Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa
File:                     3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          n9oy62Cy5KSm7NOq4Aic7/ZO9Ep+5DiarQDmViNU0F0=
Subject key identifier:   CB:E8:65:0A:EF:9B:65:D1:1E:F5:3C:62:8E:5F:02:E0:5E:30:C7:F6
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       19BD3FD763A5BD99C0BB70C941CBE87ADC57844F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 13:08:26 +0000
ROA not before:           Tue 09 Sep 2025 13:03:26 +0000
ROA not after:            Tue 08 Sep 2026 13:08:26 +0000
asID:                     273683
IP address blocks:        177.84.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bd:3f:d7:63:a5:bd:99:c0:bb:70:c9:41:cb:e8:7a:dc:57:84:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 13:03:26 2025 GMT
            Not After : Sep  8 13:08:26 2026 GMT
        Subject: CN=CBE8650AEF9B65D11EF53C628E5F02E05E30C7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:53:0b:9f:9d:c5:f9:b2:29:b0:70:dd:9b:
                    e3:b6:34:89:25:77:39:bf:70:3a:d9:5d:44:90:d1:
                    98:7c:ad:d6:39:18:da:f9:5c:0a:8c:cd:f8:aa:54:
                    92:4c:11:2d:ef:75:d4:e7:f7:b2:e7:c2:ea:a2:35:
                    7a:5e:f9:f9:d7:68:55:78:d7:68:d2:ac:ea:4f:06:
                    48:95:f9:03:4d:88:48:d9:f3:ad:50:5c:17:5e:87:
                    40:9d:d1:1c:40:41:1d:07:5a:04:3a:3d:cd:98:64:
                    92:db:e3:7c:cc:30:c0:4f:ba:bc:52:6b:80:cd:e6:
                    70:70:55:f8:cb:da:70:4c:ad:1c:d4:2c:ef:93:ee:
                    06:d8:93:97:9b:ea:3f:e4:7c:23:e4:95:38:3c:07:
                    d6:3d:a5:7a:44:99:28:79:86:ad:98:da:df:33:02:
                    03:73:84:1d:01:9e:c7:5e:63:a0:0f:bb:75:cd:03:
                    20:9f:3b:e8:29:fe:dd:83:d9:82:6a:47:40:a0:83:
                    43:8d:6b:76:b1:ae:f9:41:58:fb:31:be:58:1d:d3:
                    bc:2e:19:93:93:ad:97:a7:ea:d3:fb:ab:0b:e9:d0:
                    ad:72:a2:fe:b9:bd:88:84:b0:61:24:f8:04:2f:f6:
                    fa:a4:82:51:54:5c:bc:af:e2:66:13:af:e3:21:86:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E8:65:0A:EF:9B:65:D1:1E:F5:3C:62:8E:5F:02:E0:5E:30:C7:F6
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b8:33:94:f8:6f:9c:cf:e5:a1:79:02:b7:23:8f:80:31:3a:
         4e:e6:57:83:d6:d8:8e:7e:65:90:83:69:68:c8:14:88:b3:3c:
         27:24:e0:c1:6a:ca:48:2f:b1:a6:01:88:b4:e6:ab:9a:80:ee:
         b5:fa:e7:37:7d:8d:be:eb:64:b5:99:05:93:82:13:c6:4c:5c:
         1c:8a:80:61:c2:03:23:01:c1:39:48:91:db:a7:9f:10:92:72:
         c4:21:97:3e:d7:43:25:1f:a7:55:ec:bd:3b:d5:15:1e:ba:35:
         c6:64:50:69:82:38:75:57:d5:62:bb:71:73:eb:ea:eb:10:49:
         92:02:22:49:7b:3d:82:bb:91:6c:d1:32:9f:bf:80:ce:3f:12:
         bb:e4:d5:a9:a5:c3:20:79:b9:5d:63:af:87:3d:79:65:f9:c0:
         0c:da:c4:b4:52:5d:1b:a3:7f:ff:2c:b3:aa:e1:4b:49:8c:a5:
         a7:9d:84:0d:05:1f:cf:03:68:3e:25:e6:98:82:7c:e7:72:6e:
         ec:0b:87:9f:9f:80:00:1b:c4:b8:2e:cf:ff:28:b6:60:10:88:
         ef:3a:94:2d:0c:43:63:f7:2e:df:15:cd:87:56:c7:fd:3a:bc:
         91:14:e7:ae:48:90:58:fc:41:b7:fe:c0:ac:8d:9f:ac:68:1f:
         e7:eb:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:33:55 2025 by rpki-client