Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa
File:                     3137372e36372e32382e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          YoLBeAxtozqNPLNbsAGzVjGDuNFAdLGyPe2d1URODvA=
Subject key identifier:   59:BA:32:70:D7:EC:48:01:92:18:27:C6:B4:FE:35:44:E2:A7:04:BB
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       088CC86412E9BC5E157AD2A4E5E3B4B9A134DD23
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa
Signing time:             Tue 09 Sep 2025 12:49:58 +0000
ROA not before:           Tue 09 Sep 2025 12:44:58 +0000
ROA not after:            Tue 08 Sep 2026 12:49:58 +0000
asID:                     262324
IP address blocks:        177.67.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:c8:64:12:e9:bc:5e:15:7a:d2:a4:e5:e3:b4:b9:a1:34:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:58 2025 GMT
            Not After : Sep  8 12:49:58 2026 GMT
        Subject: CN=59BA3270D7EC4801921827C6B4FE3544E2A704BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8a:f7:67:db:a2:c7:c4:2d:88:8e:2b:fd:4a:
                    f1:5f:42:bf:d8:36:98:a8:a9:c7:c4:f7:a9:c8:e2:
                    5f:a6:6e:c6:ea:d2:2e:e3:ee:49:90:91:e3:c8:b4:
                    55:c4:56:e4:2c:5e:f9:53:6d:45:18:ea:68:35:29:
                    3e:f3:54:a3:ab:a3:d4:3c:8f:0e:ef:3a:ee:f8:28:
                    14:97:96:22:97:ef:96:b4:8e:e9:01:4b:e0:37:e9:
                    e8:1b:f4:30:32:da:0b:00:39:34:a0:7a:bc:0b:e5:
                    7e:8b:e5:40:74:40:a3:21:d1:8e:5b:f1:c3:a0:82:
                    18:75:7c:81:f5:ba:4d:77:2a:87:74:f7:23:9d:49:
                    2e:17:f0:c5:55:45:cb:5b:87:b6:91:62:b5:99:a9:
                    63:70:ed:1d:e2:12:b3:2d:89:7e:18:66:75:ac:60:
                    aa:41:36:52:21:aa:71:84:34:9f:3a:33:01:76:bc:
                    90:81:72:73:fb:fd:b2:c1:a9:f7:0b:b3:c7:c5:58:
                    c2:ee:be:ac:fe:7d:58:e8:f0:3c:7c:41:68:ba:cc:
                    63:41:ec:16:9d:ed:29:16:d4:cf:8c:f6:12:16:ae:
                    92:2e:6a:fc:36:2a:11:20:a7:39:e9:09:96:65:2b:
                    4f:cf:62:db:20:6a:51:d0:ab:89:69:22:70:c6:ef:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:32:70:D7:EC:48:01:92:18:27:C6:B4:FE:35:44:E2:A7:04:BB
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:41:74:36:20:96:d1:dd:6d:03:b6:51:48:74:a8:78:0e:
         d9:bf:f5:e9:22:39:c9:7d:17:2f:c4:64:bc:bc:49:25:40:a0:
         e8:2a:4c:b8:b1:c0:67:50:3d:a0:12:cd:84:36:93:a1:b8:32:
         2b:84:27:41:74:1f:7c:f0:15:9b:a3:52:02:9d:63:e6:22:19:
         28:4e:a6:20:9c:1e:a4:e5:05:25:4f:e6:7c:c0:8d:7d:c3:ba:
         12:8d:3a:a1:aa:49:4e:24:46:0b:5f:2c:26:00:3b:90:12:3d:
         f7:60:80:ad:e4:9a:f9:96:86:42:43:ee:9f:3b:f3:fa:0f:9b:
         05:15:ab:ad:d0:44:6a:df:15:72:f6:86:22:67:ee:15:18:f2:
         20:9e:86:cc:38:f2:41:25:c8:3b:b2:33:e5:4d:c5:f5:a2:f1:
         8f:76:26:77:ee:42:97:8f:be:7f:6e:a8:67:4c:1b:53:3f:75:
         6f:c8:01:97:7f:e1:0c:f6:99:8f:8e:20:37:a6:8e:90:3c:80:
         d3:45:f7:57:b9:33:b9:d2:7d:97:14:4a:5b:f4:03:64:89:83:
         2b:c5:f8:98:62:69:0e:a1:f0:29:b0:3f:4d:6c:91:4e:36:8d:
         57:75:50:e5:01:eb:ab:56:58:81:91:de:22:d1:02:9f:08:a5:
         a5:fe:90:d6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUCIzIZBLpvF4VetKk5eO0uaE03SMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0NThaFw0yNjA5MDgxMjQ5NThaMDMxMTAvBgNV
BAMTKDU5QkEzMjcwRDdFQzQ4MDE5MjE4MjdDNkI0RkUzNTQ0RTJBNzA0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtivdn26LHxC2Ijiv9SvFfQr/Y
NpioqcfE96nI4l+mbsbq0i7j7kmQkePItFXEVuQsXvlTbUUY6mg1KT7zVKOro9Q8
jw7vOu74KBSXliKX75a0jukBS+A36egb9DAy2gsAOTSgerwL5X6L5UB0QKMh0Y5b
8cOgghh1fIH1uk13Kod09yOdSS4X8MVVRctbh7aRYrWZqWNw7R3iErMtiX4YZnWs
YKpBNlIhqnGENJ86MwF2vJCBcnP7/bLBqfcLs8fFWMLuvqz+fVjo8Dx8QWi6zGNB
7Bad7SkW1M+M9hIWrpIuavw2KhEgpznpCZZlK0/PYtsgalHQq4lpInDG724bAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUWboycNfsSAGSGCfGtP41ROKnBLswHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
NzM3MmUzNjM3MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzMz
MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCsUMcMA0GCSqGSIb3DQEBCwUAA4IBAQBLDUF0NiCW0d1t
A7ZRSHSoeA7Zv/XpIjnJfRcvxGS8vEklQKDoKky4scBnUD2gEs2ENpOhuDIrhCdB
dB988BWbo1ICnWPmIhkoTqYgnB6k5QUlT+Z8wI19w7oSjTqhqklOJEYLXywmADuQ
Ej33YICt5Jr5loZCQ+6fO/P6D5sFFaut0ERq3xVy9oYiZ+4VGPIgnobMOPJBJcg7
sjPlTcX1ovGPdiZ37kKXj75/bqhnTBtTP3VvyAGXf+EM9pmPjiA3po6QPIDTRfdX
uTO50n2XFEpb9ANkiYMrxfiYYmkOofApsD9NbJFONo1XdVDlAeurVliBkd4i0QKf
CKWl/pDW
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:15:41 2025 by rpki-client