Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a313830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          +9UT0dTxpoxJ05+UbP8t3RX6qBABY1F/RwpctE2J+x8=
Subject key identifier:   9E:43:BF:65:87:30:8A:96:2F:11:71:27:35:26:DB:BE:C5:64:59:EA
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6B992D5163DFDD5547E005FEF5D96D6EC26116
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:54 +0000
ROA not before:           Tue 09 Sep 2025 12:44:54 +0000
ROA not after:            Tue 08 Sep 2026 12:49:54 +0000
asID:                     273683
IP address blocks:        2804:8aa4:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:99:2d:51:63:df:dd:55:47:e0:05:fe:f5:d9:6d:6e:c2:61:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:54 2025 GMT
            Not After : Sep  8 12:49:54 2026 GMT
        Subject: CN=9E43BF6587308A962F1171273526DBBEC56459EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:d5:88:66:42:5a:05:62:01:1a:de:f4:f2:
                    6b:4a:8d:a6:9b:f2:f8:b9:10:ad:54:a6:f7:84:e3:
                    da:61:8f:db:08:96:2b:b6:1a:b3:26:a1:7b:44:43:
                    d9:0b:77:4a:3b:c6:a2:54:03:c5:61:17:52:16:a1:
                    bc:91:28:c4:69:c6:2c:c5:32:54:06:d8:52:59:79:
                    68:ea:4a:47:78:36:5f:e2:e9:fd:f2:0d:c5:6c:17:
                    af:04:26:b9:6a:bb:a6:39:48:dd:bc:04:72:5a:cb:
                    4b:17:84:c7:98:41:3d:a2:30:a1:2f:6a:13:83:06:
                    90:81:75:90:c9:e4:e7:7e:8f:6b:8c:fc:98:7d:57:
                    c5:a3:a5:49:ef:1f:1b:37:c9:6c:12:08:db:0b:63:
                    d5:e6:4f:bb:ae:7c:ef:de:05:49:0f:ba:1b:c0:9a:
                    56:78:41:63:6b:af:6d:9c:ba:dc:f8:b8:ab:d4:62:
                    dd:a9:03:66:26:b6:53:53:09:65:4c:b7:6e:53:a5:
                    91:08:5c:78:ae:6e:cc:ca:5b:a3:6c:b7:34:c8:c3:
                    c8:10:a6:dc:b8:25:78:f6:1b:1d:17:68:d9:41:bd:
                    1d:9f:77:77:93:9b:20:d2:a4:4a:db:a6:cb:b5:b2:
                    e5:b6:33:ae:09:69:f6:da:aa:44:ca:0f:ab:ef:a2:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:BF:65:87:30:8A:96:2F:11:71:27:35:26:DB:BE:C5:64:59:EA
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:96:65:ba:ed:c7:a8:02:ce:73:65:38:07:0c:ce:ad:75:
         e2:b4:46:75:6a:6f:73:f8:bb:7b:25:8b:a0:69:b9:fa:b0:d7:
         f3:08:2b:ba:37:9f:b4:6a:2e:a5:d1:44:81:d5:00:64:f6:5d:
         5e:1a:f5:7a:f8:b6:e9:e1:71:d9:15:6f:1e:0d:b6:58:9a:d6:
         22:a0:76:5d:7f:3c:f8:67:6a:8d:df:e2:44:e9:2f:85:3b:d9:
         96:aa:36:81:d1:b5:69:7e:28:47:d1:a6:c6:c9:91:ea:2c:3f:
         c0:93:7a:41:62:a7:c7:d2:13:fa:36:1a:42:33:07:32:c5:b1:
         15:a3:32:69:dc:c9:ae:f2:4b:77:2b:04:90:08:3e:44:e3:25:
         27:5e:bd:6a:ec:44:ab:a5:f3:26:b3:af:a6:f2:d9:9c:4a:5c:
         11:b3:a9:66:af:20:4e:4d:40:09:cd:90:72:e3:7c:46:96:73:
         05:c5:df:80:d1:e1:1b:2d:83:50:91:18:6b:28:14:8e:bf:44:
         6f:66:54:b1:5c:9a:bd:48:a9:4c:1c:4c:df:11:ee:c0:6d:30:
         10:b6:6f:7f:dd:4d:d0:b9:c7:d4:c0:fa:c1:ee:cc:54:25:e4:
         3b:8c:41:fe:01:54:e8:96:e1:89:2f:85:b7:14:02:93:47:08:
         d2:29:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:32:30 2025 by rpki-client