Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa
File:                     3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          Qo7P1NBS44lEgxdOg+M1OBZ9LHvRjYaQYnvOL7iL55E=
Subject key identifier:   ED:49:8B:F7:4B:10:4E:DD:B6:A1:0F:98:25:75:BA:3E:C2:BC:3E:34
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       1D132D788C0E92ED81F2FDB0BA255E4CB700D9FF
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa
Signing time:             Tue 09 Sep 2025 12:50:18 +0000
ROA not before:           Tue 09 Sep 2025 12:45:18 +0000
ROA not after:            Tue 08 Sep 2026 12:50:18 +0000
asID:                     262324
IP address blocks:        177.124.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:2d:78:8c:0e:92:ed:81:f2:fd:b0:ba:25:5e:4c:b7:00:d9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:18 2025 GMT
            Not After : Sep  8 12:50:18 2026 GMT
        Subject: CN=ED498BF74B104EDDB6A10F982575BA3EC2BC3E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:33:e8:bf:08:9f:da:66:bf:20:6d:dd:e1:
                    8d:8e:3c:06:83:7d:b3:ec:ac:5a:82:f7:82:c6:df:
                    df:48:ff:2c:c3:13:79:3c:37:08:1d:7e:eb:75:8d:
                    55:86:95:d0:d7:bb:02:59:42:7e:6e:12:56:1b:6a:
                    94:57:53:85:e7:f7:47:27:dc:08:c3:69:c7:80:95:
                    23:99:62:7f:de:92:b0:63:fc:e6:8b:59:d5:d2:35:
                    2b:99:6a:44:d0:0a:0b:c0:5f:49:50:99:2f:e3:fb:
                    7c:58:14:48:d3:91:7b:a2:bb:e5:c1:60:3f:82:2f:
                    33:6c:8c:26:b0:02:27:13:57:6e:6d:e6:41:72:fe:
                    ff:bf:8a:50:20:4f:0f:5b:31:39:7d:7c:08:9c:d1:
                    a6:71:52:b1:41:58:01:89:eb:c2:12:e0:40:bb:2f:
                    b9:63:7a:76:d3:cb:55:76:05:33:13:c7:51:6f:73:
                    2e:90:98:cf:05:19:d3:93:e0:69:fb:2c:57:67:de:
                    63:c2:0a:80:21:37:12:31:c2:39:46:83:4b:98:5f:
                    3a:19:e6:b2:50:00:82:f4:0b:48:ac:96:72:fa:fd:
                    2b:dc:53:cd:77:34:62:5a:98:61:be:93:ec:d7:4b:
                    65:db:17:29:77:69:e3:60:f5:49:89:7b:0d:f5:cb:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:8B:F7:4B:10:4E:DD:B6:A1:0F:98:25:75:BA:3E:C2:BC:3E:34
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:f9:43:1f:12:11:53:45:16:c5:62:f2:e9:43:ea:52:3e:
         a1:f4:09:35:44:bf:69:fe:6b:b4:91:e5:be:92:41:6f:f7:bd:
         89:1f:e4:02:32:9c:fc:c8:75:b8:bd:21:d1:69:4f:77:e3:9d:
         39:3f:01:e5:20:88:34:75:d9:41:eb:64:eb:9d:73:48:44:df:
         4a:65:69:08:e8:c9:36:fc:18:60:fe:7f:1a:54:50:8d:2f:25:
         32:74:5f:c0:a3:8a:f8:a3:c3:64:e3:9f:6f:7c:fb:2d:a1:26:
         60:67:b7:6f:5e:77:81:06:0e:5c:9a:95:d5:21:6f:b4:69:4f:
         1f:99:4a:40:c9:0b:1d:67:87:dc:9b:40:09:5c:54:da:d8:7f:
         3b:6c:a1:46:c2:f3:cd:82:40:96:c7:b1:a2:66:52:4f:d4:eb:
         b4:59:4b:eb:b9:10:18:94:75:05:03:bf:1d:c8:cb:fb:a7:66:
         f9:2a:1c:d8:22:b6:fa:66:cc:35:86:87:70:a4:52:16:5a:1b:
         28:7c:b5:2d:12:8a:9c:32:c4:e6:df:6f:33:8e:0c:84:86:22:
         d1:98:02:c4:9b:1f:e7:01:d2:10:6d:f4:7e:d0:5f:96:9d:a0:
         6f:8c:63:83:71:be:4b:fc:75:90:34:d3:a8:be:42:7e:48:84:
         3f:6b:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:59:55 2025 by rpki-client