5a:4d:93:60:08:59:1a:c1:db:66:8d:56:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:DE:79:66:25:18:57:50:86:D7:B4:50:30:30:D3:DF:ED:BA:AC
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:a2:89:65:e3:3d:5b:31:0e:35:64:1d:b8:68:27:b8:5e:
         0e:d4:b5:d6:6a:8f:69:40:b7:96:1f:61:fa:06:e9:9c:fa:9c:
         d6:03:b2:70:53:a2:eb:72:de:19:78:e6:19:8f:3e:2b:bf:7c:
         fa:2a:5a:bd:f4:5b:1b:20:fd:0b:5e:35:44:3b:91:df:ee:43:
         53:6d:ef:f4:84:57:0c:fc:5a:e7:3a:0a:3a:bb:84:d8:27:ab:
         2c:6a:2a:fd:66:99:ce:94:d5:a5:73:11:fd:35:ee:52:52:f9:
         bd:ba:59:cd:f3:e1:a6:3b:76:52:6c:45:5c:d2:fc:fd:73:77:
         0b:93:f9:22:8f:df:6c:7c:cb:ba:5b:39:2f:70:df:62:d7:c5:
         fd:8e:9a:eb:47:0b:0d:11:c6:d1:e9:d0:9d:6b:17:40:f1:da:
         c0:33:45:dd:ca:43:99:cd:fe:6e:d6:0d:c0:0b:1e:ad:e2:4f:
         b2:2e:de:e1:4f:7e:75:60:79:ff:4d:18:47:10:95:65:ca:6f:
         1e:02:40:16:ec:44:fc:1a:39:11:f6:66:ef:eb:a1:d1:55:9b:
         0a:a9:67:6f:35:7b:7f:0f:21:97:1c:60:0f:9f:d4:20:1e:ca:
         f1:7f:a0:a1:33:85:0f:00:ce:db:69:64:a7:7c:46:9e:d0:32:
         3b:bf:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:15:56 2026 by rpki-client