Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32342d3234203d3e20323733363833.roa
File:                     3136372e3235302e31322e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          Tw9qkEC3O8i/IwrP9Qeo54syKhZ0Bo/4bSB85uKYJBQ=
Subject key identifier:   79:86:03:F0:20:E4:6A:D2:5B:E2:9D:71:F5:B7:6A:37:AE:99:CF:0C
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4AE538031CEB45E8CFABA4080567FBC1461E70C4
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:03 +0000
ROA not before:           Tue 09 Sep 2025 12:44:03 +0000
ROA not after:            Tue 08 Sep 2026 12:49:03 +0000
asID:                     273683
IP address blocks:        167.250.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:38:03:1c:eb:45:e8:cf:ab:a4:08:05:67:fb:c1:46:1e:70:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:03 2025 GMT
            Not After : Sep  8 12:49:03 2026 GMT
        Subject: CN=798603F020E46AD25BE29D71F5B76A37AE99CF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:7b:4d:02:1e:4c:2a:e0:34:25:aa:77:c7:
                    b0:18:8d:a7:4f:53:65:60:50:92:44:db:5b:f4:b8:
                    d2:22:9d:7f:98:8a:1e:60:4e:be:5d:40:d6:15:45:
                    01:6b:18:69:db:5b:fd:a4:ef:33:c1:ea:36:fa:45:
                    8d:f4:a9:70:52:af:c3:c8:e3:98:09:ab:8e:db:af:
                    e3:ce:c1:3b:f1:5c:64:7a:74:87:5e:6e:a3:96:d3:
                    b2:36:5b:80:d5:cf:5d:2f:8f:df:b4:6b:69:14:45:
                    3e:f8:00:6c:4d:db:01:9f:fd:c5:90:4c:87:f0:46:
                    d8:7b:34:7c:0a:cb:2b:5f:d7:0c:84:2c:2a:28:ea:
                    06:be:7b:f2:57:cb:06:ee:f8:78:36:e1:c9:b4:a1:
                    ac:58:54:73:6e:54:0c:40:c6:f9:d9:c2:2c:aa:42:
                    0c:31:08:59:f0:13:a2:a2:14:c3:26:cb:da:02:c8:
                    25:97:e0:53:b9:9f:0e:96:4a:54:6a:47:7e:c5:d7:
                    92:bc:73:a7:e4:95:b7:c3:d1:4f:b9:cb:c5:f3:38:
                    cc:31:18:7d:a8:36:aa:15:e4:e7:d1:5b:cb:b8:5b:
                    94:8b:40:cd:cf:8e:18:84:50:06:6a:78:3c:3c:79:
                    75:bd:28:54:c4:68:1e:14:27:12:a2:b3:b3:87:b9:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:03:F0:20:E4:6A:D2:5B:E2:9D:71:F5:B7:6A:37:AE:99:CF:0C
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:96:db:71:4e:0f:1d:01:3c:2a:0a:91:fa:fb:90:8d:39:
         34:7b:7e:61:27:ac:a2:33:ab:ae:8c:20:e4:83:0a:a3:03:ca:
         73:a1:29:32:90:bb:9b:26:e3:c5:b9:ed:65:0f:99:fd:30:ae:
         fd:b9:29:e4:93:61:7a:be:57:82:76:f7:76:87:39:d3:60:fd:
         3b:aa:6d:13:95:7e:6b:ba:f3:2d:0f:5d:c5:21:ab:33:72:51:
         55:b1:ac:ff:b7:2e:b6:c4:27:e1:d1:8b:50:96:0a:fa:5e:f7:
         43:79:5b:33:55:fc:1a:2d:b3:2c:93:cb:9f:7c:23:63:1a:95:
         df:a7:b0:19:7e:2a:39:57:9d:26:25:4c:87:35:53:0a:1a:16:
         8f:e5:0c:09:2e:0f:d5:72:84:f4:e4:b7:30:bd:69:2b:b4:e8:
         3c:91:a4:1b:7d:9c:4e:4d:e1:85:5c:2c:93:aa:eb:1b:bc:28:
         b5:5e:a1:44:d2:df:ad:d1:73:95:37:84:5c:51:4b:f3:a4:5f:
         4e:8a:7c:16:72:83:8d:7a:46:8d:ec:08:b3:b9:b1:5f:35:4c:
         e4:95:be:fa:e1:89:dd:1e:ec:01:56:71:54:cb:a2:68:43:f7:
         fd:e4:0d:21:79:0a:f6:48:5f:19:64:fc:09:54:c3:96:ae:33:
         71:a7:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:01:13 2025 by rpki-client