Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa
File:                     3138372e33332e3230372e302f32342d3234203d3e203533303836.roa (raw, json)
Hash identifier:          n6minrN+tL/z5E4YZd4Jw1sFunBCBLOdwTEpq1b+OqU=
Subject key identifier:   73:5E:7F:F3:EA:36:C2:B8:C3:26:AA:CC:0B:A9:5E:67:03:43:80:94
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       28EB43AAB15C467FDA5550D10F9FB93FE5FE26E1
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa
Signing time:             Mon 08 Sep 2025 20:02:48 +0000
ROA not before:           Mon 08 Sep 2025 19:57:48 +0000
ROA not after:            Mon 07 Sep 2026 20:02:48 +0000
asID:                     53086
IP address blocks:        187.33.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:eb:43:aa:b1:5c:46:7f:da:55:50:d1:0f:9f:b9:3f:e5:fe:26:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Sep  8 19:57:48 2025 GMT
            Not After : Sep  7 20:02:48 2026 GMT
        Subject: CN=735E7FF3EA36C2B8C326AACC0BA95E6703438094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:8c:19:69:33:9e:7b:8c:8a:59:fb:e6:f9:
                    25:6b:de:ca:6a:16:fc:13:2b:cb:76:ce:f9:70:e7:
                    d4:64:c7:e5:5f:e9:50:49:b5:f2:7e:84:9e:fc:94:
                    d7:f8:03:1a:37:9b:01:21:8c:02:67:dd:52:ff:ae:
                    40:20:f9:bd:08:95:e5:46:22:d0:34:3b:f0:ef:7f:
                    0d:bd:93:1b:19:77:8c:0b:d8:62:f8:f1:7c:28:65:
                    56:66:60:4b:71:6f:ae:61:13:eb:96:d8:48:ec:eb:
                    d9:f8:ce:29:69:57:ff:a0:97:d7:a3:aa:cc:90:c5:
                    24:b3:74:e9:eb:f5:34:39:7c:20:15:83:91:93:14:
                    9c:a3:51:39:03:49:5f:82:b2:5b:9a:a1:30:29:52:
                    5e:8f:f3:f0:de:9f:78:03:3a:d9:6a:9f:1c:95:b1:
                    f4:a5:dc:d5:5b:d6:7f:f4:46:3a:39:d6:7d:90:ff:
                    48:5c:c6:9d:7c:0a:59:63:d4:d4:1d:ac:29:b3:94:
                    f3:50:f7:47:5e:51:11:1e:32:3c:65:df:2b:50:d6:
                    bf:f7:54:57:a5:c2:5c:5a:e3:41:19:e4:2f:20:c2:
                    ba:ff:f8:d7:f8:56:f1:b2:6a:0f:65:c6:ee:4e:c5:
                    a5:78:7c:8f:f5:6d:df:10:81:28:d3:72:0a:f2:5e:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:7F:F3:EA:36:C2:B8:C3:26:AA:CC:0B:A9:5E:67:03:43:80:94
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230372e302f32342d3234203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:6d:64:cd:a8:6c:26:f5:f2:a7:58:ba:71:15:2d:d3:4d:
         ed:91:5f:72:71:91:14:e7:e4:53:5f:19:5e:82:f9:af:12:aa:
         3e:a9:2a:e4:a0:e5:82:ba:da:29:60:7e:5d:46:12:a2:f4:74:
         1a:17:22:80:54:c9:b7:b5:f9:97:57:39:7a:1e:41:42:50:e0:
         f3:2c:f4:70:20:09:bd:fe:eb:b5:df:ca:e8:5e:71:b8:9e:69:
         67:e6:05:e0:51:de:03:6e:8a:53:a4:7e:f2:e6:25:97:05:16:
         bf:88:27:88:be:fe:97:f2:42:02:61:92:9e:fc:89:2e:85:c6:
         af:8c:3f:1d:9f:a0:fb:c9:14:8b:a4:76:8b:55:68:32:94:8f:
         97:7b:c3:d8:03:3a:30:9b:0b:b3:c8:f1:c1:47:17:53:0d:77:
         ac:86:be:d5:55:13:b0:6a:b1:8b:34:27:37:1b:86:17:8c:2f:
         f9:91:ef:a5:38:c5:71:56:4e:12:0a:90:7c:c3:7e:7f:76:56:
         70:df:73:86:78:0e:34:b3:e7:80:41:1f:42:c6:7b:63:8a:d4:
         fb:1e:70:37:7b:29:2d:88:ae:70:33:ca:10:b7:d1:16:b1:4c:
         e0:d4:52:f0:65:7f:05:40:78:08:a0:bc:8e:75:10:b0:49:4b:
         9a:2d:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:49:38 2025 by rpki-client