Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa
File:                     3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          28j2BTPFaWEFGkAQqDnjLFlLs8NkslnGmFyJwAzbDCg=
Subject key identifier:   F2:96:1A:E5:40:54:C7:9A:22:84:F1:36:00:E8:1A:66:3C:BD:0F:92
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       2859A165BF3144C0A8A2F396CA62C843B52D17D9
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:21 +0000
ROA not before:           Tue 09 Sep 2025 12:44:21 +0000
ROA not after:            Tue 08 Sep 2026 12:49:21 +0000
asID:                     273683
IP address blocks:        177.53.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:59:a1:65:bf:31:44:c0:a8:a2:f3:96:ca:62:c8:43:b5:2d:17:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:21 2025 GMT
            Not After : Sep  8 12:49:21 2026 GMT
        Subject: CN=F2961AE54054C79A2284F13600E81A663CBD0F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:03:4f:cc:d5:43:2e:42:63:ee:20:50:2a:
                    b8:a8:f6:a2:ce:61:40:25:d2:cb:76:6c:4a:cb:44:
                    ab:7d:b3:ba:79:d3:28:0e:0c:f9:7b:27:ef:70:2c:
                    e6:4f:a8:e5:01:24:64:6c:0a:94:f8:e2:a4:b5:e3:
                    91:0a:f1:1e:e5:7c:eb:7a:22:fd:d0:30:b5:6b:c0:
                    89:21:ae:00:8e:1c:75:d7:3e:de:b2:23:5d:97:6e:
                    46:bb:98:fa:dc:a2:d1:ba:44:ac:b9:4c:d8:1d:c9:
                    f0:b6:65:a0:b0:39:b0:d2:38:ea:3b:44:95:3a:3f:
                    72:ec:15:c4:47:30:8e:c0:45:18:54:48:60:5b:f6:
                    0c:e7:a6:bc:c0:cd:60:3f:e7:b5:e4:b6:f9:03:b1:
                    32:95:dc:50:15:a6:ba:4b:3d:a8:f3:d1:af:a2:29:
                    f4:85:9a:98:42:89:71:8c:7a:1b:8d:e3:1b:b9:5b:
                    fa:62:42:79:28:72:66:f6:64:2e:34:91:4d:ea:6e:
                    6a:87:1c:ed:cb:a3:b0:36:55:40:b4:58:90:e0:69:
                    38:9c:ee:3b:30:f8:61:1b:ab:88:10:42:4f:30:61:
                    27:57:91:fb:31:2d:10:52:1b:91:7a:36:e3:b4:d2:
                    7f:19:06:45:0e:ab:65:80:c3:88:6d:78:2d:f1:03:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:1A:E5:40:54:C7:9A:22:84:F1:36:00:E8:1A:66:3C:BD:0F:92
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:22:0f:f1:c7:02:81:12:8a:6a:2d:f4:47:4a:9c:c4:fd:be:
         19:74:1f:33:dd:9f:c5:b4:ad:67:86:7d:ca:17:e5:e0:07:5f:
         c0:15:ff:39:1f:95:40:66:42:f0:2b:14:24:ea:02:a7:65:a9:
         42:a2:32:c3:a6:09:e5:ea:51:c2:27:52:ef:3e:48:c2:6b:f8:
         43:18:e8:88:06:86:12:4e:02:22:86:9a:58:cb:d3:cb:b2:cd:
         d8:26:7a:d9:f0:79:89:2b:9d:e7:ea:b5:7c:c0:6e:44:ad:8a:
         63:c7:c8:89:e5:1e:11:de:cf:e2:ec:75:98:9b:f7:72:81:cd:
         89:16:d7:46:1b:27:e4:6a:34:00:28:4a:d6:11:3a:06:41:91:
         3f:72:1b:27:cb:a5:a1:85:6c:a5:ae:ce:9c:eb:c7:7d:1a:30:
         50:ae:bc:c6:bc:23:8c:f0:ff:7f:87:fa:32:00:85:95:c6:b1:
         19:2b:05:bd:59:18:c5:24:10:6a:4d:ef:de:aa:47:51:b2:82:
         aa:4a:3d:e4:85:b0:f2:7a:84:6a:ce:9e:ad:04:38:f1:9b:e1:
         03:03:ec:0c:79:8f:1f:8d:b7:7b:27:4d:20:a2:4b:50:91:72:
         07:37:4f:d2:f1:74:fc:05:fe:0d:85:79:ca:d8:f4:79:77:31:
         94:3f:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:59:01 2025 by rpki-client