Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32322d3232203d3e20323733363833.roa
File:                     3138372e3132312e3134342e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          78Z5vdS/pUAkTg8RJvEpqs1FEclfLql8g6cXMTSTeVI=
Subject key identifier:   C9:87:A9:F5:D4:6D:0F:A7:2A:C7:1A:31:70:D4:D5:6E:29:AA:81:25
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6D828A7EC96B72EF9ABEE822C6A880C3EE6DF95E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:56 +0000
ROA not before:           Tue 09 Sep 2025 12:44:56 +0000
ROA not after:            Tue 08 Sep 2026 12:49:56 +0000
asID:                     273683
IP address blocks:        187.121.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:8a:7e:c9:6b:72:ef:9a:be:e8:22:c6:a8:80:c3:ee:6d:f9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:56 2025 GMT
            Not After : Sep  8 12:49:56 2026 GMT
        Subject: CN=C987A9F5D46D0FA72AC71A3170D4D56E29AA8125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:b2:47:e5:11:6a:00:45:cc:31:e4:4d:93:
                    47:17:48:54:95:bc:b9:55:cb:fb:9d:56:4e:40:82:
                    a9:26:7f:f4:c1:8e:f1:c6:c0:7a:ef:5d:7b:60:7f:
                    5e:00:61:7a:84:43:df:5b:74:b4:04:ce:6d:80:ed:
                    37:c8:02:57:21:e3:c9:72:84:b9:34:08:d8:e3:8f:
                    67:8a:8f:fb:57:c2:8f:f1:78:66:27:55:69:b2:02:
                    71:27:f6:f9:ee:4e:60:f7:83:4e:30:0e:82:5d:ac:
                    26:66:2e:62:a0:95:14:c7:04:e6:c3:1a:4d:98:69:
                    6a:63:01:5d:1b:1a:04:ac:50:21:50:8f:81:ea:fb:
                    eb:59:8b:a6:49:f8:92:99:be:40:01:9f:a9:aa:8e:
                    e3:42:07:88:2b:48:35:b3:61:69:da:01:66:f1:8c:
                    60:9c:6d:79:d4:69:80:15:98:99:64:f7:4e:0d:79:
                    3c:63:d0:05:f4:cd:67:2b:4b:5e:72:4e:0e:ff:50:
                    4f:ee:b0:6c:e8:c4:6f:e2:d7:8d:9e:73:eb:81:8a:
                    14:19:a5:70:a4:a0:be:4f:7e:cc:c5:4f:50:86:ff:
                    a9:a3:c9:04:34:8d:31:34:c7:7e:3d:bc:e7:fe:85:
                    c4:6b:59:c0:20:90:e2:c8:4d:05:36:6d:2f:83:46:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:87:A9:F5:D4:6D:0F:A7:2A:C7:1A:31:70:D4:D5:6E:29:AA:81:25
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:49:fa:58:52:1b:1a:bd:6a:9f:18:b1:c8:35:17:17:7f:
         e1:f6:fc:2e:fc:de:63:ba:b6:36:7b:eb:29:72:01:b8:37:cb:
         79:aa:7d:10:ed:32:29:3b:cd:8e:3d:47:2f:91:38:67:ef:87:
         96:4d:67:e7:44:b2:52:f2:bf:81:00:fa:9e:db:5b:50:64:e6:
         b8:db:4a:9a:08:ad:61:fd:68:46:43:40:9d:e7:8f:4a:ff:ee:
         60:4d:be:c2:a8:73:c2:5c:b6:80:ae:67:2e:82:d8:a6:df:8c:
         0f:c1:e3:55:07:4c:fb:fd:37:3b:ca:82:4f:09:9a:33:55:3a:
         1f:4c:a5:cb:c0:cd:19:ce:01:e2:bf:7c:e1:33:5d:a8:26:03:
         36:23:9b:06:63:55:6c:8c:ab:b4:93:8c:50:3e:8d:55:5b:c6:
         31:3d:31:f2:0a:12:3e:30:8d:aa:bb:ca:3e:9c:ac:de:9d:c9:
         e5:56:8f:e2:a1:70:f5:8e:ed:f5:a2:f0:12:08:f4:a2:dd:1d:
         d8:76:08:7c:46:16:a8:06:8d:d3:18:e7:15:df:bc:a1:51:5b:
         77:f8:96:cc:47:07:90:65:57:46:c6:21:13:18:04:53:33:13:
         dc:28:cc:6a:12:d8:4e:a5:cf:77:68:bc:16:02:0c:7f:0f:61:
         26:f7:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:01:02 2025 by rpki-client