Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          R9YQNqYmp/JLc+z1gZLaKCvmhGd8sCNXrctXqg3Dubg=
Subject key identifier:   C8:CD:F1:D0:49:26:2F:E9:B0:48:C5:E2:C2:8C:4A:D4:44:10:3D:31
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       397C33F974470B1E0A5C1B68C5F55ADD78C2DD02
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:55 +0000
ROA not before:           Tue 09 Sep 2025 12:44:55 +0000
ROA not after:            Tue 08 Sep 2026 12:49:55 +0000
asID:                     273683
IP address blocks:        2804:8aa4:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7c:33:f9:74:47:0b:1e:0a:5c:1b:68:c5:f5:5a:dd:78:c2:dd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:55 2025 GMT
            Not After : Sep  8 12:49:55 2026 GMT
        Subject: CN=C8CDF1D049262FE9B048C5E2C28C4AD444103D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:fb:b6:ff:93:5b:58:5b:63:07:15:6d:05:
                    79:48:0a:56:96:63:c5:42:59:9b:d4:fd:c6:d8:79:
                    eb:e0:a6:28:87:b2:4a:f6:e6:5d:f5:31:cc:72:23:
                    10:56:24:9c:d4:d4:c0:99:53:5e:3d:44:d5:35:dc:
                    4e:8f:e6:af:16:2d:9b:84:89:c1:31:ba:7f:a3:09:
                    66:13:86:c9:b0:ba:22:83:01:52:99:4b:b9:7a:e5:
                    5e:c6:01:6a:0f:86:ef:c1:45:88:09:9f:be:84:98:
                    41:8f:e2:f9:ac:86:38:16:30:46:ce:a9:b0:2a:79:
                    2c:f4:67:c0:ea:f9:a2:e7:28:de:35:d7:e6:c1:a2:
                    8a:a6:b5:dd:91:8e:59:29:4c:95:5e:a4:49:74:19:
                    14:04:4b:da:81:1a:ed:39:c8:e2:82:1b:33:8e:95:
                    d6:f1:a6:32:81:5f:3a:1f:1a:2d:27:49:13:05:d4:
                    5a:80:50:ed:04:4c:f1:ef:1a:26:c5:05:d4:e2:32:
                    95:c4:3c:ed:9f:2c:d8:88:6d:da:00:02:8b:cc:27:
                    be:2f:e1:75:8a:19:e0:ea:7b:db:a7:01:00:42:4c:
                    a0:02:ab:a2:a1:c1:b0:ff:e8:5a:e4:30:82:06:cf:
                    6f:ea:2d:4d:0d:8b:2e:76:e6:0b:3f:58:77:30:60:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:F1:D0:49:26:2F:E9:B0:48:C5:E2:C2:8C:4A:D4:44:10:3D:31
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         26:22:bf:eb:99:12:92:4f:cb:68:85:a4:21:0e:fd:68:e4:19:
         55:2d:5f:f2:30:0e:62:3c:00:a8:0b:80:b6:38:f9:d3:5f:85:
         9d:b8:05:db:de:10:30:27:ff:32:be:af:0b:a1:b9:21:cc:f1:
         01:93:68:73:25:f4:1f:7b:b3:47:37:6c:96:b8:fd:60:70:3c:
         e7:94:01:29:f9:81:c2:39:7b:88:bf:c1:ea:d4:ef:08:97:f4:
         ec:de:a5:f0:0e:96:b7:5b:5b:f4:5d:9a:2a:40:23:12:12:cc:
         fb:b3:ad:08:30:08:40:54:56:e2:b9:e4:be:27:2b:28:f2:70:
         0a:79:61:d0:e1:de:59:74:60:1e:bc:91:0a:1a:99:89:61:57:
         fa:92:d0:27:06:6e:11:f1:2b:80:e5:65:fc:e2:51:e3:36:db:
         14:cb:c9:f5:f7:fe:d7:99:b4:55:92:10:e2:ce:b2:98:18:f1:
         20:b1:a4:a8:a9:31:3a:2f:46:b5:d7:cd:55:b5:49:56:61:2c:
         a0:12:a8:86:ca:d1:ef:26:b4:7c:38:92:df:18:22:f0:9d:d7:
         2a:8f:2e:e3:85:3b:dc:07:5c:51:8f:31:57:58:03:c0:87:a7:
         bd:a7:16:73:e0:c0:c0:62:8f:d2:65:a5:96:74:57:57:4f:29:
         b6:cd:78:1a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUOXwz+XRHCx4KXBtoxfVa3XjC3QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0NTVaFw0yNjA5MDgxMjQ5NTVaMDMxMTAvBgNV
BAMTKEM4Q0RGMUQwNDkyNjJGRTlCMDQ4QzVFMkMyOEM0QUQ0NDQxMDNEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlfu2/5NbWFtjBxVtBXlIClaW
Y8VCWZvU/cbYeevgpiiHskr25l31McxyIxBWJJzU1MCZU149RNU13E6P5q8WLZuE
icExun+jCWYThsmwuiKDAVKZS7l65V7GAWoPhu/BRYgJn76EmEGP4vmshjgWMEbO
qbAqeSz0Z8Dq+aLnKN411+bBooqmtd2RjlkpTJVepEl0GRQES9qBGu05yOKCGzOO
ldbxpjKBXzofGi0nSRMF1FqAUO0ETPHvGibFBdTiMpXEPO2fLNiIbdoAAovMJ74v
4XWKGeDqe9unAQBCTKACq6KhwbD/6FrkMIIGz2/qLU0Niy525gs/WHcwYDI7AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUyM3x0EkmL+mwSMXiwoxK1EQQPTEwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzIz
ODMwMzQzYTM4NjE2MTM0M2EzMzMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNkM2Uy
MDMyMzczMzM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEiqQwMA0GCSqGSIb3DQEBCwUAA4IB
AQAmIr/rmRKST8tohaQhDv1o5BlVLV/yMA5iPACoC4C2OPnTX4WduAXb3hAwJ/8y
vq8LobkhzPEBk2hzJfQfe7NHN2yWuP1gcDznlAEp+YHCOXuIv8Hq1O8Il/Ts3qXw
Dpa3W1v0XZoqQCMSEsz7s60IMAhAVFbiueS+Jyso8nAKeWHQ4d5ZdGAevJEKGpmJ
YVf6ktAnBm4R8SuA5WX84lHjNtsUy8n19/7XmbRVkhDizrKYGPEgsaSoqTE6L0a1
181VtUlWYSygEqiGytHvJrR8OJLfGCLwndcqjy7jhTvcB1xRjzFXWAPAh6e9pxZz
4MDAYo/SZaWWdFdXTym2zXga
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:01:04 2025 by rpki-client