Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136332e302f32342d3234203d3e20323733363833.roa
File:                     3137372e35332e3136332e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          LPPkBkRbjXUC8lhk4ii5Z7Hs1Q8tWZB6jrNRKDMeOfc=
Subject key identifier:   0D:9F:3B:C7:48:E9:1E:6B:98:77:D1:9A:B1:0E:C8:CB:EB:24:01:CE
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       49B315410BF9C9B697A30B1D310AD44B33AFA4F5
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136332e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:24 +0000
ROA not before:           Tue 09 Sep 2025 12:44:24 +0000
ROA not after:            Tue 08 Sep 2026 12:49:24 +0000
asID:                     273683
IP address blocks:        177.53.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:15:41:0b:f9:c9:b6:97:a3:0b:1d:31:0a:d4:4b:33:af:a4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:24 2025 GMT
            Not After : Sep  8 12:49:24 2026 GMT
        Subject: CN=0D9F3BC748E91E6B9877D19AB10EC8CBEB2401CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:5a:87:82:b7:20:ab:e4:87:78:3f:35:cf:
                    4a:16:81:87:55:17:d6:f2:d3:db:d8:d8:39:ec:52:
                    14:51:9a:d6:61:48:50:74:43:68:3d:b0:9c:fb:01:
                    d0:19:44:3b:84:cf:b4:2e:5c:3c:a0:e4:5d:2a:f9:
                    1b:94:09:7e:94:7c:2a:af:a1:d0:bc:47:85:40:67:
                    fd:8b:c8:38:ed:85:55:66:72:1d:ab:09:2a:b0:73:
                    fc:85:b7:eb:49:eb:23:f6:ed:87:81:bf:23:82:b3:
                    b0:32:23:65:a3:73:37:cc:ac:9a:b0:11:1a:59:b0:
                    40:92:c3:74:a9:49:44:7f:72:ea:1e:ae:1f:9f:af:
                    8a:7c:c0:bd:78:36:74:0e:1c:05:d8:a5:40:aa:6c:
                    6c:84:d9:18:db:b9:46:35:8f:73:f9:07:b5:6d:f3:
                    da:85:e6:a8:4f:8f:79:df:30:3d:85:a4:c7:0b:ba:
                    0c:d8:e8:2b:b0:c3:4b:60:19:6e:c4:68:4f:ac:17:
                    66:71:3e:12:80:a5:68:4c:cd:7e:17:c3:8f:c1:aa:
                    69:40:e9:2c:48:01:fe:83:cd:c4:d7:6c:4c:81:f7:
                    ef:61:ae:ef:80:e7:cc:bf:60:63:fd:76:7f:23:48:
                    37:c3:e4:cd:79:2a:47:2b:62:b3:00:c7:c7:b6:02:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:3B:C7:48:E9:1E:6B:98:77:D1:9A:B1:0E:C8:CB:EB:24:01:CE
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136332e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:08:d6:c8:39:df:3e:21:d1:17:be:b4:ff:15:32:a4:85:
         31:e9:7e:e5:84:0c:ff:2f:30:50:36:fa:db:db:db:3e:76:48:
         72:7e:dd:be:a3:fe:f5:40:94:c0:69:48:1b:60:8b:56:de:69:
         de:f3:5f:ac:47:23:5f:e2:86:69:f5:c9:f7:ea:e0:78:b5:3b:
         b4:13:66:66:5c:8a:3a:b2:5f:e7:f6:3e:4a:c4:e5:05:a9:4e:
         ae:fe:9b:96:d9:ad:52:c4:d0:19:4e:64:fd:97:1a:5e:02:16:
         6f:f1:50:da:95:c1:9d:87:74:96:db:79:5a:af:b3:02:81:f8:
         b6:18:fb:cb:b5:6f:a3:84:ef:41:76:5e:ce:0f:19:03:eb:7c:
         69:bf:be:ae:5b:ab:6f:68:73:2c:24:d0:1e:f3:da:52:74:ab:
         87:19:cd:66:51:b5:3e:ec:fd:fb:ac:c7:eb:1f:f8:6c:cd:0b:
         cc:e3:c2:c8:b7:a7:49:e3:66:8b:c2:ac:9b:e3:5f:3e:21:c6:
         df:bf:8a:1e:ab:82:eb:d6:20:f5:92:ab:c2:9d:f4:48:d8:83:
         b2:0a:db:6e:cc:dc:21:f4:59:83:d9:ca:c1:4c:7d:b7:3f:c6:
         c4:a8:51:66:06:74:35:d9:f5:f4:19:87:8e:93:d2:d5:31:ad:
         6d:fe:f8:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSbMVQQv5ybaXowsdMQrUSzOvpPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0MjRaFw0yNjA5MDgxMjQ5MjRaMDMxMTAvBgNV
BAMTKDBEOUYzQkM3NDhFOTFFNkI5ODc3RDE5QUIxMEVDOENCRUIyNDAxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0FqHgrcgq+SHeD81z0oWgYdV
F9by09vY2DnsUhRRmtZhSFB0Q2g9sJz7AdAZRDuEz7QuXDyg5F0q+RuUCX6UfCqv
odC8R4VAZ/2LyDjthVVmch2rCSqwc/yFt+tJ6yP27YeBvyOCs7AyI2WjczfMrJqw
ERpZsECSw3SpSUR/cuoerh+fr4p8wL14NnQOHAXYpUCqbGyE2RjbuUY1j3P5B7Vt
89qF5qhPj3nfMD2FpMcLugzY6Cuww0tgGW7EaE+sF2ZxPhKApWhMzX4Xw4/BqmlA
6SxIAf6DzcTXbEyB9+9hru+A58y/YGP9dn8jSDfD5M15KkcrYrMAx8e2As8PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDZ87x0jpHmuYd9GasQ7Iy+skAc4wHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
NzM3MmUzNTMzMmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxNaMwDQYJKoZIhvcNAQELBQADggEBAAJaCNbIOd8+
IdEXvrT/FTKkhTHpfuWEDP8vMFA2+tvb2z52SHJ+3b6j/vVAlMBpSBtgi1bead7z
X6xHI1/ihmn1yffq4Hi1O7QTZmZcijqyX+f2PkrE5QWpTq7+m5bZrVLE0BlOZP2X
Gl4CFm/xUNqVwZ2HdJbbeVqvswKB+LYY+8u1b6OE70F2Xs4PGQPrfGm/vq5bq29o
cywk0B7z2lJ0q4cZzWZRtT7s/fusx+sf+GzNC8zjwsi3p0njZovCrJvjXz4hxt+/
ih6rguvWIPWSq8Kd9EjYg7IK227M3CH0WYPZysFMfbc/xsSoUWYGdDXZ9fQZh46T
0tUxrW3++Eg=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:04:48 2025 by rpki-client