Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32332d3233203d3e20323733363833.roa
File:                     3133312e3130382e3132342e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          qJxpcOLks4DTxR+paqLuqFqcAoSvn5fR+LkAwhEPwV8=
Subject key identifier:   F8:D1:21:9B:69:A9:65:A1:31:7F:07:CB:C3:E7:71:7F:87:C5:94:77
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       400502B401DB6C9B345015253A66F7F7F7AECEA6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 13:04:56 +0000
ROA not before:           Tue 09 Sep 2025 12:59:56 +0000
ROA not after:            Tue 08 Sep 2026 13:04:56 +0000
asID:                     273683
IP address blocks:        131.108.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:02:b4:01:db:6c:9b:34:50:15:25:3a:66:f7:f7:f7:ae:ce:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:59:56 2025 GMT
            Not After : Sep  8 13:04:56 2026 GMT
        Subject: CN=F8D1219B69A965A1317F07CBC3E7717F87C59477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:33:de:42:95:3e:03:9c:e1:48:be:8f:36:
                    76:89:48:d4:66:b9:da:38:b5:d2:a7:00:c4:1f:a1:
                    e9:f7:9c:f4:99:e0:90:62:d4:6a:53:ac:1c:66:02:
                    da:1f:dc:1d:cc:bd:93:b9:94:b1:8c:94:67:33:68:
                    d1:b8:22:60:8a:c9:e1:0a:0d:81:df:21:ac:56:ab:
                    0c:f2:a7:0e:73:44:fa:bf:e7:1a:7d:25:d9:50:ba:
                    80:be:c4:6c:eb:00:94:4a:4a:4d:21:16:8d:43:52:
                    e9:9f:1a:6d:d5:29:10:1d:7e:17:70:63:08:65:ff:
                    96:e0:69:9e:02:c4:b1:7b:03:16:eb:0f:9c:57:f2:
                    a8:5e:92:2f:7c:ff:33:df:2b:1f:07:77:c5:a5:cf:
                    ee:81:f6:c2:ac:a5:c6:5a:96:a3:e7:b0:b0:37:15:
                    b2:78:4b:b3:9c:10:e6:98:2c:b2:91:d1:56:81:90:
                    da:ba:71:a7:0e:ce:47:22:57:f8:f7:cc:1f:11:0f:
                    f1:e3:9b:bf:c3:18:56:bc:c6:b7:25:71:dc:b4:55:
                    67:df:7d:5a:48:d4:ae:ab:5c:1f:ce:05:34:13:ef:
                    2e:55:f8:77:b7:61:0e:96:d4:d2:08:9d:1e:67:35:
                    8c:92:4b:4c:90:8e:5f:15:9b:e9:9f:63:4b:3d:37:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:21:9B:69:A9:65:A1:31:7F:07:CB:C3:E7:71:7F:87:C5:94:77
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:19:b0:3e:60:69:30:e1:e7:a2:42:d6:74:d6:29:79:5d:
         06:10:16:e1:18:1d:b6:b1:b3:5b:7f:48:75:aa:f1:ce:f4:68:
         a9:b8:f6:10:81:9d:9b:2d:fc:69:a2:cc:50:5a:21:5b:2a:af:
         69:16:5d:42:37:fa:75:79:ef:c4:b2:72:d2:19:42:2c:c5:eb:
         7c:eb:f1:a0:27:84:e1:40:ef:1c:54:f2:c8:ae:09:9c:b7:9a:
         d6:f7:1c:64:d2:bb:17:1a:3f:bf:fa:e1:77:f4:9c:69:6b:72:
         7c:41:61:bb:4b:2a:f0:80:a2:3e:25:51:b6:d8:1d:fc:7b:63:
         3c:e7:5b:4c:9d:62:41:47:7e:e8:d0:84:c9:84:6e:77:c5:d1:
         8d:90:f1:f4:f6:06:3c:cd:e0:1d:56:82:43:7b:4b:71:73:b8:
         e6:50:68:5b:3e:cd:85:66:51:25:c8:d7:f8:97:4a:24:02:03:
         d4:f5:21:59:c6:00:1f:d6:a0:6e:3a:50:11:5c:21:0a:2a:8f:
         19:af:c9:b1:18:16:04:13:3e:c7:b9:16:ee:29:09:f9:cd:d9:
         ae:72:8c:21:8b:29:f1:c9:30:74:75:d6:95:a6:2c:99:27:19:
         3a:fa:7f:23:5f:52:de:81:91:35:e2:12:77:a6:46:f7:b2:21:
         c1:29:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:10 2025 by rpki-client