Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e3233382e35322e302f32322d3234203d3e20323733363833.roa
File:                     3137302e3233382e35322e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          +kOx3AjUv2EqycGpJ6saGs3EkLpZMWHIkUmEUhdaJi0=
Subject key identifier:   EF:39:68:B5:5B:C5:11:9A:34:60:F0:D7:A1:CA:DB:40:84:91:6E:47
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4405232C40D52CE11738BB3D00C01B21BF2A19DC
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e3233382e35322e302f32322d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:12 +0000
ROA not before:           Tue 09 Sep 2025 12:45:12 +0000
ROA not after:            Tue 08 Sep 2026 12:50:12 +0000
asID:                     273683
IP address blocks:        170.238.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:23:2c:40:d5:2c:e1:17:38:bb:3d:00:c0:1b:21:bf:2a:19:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:12 2025 GMT
            Not After : Sep  8 12:50:12 2026 GMT
        Subject: CN=EF3968B55BC5119A3460F0D7A1CADB4084916E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:eb:8a:ae:60:7d:3b:96:06:ca:78:eb:2c:
                    ff:e6:a8:d3:f0:2f:b6:16:07:ef:f4:67:1b:db:2b:
                    45:27:94:ce:2b:bb:a2:da:c3:d8:52:b0:29:1e:fa:
                    a9:d5:fe:c2:49:96:e6:da:cf:fa:2f:6f:bb:e9:ae:
                    5d:69:b4:a2:48:45:6d:88:a8:8e:fe:0a:f4:20:8a:
                    8d:4d:6c:a4:c4:6d:00:75:2c:41:d1:89:09:b8:99:
                    bd:ea:2b:88:9b:e7:8e:61:c7:2d:20:98:5c:84:9f:
                    2c:3a:11:1d:2f:e2:14:04:19:63:5e:ab:0f:ee:12:
                    23:b9:b9:39:cc:2b:f5:6c:9e:a3:62:2e:a6:7b:dd:
                    63:c0:7a:47:eb:76:49:86:d8:cf:20:d8:cb:11:41:
                    4c:11:bb:de:ab:20:db:dc:27:bf:dc:20:e4:9a:1f:
                    6f:b4:0e:8f:d6:e6:3f:0b:84:68:6e:ab:d7:b7:08:
                    60:1f:ba:b7:b4:1f:62:16:28:dd:15:80:66:f4:11:
                    c2:f2:47:e3:e5:d2:d1:51:a5:c2:1a:a5:d0:4f:87:
                    6b:9a:fb:06:45:51:fb:d3:29:55:cf:c1:b9:34:b7:
                    50:df:35:5c:98:f0:26:d6:92:4c:f6:89:db:a8:72:
                    96:97:90:56:33:e1:75:50:38:5e:1e:b6:cc:99:c7:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:68:B5:5B:C5:11:9A:34:60:F0:D7:A1:CA:DB:40:84:91:6E:47
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e3233382e35322e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:ec:0f:2c:95:ec:75:df:03:35:6f:07:85:ec:e0:de:85:
         7d:e2:ca:76:65:14:66:87:aa:d6:f3:39:0f:97:4c:36:4f:ae:
         f2:98:ad:b9:0b:7e:a8:27:d4:1a:c0:e6:ae:a4:ec:ab:6f:31:
         a8:09:98:60:34:ad:47:8c:79:11:42:72:1b:18:ed:e9:bf:01:
         5b:25:48:94:ee:c0:f9:d6:2a:c8:0e:1e:26:f4:dd:11:7c:8f:
         40:e5:cb:a4:0c:2d:0f:46:81:c2:2a:12:16:2b:a0:ed:36:71:
         04:7b:ff:d7:12:7f:10:c0:8f:e9:01:fe:2b:2c:af:4a:81:e0:
         a2:80:0f:e5:b6:ed:f1:66:55:bd:68:76:50:b9:55:13:b8:af:
         92:90:3d:74:19:18:e3:82:8e:84:86:e8:1b:f8:38:3a:d7:e3:
         16:b9:50:9d:40:44:cd:d2:c2:09:65:6a:72:fe:32:a0:5f:1c:
         b1:65:ec:2c:dc:71:05:32:db:f8:cc:b9:d1:b1:6f:8d:e0:2d:
         87:76:fc:cf:e7:7a:25:fe:39:21:fa:d0:4d:ea:6f:17:2f:53:
         ef:be:98:7f:da:1e:c5:69:19:47:b3:09:f7:ef:9d:31:3a:87:
         84:8e:d0:96:f8:a1:44:45:ef:6b:75:0a:66:80:ac:94:29:c3:
         88:6a:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:30 2025 by rpki-client