Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33302e302f32342d3234203d3e20323733363833.roa
File:                     3133382e33362e33302e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          +fGQTpWrNB2CCIIh20kJVuWqBuYAxH/1h7VWc3vxWY4=
Subject key identifier:   39:80:B9:9F:8E:F8:15:8A:B3:68:DE:42:0C:62:B8:E7:CB:14:A8:C7
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       615C4A05FD1822A00D75A7464F9C1F05AFE861B4
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33302e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:10 +0000
ROA not before:           Tue 09 Sep 2025 12:45:10 +0000
ROA not after:            Tue 08 Sep 2026 12:50:10 +0000
asID:                     273683
IP address blocks:        138.36.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:4a:05:fd:18:22:a0:0d:75:a7:46:4f:9c:1f:05:af:e8:61:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:10 2025 GMT
            Not After : Sep  8 12:50:10 2026 GMT
        Subject: CN=3980B99F8EF8158AB368DE420C62B8E7CB14A8C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:77:dc:a6:64:f7:cc:97:50:1f:5f:f3:ff:
                    b6:13:4a:c2:00:11:ba:39:e8:1f:74:78:fb:a2:0c:
                    ae:1f:d7:f5:66:42:f6:3d:66:88:d7:00:3d:29:56:
                    ea:59:30:cf:ef:f5:68:4b:7c:70:d4:11:d4:a1:14:
                    bd:7b:0c:d3:55:84:ea:b9:04:2c:ca:13:95:0a:19:
                    77:14:1a:36:9b:5e:7e:b1:02:c3:96:c4:67:3b:df:
                    cb:f4:e1:63:7b:76:0c:21:b4:cc:d1:e4:c1:5f:3d:
                    5c:dc:6e:e4:52:81:c9:c6:8b:65:f7:18:e8:bf:be:
                    21:5c:9f:28:02:32:0a:93:dc:9d:23:a4:ac:02:a9:
                    24:af:65:81:c9:9b:e1:9d:ca:bf:ce:f8:d0:08:11:
                    ec:b6:c5:54:9a:fe:09:1e:56:2d:23:20:48:9e:fa:
                    6d:cb:9d:f1:c8:e1:de:25:8c:56:a7:93:e9:8a:2a:
                    8c:d0:9c:9a:0c:46:99:29:70:52:30:cb:48:e4:f8:
                    97:24:69:f1:72:92:4f:21:da:58:3c:59:75:e6:06:
                    3e:dd:17:23:c2:80:51:09:d6:e6:24:8e:13:8c:c1:
                    c6:ea:23:4e:c9:34:a9:9c:13:1a:b3:78:7a:83:a7:
                    c1:d1:08:5e:92:30:2d:08:39:29:09:e8:d8:b1:02:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:80:B9:9F:8E:F8:15:8A:B3:68:DE:42:0C:62:B8:E7:CB:14:A8:C7
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33302e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:68:a0:6a:c1:8a:d4:f9:b8:af:5e:31:51:45:c2:78:a2:e7:
         0b:c3:a5:01:13:1e:df:fe:6d:3e:84:cc:17:b9:e3:78:9c:c1:
         2e:6a:6e:ba:41:1c:cd:49:69:7d:78:c3:3f:cc:88:4c:2a:aa:
         ba:98:e7:8b:0b:3d:43:5f:18:26:d6:24:7c:6b:49:cd:48:d2:
         21:e0:9a:02:07:8a:fa:3e:39:f1:f6:0d:34:7e:f3:1f:26:f7:
         c3:c8:35:15:92:62:e7:52:b1:38:4b:36:5a:72:6d:bb:7a:0b:
         14:b6:dc:c9:d5:6c:f5:fc:d0:ce:97:99:e3:ba:4a:49:a4:af:
         b6:c2:c4:0b:e6:83:e0:d2:64:51:19:cc:a4:ef:65:f8:19:d9:
         ff:0a:88:08:a4:8d:7e:38:59:8d:4a:b4:b8:8a:d0:ca:82:97:
         ba:f1:e1:0c:2e:77:e3:14:ee:3d:e4:b9:0e:90:5f:c3:be:47:
         37:ba:18:b6:03:d3:ec:9b:07:d9:78:7c:4e:0a:93:45:76:91:
         9c:80:cf:1b:1b:9b:c5:aa:bb:50:8e:ac:3e:12:34:ef:2e:e8:
         31:40:1c:f0:cc:58:ac:84:1d:4e:2a:ef:69:5c:ef:a4:86:18:
         8d:1f:08:36:f5:68:a3:d3:e6:6c:ec:61:18:32:81:77:30:6e:
         cf:24:b9:d4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUYVxKBf0YIqANdadGT5wfBa/oYbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ1MTBaFw0yNjA5MDgxMjUwMTBaMDMxMTAvBgNV
BAMTKDM5ODBCOTlGOEVGODE1OEFCMzY4REU0MjBDNjJCOEU3Q0IxNEE4QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NnfcpmT3zJdQH1/z/7YTSsIA
Ebo56B90ePuiDK4f1/VmQvY9ZojXAD0pVupZMM/v9WhLfHDUEdShFL17DNNVhOq5
BCzKE5UKGXcUGjabXn6xAsOWxGc738v04WN7dgwhtMzR5MFfPVzcbuRSgcnGi2X3
GOi/viFcnygCMgqT3J0jpKwCqSSvZYHJm+Gdyr/O+NAIEey2xVSa/gkeVi0jIEie
+m3LnfHI4d4ljFank+mKKozQnJoMRpkpcFIwy0jk+JckafFykk8h2lg8WXXmBj7d
FyPCgFEJ1uYkjhOMwcbqI07JNKmcExqzeHqDp8HRCF6SMC0IOSkJ6NixAhaFAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUOYC5n474FYqzaN5CDGK458sUqMcwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
MzM4MmUzMzM2MmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAiiQeMA0GCSqGSIb3DQEBCwUAA4IBAQA4aKBqwYrU+biv
XjFRRcJ4oucLw6UBEx7f/m0+hMwXueN4nMEuam66QRzNSWl9eMM/zIhMKqq6mOeL
Cz1DXxgm1iR8a0nNSNIh4JoCB4r6Pjnx9g00fvMfJvfDyDUVkmLnUrE4SzZacm27
egsUttzJ1Wz1/NDOl5njukpJpK+2wsQL5oPg0mRRGcyk72X4Gdn/CogIpI1+OFmN
SrS4itDKgpe68eEMLnfjFO495LkOkF/Dvkc3uhi2A9PsmwfZeHxOCpNFdpGcgM8b
G5vFqrtQjqw+EjTvLugxQBzwzFishB1OKu9pXO+khhiNHwg29Wij0+Zs7GEYMoF3
MG7PJLnU
-----END CERTIFICATE-----
Generated at Fri Sep 19 23:28:30 2025 by rpki-client