Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32372e302f32342d3234203d3e20323733363833.roa
File:                     3137302e37392e32372e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          64tUl6ugJ9gita6aOTmE1kxnkN/+DGavRHmaqLsi1Ew=
Subject key identifier:   76:E7:D7:F2:EA:0E:B4:FF:C8:C0:49:43:13:88:10:5F:1B:5E:C8:8C
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0102351A68DAE315B19D82FBC4CD493DEE718B10
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32372e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:50 +0000
ROA not before:           Tue 09 Sep 2025 12:44:50 +0000
ROA not after:            Tue 08 Sep 2026 12:49:50 +0000
asID:                     273683
IP address blocks:        170.79.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:02:35:1a:68:da:e3:15:b1:9d:82:fb:c4:cd:49:3d:ee:71:8b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:50 2025 GMT
            Not After : Sep  8 12:49:50 2026 GMT
        Subject: CN=76E7D7F2EA0EB4FFC8C049431388105F1B5EC88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:cb:fe:a8:06:06:e0:57:8c:17:e2:de:c4:
                    69:ac:a1:a1:3d:83:f3:42:76:10:fc:80:1b:65:52:
                    5a:32:e0:2c:ea:13:30:47:19:20:a0:28:2b:c5:17:
                    ad:a2:c8:6a:ea:c9:5c:30:1d:3d:96:b3:4f:9d:39:
                    d0:ef:b1:a4:0b:c7:ca:20:a6:a5:c8:0b:15:14:6e:
                    c2:13:94:95:a5:38:94:58:c9:72:bc:3b:20:84:e9:
                    e8:1d:ac:e7:97:16:b3:45:f2:2d:08:2d:78:a6:6f:
                    bc:c6:d7:58:78:e1:fd:21:f0:c7:32:74:37:09:97:
                    8a:4b:ae:98:3f:55:15:97:9f:7f:68:b3:a8:bd:6e:
                    ad:c0:a9:e2:6f:ab:f8:d4:9a:59:3a:6c:1e:19:da:
                    e5:77:03:55:17:cb:7c:d2:01:96:84:f4:1e:4a:3b:
                    1d:0a:cf:98:a5:5d:f1:12:0f:43:85:57:a7:e0:82:
                    af:3f:70:00:1a:60:ea:31:f5:6f:04:a1:7d:d7:a4:
                    d5:5f:72:18:6e:e6:15:ab:d6:fe:d8:43:d7:8d:0b:
                    48:2e:10:bd:70:66:96:3d:5b:9a:3b:66:fa:30:28:
                    2e:34:84:72:ee:68:aa:84:0d:fc:37:7b:ab:09:19:
                    1c:45:44:9b:a3:ab:75:8f:e1:cd:c6:8d:37:83:a9:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:D7:F2:EA:0E:B4:FF:C8:C0:49:43:13:88:10:5F:1B:5E:C8:8C
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137302e37392e32372e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:17:8d:03:eb:65:8a:d4:3e:a9:f4:cf:d1:d7:3c:bb:25:4f:
         ff:10:29:76:12:c5:b8:07:48:cf:aa:44:60:a2:6d:a1:8c:be:
         bc:48:62:aa:6d:52:35:76:2b:92:52:e5:04:e9:a3:a4:a7:4c:
         dd:d4:29:57:ee:a6:2b:4c:76:52:34:ab:b6:43:dd:32:a5:be:
         46:b2:1c:fe:53:08:00:ea:5d:84:45:17:39:6d:44:4d:1e:21:
         89:84:55:92:b1:b4:8a:83:27:47:51:8f:7d:fa:a2:54:b4:9b:
         de:d2:89:73:9c:82:81:4f:d3:18:06:b9:99:47:95:30:d4:cf:
         25:ee:9f:eb:f0:df:c5:aa:6e:55:9f:c7:71:0e:2b:a2:f4:1b:
         9e:32:4b:45:07:a6:2d:45:35:b1:23:5b:cf:3c:b1:b0:37:64:
         3b:77:ca:6a:6a:57:6e:4e:6e:c4:dd:c4:5d:55:91:c4:d2:4f:
         a1:61:36:99:b2:42:7b:f5:bd:f0:0d:ae:5b:92:d7:57:99:a4:
         03:2e:6f:7d:2e:c9:73:2c:1f:c9:7d:ca:e4:63:d3:31:6d:b8:
         05:e0:7e:6a:05:cd:b3:e3:38:a8:a9:0e:e9:0c:6f:d3:91:a9:
         f0:08:47:7b:f6:1e:be:b4:94:f6:c6:45:42:aa:d0:cc:cc:4a:
         c1:f2:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:33:27 2025 by rpki-client