Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa
File:                     3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          yFWPLoQ9otUhxHtjNgofBA90n+vvu5MYn0lD/BU7N1U=
Subject key identifier:   F6:91:E7:7F:6E:8C:01:2B:8D:1E:51:88:DF:45:10:88:C1:EB:CF:65
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6F92BBA64BD1B3C7A547EB95C4DD52F5475AD6A5
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 13:08:05 +0000
ROA not before:           Tue 09 Sep 2025 13:03:05 +0000
ROA not after:            Tue 08 Sep 2026 13:08:05 +0000
asID:                     273683
IP address blocks:        177.84.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:bb:a6:4b:d1:b3:c7:a5:47:eb:95:c4:dd:52:f5:47:5a:d6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 13:03:05 2025 GMT
            Not After : Sep  8 13:08:05 2026 GMT
        Subject: CN=F691E77F6E8C012B8D1E5188DF451088C1EBCF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:4d:dd:9f:bd:e6:26:de:8a:b5:e2:13:8a:
                    fb:1b:70:e2:51:7a:58:e1:64:d8:bc:25:0b:24:1e:
                    f9:8c:ab:d0:1a:bb:76:1f:25:19:62:4f:02:7f:0e:
                    81:e6:e5:c7:60:c7:08:c9:fb:76:48:b0:1f:82:76:
                    72:47:bb:e6:7d:5d:f8:03:9b:72:15:72:13:fb:30:
                    cd:c7:6a:c5:f6:86:df:ad:91:05:d7:18:56:be:33:
                    4d:27:a3:dd:36:f2:19:b4:5a:1e:5f:a0:6a:2b:29:
                    ed:d4:71:1b:1c:eb:b5:67:3f:c0:76:d4:f6:95:fb:
                    3e:64:d2:f7:e5:41:c1:43:6c:e4:0d:99:09:ce:91:
                    bb:99:6b:ff:47:74:6b:98:3e:18:68:75:a3:01:d2:
                    ca:2d:26:b3:eb:c1:14:39:41:7e:68:8c:a4:90:e2:
                    76:e0:98:2e:73:b7:3b:59:87:41:5c:9a:16:a7:d4:
                    3f:48:80:02:0e:1d:ea:1b:2c:f5:b2:68:91:b7:8a:
                    fb:3e:76:14:84:82:61:b6:b3:12:16:3c:2f:3e:eb:
                    a2:f1:e2:9d:3b:a7:cf:15:74:d1:c4:8f:c6:a3:f4:
                    95:bf:80:cd:dc:5d:7a:6d:15:cc:b3:7f:3d:77:63:
                    dc:25:9a:5a:b6:16:dc:80:5a:dd:06:67:9d:2c:1f:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:E7:7F:6E:8C:01:2B:8D:1E:51:88:DF:45:10:88:C1:EB:CF:65
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:04:1b:82:39:de:bf:19:67:30:58:ed:dd:ee:13:d0:67:
         ff:33:bb:05:15:75:1e:28:c7:6b:a8:32:8d:c7:7f:d4:9c:33:
         81:b3:ce:71:64:f2:ab:d7:e7:64:97:e3:59:21:85:34:70:4a:
         e1:93:04:ba:82:ed:8e:22:d6:0a:88:0a:02:99:4a:86:88:21:
         c4:33:4f:8c:42:c6:75:c9:68:d5:7e:fe:22:cf:9e:74:de:00:
         e3:cc:25:68:6d:d6:97:fc:d6:ba:8f:bf:8e:b3:e4:b7:c5:76:
         14:f4:49:fe:6b:15:32:0e:12:56:d6:a9:31:95:38:0d:f3:b0:
         a0:a0:2e:cc:88:04:32:5c:93:92:45:66:93:bd:91:b4:8d:8e:
         1c:35:7d:50:a2:e1:82:7f:f0:15:7f:3f:67:93:16:73:40:93:
         e4:41:f9:62:0c:f6:d3:a8:bb:08:7c:91:43:61:fb:b5:0e:be:
         53:d2:a6:df:42:80:92:86:08:33:a7:67:bd:43:27:17:dd:45:
         38:21:22:cf:a2:72:64:da:5a:b3:67:0a:7b:37:d8:08:a2:b6:
         1a:a4:71:c5:36:98:7c:a3:f4:6c:66:98:55:a0:74:48:fc:6a:
         44:28:c5:b8:55:02:f2:1f:77:26:b1:dd:d8:39:0d:4e:3f:6d:
         1a:5c:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:04:35 2025 by rpki-client