Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32312d3231203d3e20323733363833.roa
File:                     3138372e38342e3137362e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          2f7Z5kYt9wIxqqGd65nTBphXDvhKhJ8HVMuQHy4byns=
Subject key identifier:   C0:57:B8:BD:4F:9D:AA:DE:2D:8E:46:05:3A:18:3B:C9:CB:0B:39:01
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7A2124D95D258A9C5D39D620A09524EF29AE610D
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32312d3231203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:09 +0000
ROA not before:           Tue 09 Sep 2025 12:45:09 +0000
ROA not after:            Tue 08 Sep 2026 12:50:09 +0000
asID:                     273683
IP address blocks:        187.84.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:21:24:d9:5d:25:8a:9c:5d:39:d6:20:a0:95:24:ef:29:ae:61:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:09 2025 GMT
            Not After : Sep  8 12:50:09 2026 GMT
        Subject: CN=C057B8BD4F9DAADE2D8E46053A183BC9CB0B3901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:fa:d8:60:82:96:0f:fa:9b:2e:fa:47:f2:
                    5e:f9:8d:ac:e2:a2:d2:17:b4:13:ed:7a:e1:b5:ae:
                    34:90:85:9f:5d:4b:9b:07:fe:59:20:4e:3c:7d:a4:
                    29:91:0b:ef:69:44:85:de:98:6d:01:65:3b:4c:4c:
                    6b:97:75:ab:68:96:c5:cd:9b:0d:81:77:93:6a:49:
                    0d:a5:86:78:83:a6:23:ff:dd:66:e9:f5:71:76:ed:
                    2b:7a:87:8c:51:c0:7f:cf:89:11:3b:de:d7:a0:12:
                    28:b5:a5:05:18:90:dd:4f:31:af:c7:61:c2:d6:52:
                    35:db:7f:a1:a4:19:de:bf:14:91:cf:2d:0d:3e:fc:
                    74:b7:66:31:34:2e:45:31:45:24:b4:ac:a4:fd:e7:
                    04:8c:e2:55:33:9e:ce:d8:81:27:8e:ca:5d:21:d0:
                    cc:b0:4a:7e:dd:3c:91:f1:1c:7e:89:f1:98:74:6d:
                    8a:4c:e2:e5:da:c4:95:b3:22:e5:01:f4:45:de:8a:
                    43:eb:0b:9e:fd:22:de:c8:a9:b3:d4:55:de:60:ed:
                    1a:c2:a1:93:fd:5d:fb:58:e7:7b:9b:03:9d:e3:6f:
                    91:aa:8b:29:ce:3a:66:e0:2b:1f:15:ad:82:ec:0b:
                    7a:49:2f:07:b5:46:80:53:a4:44:84:0c:fe:9e:17:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:B8:BD:4F:9D:AA:DE:2D:8E:46:05:3A:18:3B:C9:CB:0B:39:01
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:b9:c8:bc:69:1f:01:d7:96:e4:c3:a2:0e:9d:9b:d9:88:
         2d:8f:fe:4d:df:4b:89:b1:dd:e7:b6:d2:e2:8d:10:43:d6:f2:
         94:05:92:74:3f:f2:f2:2e:4a:17:24:3e:c1:6b:1f:5f:c9:ad:
         6f:13:85:32:5a:2d:c3:af:d7:77:61:0e:20:b5:19:f0:8c:2c:
         08:99:1e:e6:f0:61:cb:4b:04:9c:7a:13:1f:bc:77:5f:48:68:
         8e:7e:5d:32:78:8c:49:8b:4d:32:c1:61:e2:3e:2b:0a:73:67:
         4d:cc:6c:d9:3e:4c:87:b2:86:48:cf:d8:1d:51:93:15:34:90:
         93:30:29:cb:03:96:17:51:31:75:90:8c:9e:35:af:d9:4a:af:
         8c:4c:0e:76:e6:4e:fe:4f:cc:d4:3c:44:0d:d3:16:29:af:8b:
         be:43:6c:65:be:6b:59:0e:4f:eb:ea:5a:3f:70:ae:ad:e7:57:
         fe:a4:5b:93:b7:41:6a:07:0d:6c:dd:2a:be:4e:1b:21:69:af:
         80:41:48:05:03:54:ba:e4:91:00:c7:b8:e1:cc:20:49:25:54:
         c2:fc:a6:88:e1:a1:93:3b:44:f2:21:36:3a:a2:12:87:50:61:
         70:5d:15:07:48:e6:7c:91:9b:8c:75:c9:7d:03:eb:8a:a3:c5:
         cd:57:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:15:34 2025 by rpki-client