Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa
File:                     3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          35S9oReXFrgzUMyYAu8f4Q1TQZz4eaexeYJs4umQ8WY=
Subject key identifier:   C3:BC:41:E4:85:70:E3:3D:25:8A:33:F7:CB:B8:E1:BB:A9:A9:BB:87
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0EC405BAA056E8A1F13FEDC533D364DC0AC929A9
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:29 +0000
ROA not before:           Tue 09 Sep 2025 12:44:29 +0000
ROA not after:            Tue 08 Sep 2026 12:49:29 +0000
asID:                     273683
IP address blocks:        201.87.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c4:05:ba:a0:56:e8:a1:f1:3f:ed:c5:33:d3:64:dc:0a:c9:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:29 2025 GMT
            Not After : Sep  8 12:49:29 2026 GMT
        Subject: CN=C3BC41E48570E33D258A33F7CBB8E1BBA9A9BB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:07:a2:31:d9:a3:83:32:be:09:4a:3d:8c:
                    d2:e6:57:bf:f3:5a:db:6e:7d:67:0f:91:6d:38:36:
                    1d:2a:76:7e:66:c2:d3:0f:ba:9e:29:4a:26:07:bd:
                    e6:bd:5a:82:bf:9e:13:c7:e2:19:e7:e4:c7:f4:4e:
                    83:6f:c9:5e:ac:28:1e:69:68:35:85:0d:b6:17:c4:
                    ab:6b:be:92:87:45:35:c1:c9:b9:88:14:cb:c8:64:
                    74:fe:8b:d3:a9:2f:73:78:b7:b4:7d:9e:7b:a5:98:
                    5d:f4:3e:c0:87:9d:22:13:eb:3b:07:81:b2:3c:c9:
                    94:6f:91:e3:e9:92:3c:51:b2:d8:64:66:ee:1e:1b:
                    9a:ec:14:a2:57:95:b7:c1:d6:87:d2:e2:c9:6c:ac:
                    12:a7:61:d1:d0:38:15:cb:c2:16:ec:cf:b4:ca:4f:
                    a7:71:b4:86:a9:95:d9:b3:5a:6c:8e:f8:19:53:cc:
                    bb:76:49:00:21:a3:52:0f:92:7d:3f:ef:5c:10:ca:
                    5d:3d:b3:9f:b4:b3:71:26:f5:b6:e4:81:30:d8:24:
                    60:2f:5e:93:5c:2b:3e:05:03:ea:f8:7a:d0:66:1f:
                    9e:78:30:68:29:9e:8a:6a:be:50:e9:da:a1:96:ac:
                    70:70:6c:b5:9e:ad:21:c5:a7:c1:36:e5:28:60:1e:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:41:E4:85:70:E3:3D:25:8A:33:F7:CB:B8:E1:BB:A9:A9:BB:87
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:3b:a0:84:b8:05:43:6a:ce:94:80:c4:34:37:b1:e4:d7:aa:
         fa:06:52:59:1f:d8:64:94:43:92:89:bf:66:1a:ec:a0:c3:02:
         5d:b3:49:34:31:f1:f9:c2:36:3e:4c:e5:45:da:cc:9b:ba:b4:
         f4:59:4c:fd:31:dd:8d:a4:65:cf:04:29:1d:00:ef:35:62:11:
         e1:82:8a:81:80:5c:61:fd:89:8e:63:1f:57:3d:22:b5:ca:a3:
         4a:f7:dc:75:bd:bc:de:3e:a9:7e:98:6c:10:62:68:88:24:19:
         4b:42:bf:20:52:7f:d1:1b:44:e5:9f:18:a2:50:1f:3d:b7:38:
         f8:28:42:2a:95:0b:b5:29:1a:60:65:3c:49:70:89:fa:15:e1:
         5c:55:fb:7e:48:31:a1:35:c9:1d:3e:a0:ae:4d:de:74:1f:d5:
         ca:1f:ef:4f:58:dc:49:b5:f7:55:24:ea:e5:ee:c8:54:64:80:
         c1:46:72:24:bb:7c:7c:18:c1:37:d0:f6:d3:a1:23:90:d6:34:
         04:f3:04:bf:30:29:1a:e7:5c:37:19:26:af:42:ce:0d:f7:78:
         b9:30:b6:6a:50:5c:94:9e:74:98:18:ff:dd:af:a1:d6:72:2e:
         9b:89:ec:b9:10:15:73:d9:62:92:4f:81:f8:04:8c:47:5b:23:
         aa:ce:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:05 2025 by rpki-client