Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136312e302f32342d3234203d3e20323733363833.roa
File:                     3137372e35332e3136312e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          6O5O5JMnN2aYI85VIkvVeLIssVElSimcmMHzW2kK38M=
Subject key identifier:   35:8B:2F:F5:F1:3B:FC:6C:D3:65:F0:2D:E0:BB:32:D6:44:12:88:CD
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6853EF2CC9E77406C4BEFDEDF818ECFD6489324A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136312e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:51 +0000
ROA not before:           Tue 09 Sep 2025 12:44:51 +0000
ROA not after:            Tue 08 Sep 2026 12:49:51 +0000
asID:                     273683
IP address blocks:        177.53.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:ef:2c:c9:e7:74:06:c4:be:fd:ed:f8:18:ec:fd:64:89:32:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:51 2025 GMT
            Not After : Sep  8 12:49:51 2026 GMT
        Subject: CN=358B2FF5F13BFC6CD365F02DE0BB32D6441288CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:92:52:53:6e:83:b4:c2:0a:b5:61:aa:78:
                    5c:2d:7f:7d:df:10:8a:ce:16:5f:8d:b4:23:63:fd:
                    ff:9f:ad:d8:81:52:39:60:89:bb:d8:77:cf:00:6b:
                    0d:51:6f:40:10:df:07:68:c4:a0:68:27:9c:f6:cc:
                    fa:cd:ea:a3:4b:1f:c6:62:23:3f:1a:85:24:dc:f8:
                    7b:39:b8:3d:99:e0:09:7a:ba:9f:ae:3a:69:0a:e5:
                    47:43:d7:3a:9d:49:f5:b2:dd:55:47:b4:38:ab:57:
                    fb:15:5c:bd:76:1c:38:8c:7f:51:6f:66:d6:74:a7:
                    ba:c0:02:98:95:f1:9a:c0:d2:ef:2b:4a:c7:1d:11:
                    d6:40:58:6b:55:51:34:cd:c3:38:76:fc:eb:97:67:
                    17:a2:33:d2:2b:aa:be:61:e2:72:69:70:ad:a2:27:
                    7b:d1:8d:4f:2e:9f:65:da:d5:df:95:11:c4:e2:02:
                    4e:90:7a:20:5b:c8:80:72:62:56:0f:c1:ab:e1:4a:
                    46:da:cf:27:af:02:f5:7d:ff:ca:cc:6d:9c:75:b0:
                    63:e4:86:92:1e:62:d9:4e:3c:60:40:25:2d:ef:4c:
                    fb:d1:ad:2d:f1:7d:e6:02:41:d1:9a:ff:7d:2c:3b:
                    ce:46:e9:25:19:93:1c:da:e9:05:fd:08:6d:76:f1:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8B:2F:F5:F1:3B:FC:6C:D3:65:F0:2D:E0:BB:32:D6:44:12:88:CD
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136312e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:13:f8:1a:4f:be:e5:80:44:e9:09:e2:70:79:6c:b0:77:
         d3:05:71:8f:c6:2b:40:11:fd:f7:d1:b7:1e:ad:14:db:c8:07:
         81:29:c1:7d:33:72:98:0d:29:9a:ac:81:2c:62:34:48:69:a6:
         5d:2c:f3:2c:73:18:20:65:b3:3c:29:65:c9:22:dc:7a:7b:87:
         44:c1:a8:dc:19:a6:4b:bd:1b:10:8f:ae:d5:74:e9:e9:b0:52:
         87:9c:d4:b8:ef:94:b1:a3:cb:45:01:d4:8f:b2:51:ba:65:b3:
         21:c5:c1:b2:7c:4b:93:4d:e2:f8:31:4f:0b:9f:2d:c7:91:99:
         e2:91:5e:87:f1:7a:ef:bf:0a:a1:5d:73:05:5f:dc:81:ce:ee:
         f5:19:a8:9f:eb:12:5a:ca:8d:46:14:fc:f0:d4:60:61:53:06:
         29:91:26:05:61:fe:b2:40:12:50:a3:4c:99:7a:54:12:fc:e4:
         21:f0:b1:1e:db:93:ec:17:41:d0:21:b0:87:80:70:13:4e:cd:
         82:78:7e:ae:26:21:33:c4:17:18:3b:eb:f4:eb:5c:63:8e:26:
         38:40:50:1e:74:ff:c6:71:b3:bc:f6:17:ee:df:a4:28:4d:6c:
         eb:e0:e2:9c:41:62:fd:34:c3:a2:01:81:01:2e:bd:df:cc:53:
         8c:5a:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:01:15 2025 by rpki-client