Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31332e302f32342d3234203d3e20323733363833.roa
File:                     3136372e3235302e31332e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          8hU1BdTKUkBuNMD/ylK+5K+DDM6E0QdhZY7hiwFiu50=
Subject key identifier:   B9:A3:75:6D:0C:A1:3F:CB:54:0D:EE:E7:84:3B:3C:E7:FD:EC:0F:31
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0700B0C540D734E32DF5119B0D2257C96A36F216
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31332e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:08 +0000
ROA not before:           Tue 09 Sep 2025 12:44:08 +0000
ROA not after:            Tue 08 Sep 2026 12:49:08 +0000
asID:                     273683
IP address blocks:        167.250.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:b0:c5:40:d7:34:e3:2d:f5:11:9b:0d:22:57:c9:6a:36:f2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:08 2025 GMT
            Not After : Sep  8 12:49:08 2026 GMT
        Subject: CN=B9A3756D0CA13FCB540DEEE7843B3CE7FDEC0F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:ab:ae:38:9f:2c:0b:eb:1c:21:56:2c:59:
                    25:9f:a7:24:13:1d:26:e5:ed:d2:36:10:8f:77:2c:
                    06:5b:0f:34:28:c3:78:7c:03:53:9d:c4:1a:3a:fc:
                    ea:41:40:e1:d2:f0:d4:03:26:b8:78:a8:53:00:f1:
                    26:d3:06:df:45:0e:c2:79:54:90:4e:36:f5:30:2d:
                    e7:45:7c:a3:31:81:4a:50:b8:2f:26:9e:ba:00:05:
                    65:93:3d:8f:e4:3b:ed:22:84:3c:46:16:b9:cc:0b:
                    ad:57:70:81:70:45:86:ea:72:32:f9:63:24:21:af:
                    83:9b:7c:d3:45:c5:19:c2:35:c6:df:e1:ce:2d:3a:
                    8f:95:76:1a:11:ee:c0:2e:20:f6:82:21:67:70:91:
                    84:bc:8f:a1:61:4d:a2:f2:65:96:cf:22:8a:d2:4c:
                    53:0e:df:e7:c3:18:a9:f5:c9:6f:14:32:31:8d:dd:
                    8c:f7:36:5a:23:5d:1e:9f:8f:31:b4:4f:5f:c4:42:
                    08:d7:54:2c:39:18:07:22:f7:dd:cf:d3:8e:c2:4a:
                    5d:30:ab:52:92:6c:45:47:d1:f9:1a:ee:98:a8:81:
                    75:24:89:d9:a2:b3:ae:12:28:72:30:d3:33:39:d3:
                    ff:5a:11:0a:b5:79:d0:6e:44:e3:aa:1f:29:ca:39:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A3:75:6D:0C:A1:3F:CB:54:0D:EE:E7:84:3B:3C:E7:FD:EC:0F:31
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31332e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:c7:50:dd:b1:3c:8b:43:74:9d:8c:6e:72:e9:6b:e4:8b:
         1c:75:86:02:08:67:77:e9:d7:db:17:2c:39:f0:9f:1a:d1:90:
         6b:6f:a0:79:5c:0d:f9:bf:60:15:fb:d3:a0:74:4b:f8:79:f0:
         0f:0e:c9:2a:b4:57:d1:98:8f:18:18:5a:3b:22:9d:f5:8e:33:
         3a:2e:cb:e2:ef:c0:85:cf:aa:b2:9b:26:b7:b3:26:db:f8:f2:
         a4:b0:6c:57:01:09:ab:b7:7d:ba:8e:50:3e:a2:24:e9:7f:b0:
         37:5c:10:9a:9f:12:fc:1f:30:41:46:1c:3f:8a:1b:91:d4:d0:
         75:2b:5f:e5:92:cb:10:e7:54:c3:62:3b:12:d2:09:a1:c3:8d:
         72:a0:92:3a:c2:e4:0b:ad:ee:ae:2e:c7:af:e2:ef:6a:ce:d8:
         be:71:a4:7f:4b:e0:ff:54:e9:ab:be:c1:22:3c:25:d8:da:98:
         e5:cf:81:db:ac:3b:a0:c5:43:8d:87:76:72:83:da:57:3e:de:
         79:1e:e4:fd:bd:70:dd:63:37:5f:b4:5e:03:d6:21:c3:13:02:
         f2:ec:42:e7:17:65:9a:b2:70:79:0c:bc:36:cb:80:ed:9b:48:
         75:0f:ff:44:f5:ed:83:c6:12:66:55:2b:3c:03:10:55:ca:e6:
         a4:81:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:46:25 2025 by rpki-client