Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32342e302f32322d3232203d3e20323733363833.roa
File:                     3137302e37392e32342e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          MEowO1dkoDVr8HkdF+OrwhwQLHFJ14gbAV1dP95ag98=
Subject key identifier:   44:93:25:EE:E4:EA:18:54:AB:41:55:9F:C8:CA:1B:0C:4B:F2:85:38
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       5D142F8C75B2FB428BA02E885B314DFCBB0DD74E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32342e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:19 +0000
ROA not before:           Tue 09 Sep 2025 12:44:19 +0000
ROA not after:            Tue 08 Sep 2026 12:49:19 +0000
asID:                     273683
IP address blocks:        170.79.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:14:2f:8c:75:b2:fb:42:8b:a0:2e:88:5b:31:4d:fc:bb:0d:d7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:19 2025 GMT
            Not After : Sep  8 12:49:19 2026 GMT
        Subject: CN=449325EEE4EA1854AB41559FC8CA1B0C4BF28538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:3c:8a:96:a7:0c:03:59:5a:15:67:ad:0c:
                    cd:e8:73:30:28:5d:f4:87:38:a0:d4:4c:ec:ca:63:
                    c2:bd:b8:0f:61:73:cd:dd:8b:be:75:c8:12:37:51:
                    ac:e3:54:57:ef:b5:b2:eb:37:b1:ed:0e:9e:32:a5:
                    b9:c6:47:3b:c3:b2:3b:d6:ba:6c:9c:89:1e:23:09:
                    76:c4:be:b4:59:17:52:11:3f:8e:bd:db:6a:1c:40:
                    b2:9b:b8:cb:ec:49:4e:82:05:e7:e2:45:b6:f1:a9:
                    f6:e8:c7:7a:36:55:2f:48:f9:4b:95:ea:ce:f7:19:
                    72:14:f1:c7:18:46:3f:cb:99:2b:00:b5:2c:c3:4d:
                    b6:19:1b:f8:e2:ff:44:52:92:b2:39:20:16:aa:d9:
                    89:2b:ce:2d:6b:71:34:8b:de:3d:08:96:65:65:c2:
                    c9:bd:57:51:7a:48:b0:54:26:db:3a:f4:1a:1d:d4:
                    f1:da:ba:43:f9:83:c1:3a:b4:a2:9c:ff:55:8a:f7:
                    44:60:02:1a:e2:d9:3b:6e:9d:56:b2:3b:fa:c5:09:
                    2e:3c:2c:10:f6:1a:63:f1:52:82:4f:7c:09:f3:e5:
                    df:0b:43:43:c3:68:0b:9a:41:d7:4c:e1:b4:a2:68:
                    2b:79:4b:a7:0b:07:b2:5c:f7:4e:06:72:48:c7:c8:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:25:EE:E4:EA:18:54:AB:41:55:9F:C8:CA:1B:0C:4B:F2:85:38
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32342e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:33:b6:8e:c8:f1:27:05:d6:7f:ac:07:2b:97:12:99:b9:ed:
         a8:cb:78:22:cb:18:3c:5d:f4:fc:eb:c9:cb:bb:cf:c7:ca:44:
         31:4d:ac:70:fa:1b:21:2d:bb:8b:36:0e:7b:44:3a:7a:37:2a:
         fe:80:cb:f5:e6:e2:18:5d:9b:07:d6:33:cf:f1:d0:97:65:bb:
         ac:18:12:42:ea:21:66:33:b1:84:91:11:ab:1e:76:0d:e9:64:
         84:fa:64:0c:38:b2:02:39:7c:dd:36:63:62:70:4b:2a:3e:96:
         03:db:4d:cc:1f:a7:cc:18:fe:2d:f4:e6:14:eb:60:cb:ea:1e:
         ba:f2:cd:0b:57:03:da:2f:ef:1b:2b:05:a9:86:a2:4f:e7:70:
         85:29:11:b5:d5:b1:c6:fb:6c:b8:00:0e:f0:af:31:b5:6a:46:
         6d:f7:fb:14:32:05:cb:4b:90:b8:61:63:bb:90:97:76:4c:b7:
         d1:5e:fb:22:bc:a7:06:59:5d:17:89:fb:84:36:f2:9f:a3:c0:
         82:76:dd:8d:64:10:5a:35:e7:c9:0c:12:66:64:1b:fa:56:11:
         61:2b:98:86:c5:3d:a5:1a:1c:89:1d:cb:06:2a:5f:61:81:6f:
         6a:ee:d3:ce:b0:03:f6:48:87:f5:69:55:03:1d:17:02:b9:81:
         4f:b3:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:46:18 2025 by rpki-client