Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233392e302f32342d3234203d3e20323733363833.roa
File:                     3137372e38342e3233392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          MM1NcGt3fzdAGj83idPKt0x6ewlspFNGG5n7XvyFpSA=
Subject key identifier:   55:06:A3:B5:85:BB:C7:F7:DC:97:EA:C6:35:27:D0:E3:5A:54:22:6B
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       299BB03BEA28071E223559041B774C7F191A971D
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233392e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 13:08:45 +0000
ROA not before:           Tue 09 Sep 2025 13:03:45 +0000
ROA not after:            Tue 08 Sep 2026 13:08:45 +0000
asID:                     273683
IP address blocks:        177.84.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:b0:3b:ea:28:07:1e:22:35:59:04:1b:77:4c:7f:19:1a:97:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 13:03:45 2025 GMT
            Not After : Sep  8 13:08:45 2026 GMT
        Subject: CN=5506A3B585BBC7F7DC97EAC63527D0E35A54226B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:2a:81:b2:9a:0a:69:12:ef:4f:f6:3b:7b:
                    3a:2a:cc:40:c9:fa:d5:9c:54:da:6c:a5:1e:c0:35:
                    a0:f4:28:14:eb:44:84:44:16:3b:24:7c:ef:96:95:
                    03:ef:44:d7:ff:2e:f3:d5:f5:67:e3:e9:62:ca:de:
                    7a:90:01:58:d2:84:00:a1:38:e5:59:eb:92:0d:88:
                    b0:85:fb:38:87:b7:1c:63:c4:69:33:23:f9:15:94:
                    d0:d2:55:7f:3d:ad:5e:f4:29:91:4b:cd:b1:08:cf:
                    36:d1:93:42:74:f1:cd:17:65:69:83:67:61:bf:c0:
                    9b:85:ab:31:d9:0c:3e:3d:75:7b:9f:29:44:dc:b3:
                    f9:09:75:b4:a1:d8:df:46:0f:d8:48:77:98:4d:27:
                    09:20:a3:78:7b:97:c7:e4:29:4d:9d:f2:b3:2a:07:
                    df:ed:93:21:e3:d9:0d:88:e7:74:81:91:e0:fe:97:
                    0b:8f:25:00:72:08:b4:cb:ad:18:a7:cc:2f:03:d2:
                    e6:06:9d:f6:91:56:b1:60:51:92:b9:6f:c7:48:d1:
                    cb:eb:ce:36:82:bb:07:6d:37:7b:2b:03:3d:90:7a:
                    20:d7:07:e2:e7:d8:c2:f5:61:e9:0b:41:09:45:75:
                    b1:ae:e3:bf:a7:61:df:9a:7b:53:06:14:f5:99:2d:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:A3:B5:85:BB:C7:F7:DC:97:EA:C6:35:27:D0:E3:5A:54:22:6B
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:04:3d:3c:cb:0c:b2:02:35:8f:bd:1c:1b:bb:a8:2a:d5:
         6a:18:14:73:95:74:6a:e1:cf:f3:75:30:b3:fa:82:c5:4b:63:
         86:3d:ce:5f:d5:b1:10:cd:ec:90:59:96:62:81:f9:4f:00:b8:
         07:58:e7:a5:9e:30:39:e0:4e:d9:88:e7:cb:5a:31:8e:8f:31:
         68:69:fe:2a:f8:59:36:b3:70:52:28:3d:46:7f:a4:ed:02:3c:
         43:34:a1:24:79:90:a8:07:4f:db:34:9c:5a:cf:93:d3:48:b8:
         b7:a5:98:ac:fd:29:e3:c0:d8:ff:5c:19:5a:e5:15:93:bb:4b:
         51:cf:34:fb:53:79:82:c5:70:0b:f4:28:71:d2:21:f1:4a:e5:
         57:72:de:62:4f:bf:ef:17:f6:57:06:c2:b1:c0:72:5e:3b:cd:
         fa:c4:16:9b:84:8d:07:38:11:b2:40:8b:ca:08:70:8c:b1:7d:
         4c:d2:17:69:eb:fe:27:f6:05:83:c9:3f:f7:28:25:e9:1d:13:
         1d:4f:76:ae:64:ad:3f:d9:bc:de:08:5b:c9:9b:b7:ba:92:51:
         ba:36:97:f5:5a:b9:62:b9:18:62:d2:07:a4:55:1d:58:2c:a0:
         ba:e6:1e:c3:67:c0:c0:3c:37:0a:92:0c:b9:2c:f3:14:e7:d3:
         b7:f3:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:33:20 2025 by rpki-client