Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132312e302f32342d3234203d3e20323733363833.roa
File:                     3138392e382e3132312e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          Mr92Jeie4ADmvHKAl8oJAZ9/FPv5Gubt4DW/buhGJ/w=
Subject key identifier:   8A:BD:BA:F1:75:85:3C:8A:76:BE:85:E7:21:4B:C2:C0:DD:26:5B:15
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       11E3B6432A9749BF40F07DC33E6BE88CDBD0736F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132312e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:06 +0000
ROA not before:           Tue 09 Sep 2025 12:45:06 +0000
ROA not after:            Tue 08 Sep 2026 12:50:06 +0000
asID:                     273683
IP address blocks:        189.8.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:b6:43:2a:97:49:bf:40:f0:7d:c3:3e:6b:e8:8c:db:d0:73:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:06 2025 GMT
            Not After : Sep  8 12:50:06 2026 GMT
        Subject: CN=8ABDBAF175853C8A76BE85E7214BC2C0DD265B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:70:d1:64:a4:8f:85:be:9f:18:af:99:3a:
                    f7:ae:8e:91:37:74:88:3e:f7:32:d6:2c:a5:68:d8:
                    d1:2d:e2:6f:37:3c:07:63:a1:cc:f4:69:54:4d:90:
                    eb:21:a2:75:ae:8c:33:c8:6b:05:bc:8f:8d:74:3f:
                    ad:1e:9a:d0:a1:ae:d8:f4:0a:11:61:02:9e:e1:06:
                    a8:8b:49:a6:22:8f:c3:48:8c:64:c7:25:dc:4e:67:
                    00:0f:b4:c6:74:1e:5a:f8:ca:ba:84:61:d3:49:b5:
                    ef:c3:1f:73:0a:49:e2:59:5d:86:c6:9f:1b:41:57:
                    51:59:72:81:13:a7:ac:8e:fd:cb:c6:31:26:e9:6d:
                    ac:06:e4:a1:24:9f:0d:95:f6:36:06:27:e4:4b:df:
                    ee:d4:32:da:98:b5:40:4b:0f:a2:ab:9d:52:ae:15:
                    8a:88:c6:55:3e:bc:de:b2:be:62:45:f6:df:37:04:
                    28:4c:45:da:87:5a:24:5e:5b:31:1e:84:6e:a1:8a:
                    cc:57:21:01:fd:e6:e5:6e:3f:3d:0f:9d:ee:5f:fd:
                    82:18:ae:9a:ce:98:b9:8f:0e:ea:27:8e:dd:35:4e:
                    4c:c0:83:5b:85:88:5f:f3:99:60:57:6e:c1:58:08:
                    f0:74:ed:04:e3:0a:67:81:41:f4:f6:ec:a7:29:74:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:BA:F1:75:85:3C:8A:76:BE:85:E7:21:4B:C2:C0:DD:26:5B:15
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132312e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:39:2f:a3:e7:37:86:51:6a:27:55:04:90:2f:e8:5c:70:
         b3:03:77:7d:11:9b:62:42:bc:fb:e3:0e:11:0b:87:3b:a4:7e:
         9c:20:b5:6b:37:21:84:68:b5:48:11:6f:54:2c:9a:ad:8c:3c:
         36:1a:f6:f7:c4:d7:4f:5f:de:f0:78:04:d4:65:43:3f:b7:3a:
         67:91:c8:c9:df:65:6b:5a:e8:b6:53:bd:49:14:c0:b2:e8:f3:
         38:f8:f1:c9:09:ba:3f:52:8a:e8:9f:56:72:a6:8b:c5:07:a0:
         65:f0:58:11:1c:7e:3d:eb:e7:4f:41:af:30:c0:0a:e4:b9:65:
         e0:e4:b2:9f:a0:30:75:d9:b4:df:80:54:b0:fe:72:c8:c0:24:
         95:be:83:6c:a1:cd:e7:6e:28:e1:c9:04:05:88:37:13:f3:36:
         6f:55:0c:bd:a5:ba:c7:8b:c3:27:52:26:74:53:e9:bd:bf:47:
         1c:b4:f7:59:c8:c7:b2:8c:59:02:97:5b:e6:ec:f4:89:31:33:
         03:26:e9:eb:61:b1:30:ae:55:8a:a2:70:bb:31:61:86:75:13:
         3e:3c:f0:70:06:2e:49:10:ab:42:05:85:34:f6:5d:3c:fa:36:
         26:a6:60:e0:90:1d:91:36:5e:8e:2e:ee:c2:b7:c0:39:61:b5:
         fa:c4:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:37:58 2025 by rpki-client