Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3135302e302f32342d3234203d3e20323733363833.roa
File:                     3139302e3131322e3135302e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          T7AXn9I7smKcO6qvfpvhWbjbMosI/RLLh7R6Hv2a48U=
Subject key identifier:   13:44:FB:1D:8D:66:99:B1:B9:3E:C8:2E:13:66:5E:D9:53:63:02:F0
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0BDA1D681DE3B928FD08C021CCE6290725F0CA02
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3135302e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:09 +0000
ROA not before:           Tue 09 Sep 2025 12:45:09 +0000
ROA not after:            Tue 08 Sep 2026 12:50:09 +0000
asID:                     273683
IP address blocks:        190.112.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:1d:68:1d:e3:b9:28:fd:08:c0:21:cc:e6:29:07:25:f0:ca:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:09 2025 GMT
            Not After : Sep  8 12:50:09 2026 GMT
        Subject: CN=1344FB1D8D6699B1B93EC82E13665ED9536302F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:9a:b4:92:a1:fc:0a:f1:18:f6:74:ee:96:
                    30:e2:d6:1e:1b:d5:ad:ff:b9:02:2e:f1:84:2f:9f:
                    7b:0c:63:cd:1d:74:06:b4:48:85:6d:f9:ef:72:92:
                    21:66:61:34:ec:06:87:e1:15:ef:da:be:08:b9:ca:
                    24:bc:17:d2:7d:1a:0f:c5:9d:2b:03:aa:41:4a:6d:
                    f0:d8:ab:e2:d6:50:75:a5:a3:f9:cb:53:d3:3e:1e:
                    51:91:f1:f8:67:73:2e:e3:f2:34:5b:4a:c7:08:69:
                    48:96:be:93:56:f0:68:00:d7:08:bb:73:1d:ca:43:
                    fa:2f:ce:85:be:d3:09:ec:33:1a:9a:ee:2c:e7:80:
                    43:d6:6b:63:53:57:1a:8d:e0:ea:9b:1f:de:88:d3:
                    e0:72:67:29:93:5f:0a:0d:1e:33:7d:6c:61:6c:b3:
                    7b:44:85:92:3b:15:2f:f0:e5:39:22:39:61:23:2d:
                    05:0c:b7:ab:da:47:94:59:c3:ce:05:db:6f:81:af:
                    d4:a1:4b:1a:50:c7:2d:2e:e6:05:93:fb:45:f6:af:
                    b6:6b:89:f1:1f:b3:3d:8d:f4:95:76:fa:d8:8f:f5:
                    77:b0:33:c1:40:fb:f4:c5:5d:7b:79:c6:16:78:0c:
                    4b:c0:59:00:c0:75:bf:27:29:fe:97:78:90:93:69:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:FB:1D:8D:66:99:B1:B9:3E:C8:2E:13:66:5E:D9:53:63:02:F0
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3135302e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:89:c5:61:7a:63:3c:92:1a:8c:62:34:21:85:73:f7:87:ae:
         b5:47:f4:10:b5:d5:96:b6:7a:ef:cd:22:2e:a7:8b:2d:9c:88:
         28:1e:2b:8e:06:06:bb:01:59:b8:2c:9f:70:a6:72:15:11:89:
         f3:e8:0b:67:eb:36:70:1a:34:af:03:60:49:fa:ee:69:06:e1:
         43:27:b6:94:3d:ff:e6:76:3b:d0:24:63:a0:bd:b9:b9:ae:f8:
         2c:8a:20:54:03:59:88:ff:9d:70:00:96:1e:69:1e:cc:9b:f9:
         9f:f1:0a:6f:38:c3:07:86:76:71:e3:74:e3:1f:5c:80:5d:6b:
         9e:53:60:56:9c:7b:cd:58:0d:4f:b0:34:38:b7:d5:a2:c3:f2:
         86:01:44:a4:68:8e:6c:66:e0:15:54:f2:47:a2:78:b2:3f:02:
         f0:77:92:ba:a2:7e:a6:13:a4:b6:1e:0f:8e:2f:04:60:0c:1f:
         25:9b:bd:84:6c:42:48:6f:a0:d6:ab:af:e4:2b:90:56:7b:1e:
         7e:91:79:da:4b:8c:0e:02:62:58:1a:fa:a0:eb:c0:4d:c3:2a:
         5f:c7:5d:65:61:d2:01:77:db:e6:a2:ec:ef:79:2c:b9:81:80:
         bd:4b:57:c9:0b:ba:15:3c:45:2c:fa:b9:d3:9c:47:4c:24:bf:
         df:fb:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:45:44 2025 by rpki-client