Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          4+l2fHQEBnuCCDiC6sqDUFJApdXhsGh5cXPdiehHPes=
Subject key identifier:   5B:69:86:C2:FB:E8:1B:9F:6F:EC:0B:0C:2E:5E:0E:F8:8D:6A:85:98
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6B885C0C07673FBFADD818D00089F91ED7A894D4
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:33 +0000
ROA not before:           Tue 09 Sep 2025 12:44:33 +0000
ROA not after:            Tue 08 Sep 2026 12:49:33 +0000
asID:                     273683
IP address blocks:        2804:8aa4:3800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:88:5c:0c:07:67:3f:bf:ad:d8:18:d0:00:89:f9:1e:d7:a8:94:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:33 2025 GMT
            Not After : Sep  8 12:49:33 2026 GMT
        Subject: CN=5B6986C2FBE81B9F6FEC0B0C2E5E0EF88D6A8598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:c9:14:09:e1:e5:ab:d8:0d:cf:3e:e9:eb:
                    27:e8:ce:9d:c6:c3:77:9b:ee:0d:19:21:5a:be:38:
                    f8:f3:11:be:2c:8f:ea:01:bd:bb:b7:f0:96:48:f4:
                    3e:fc:3d:13:68:86:8c:1a:40:4a:58:75:1b:f2:55:
                    bb:8c:b7:54:7d:01:5f:32:87:f2:51:b0:b7:86:53:
                    7a:2a:b3:9d:b9:27:d2:5a:df:f0:23:4e:38:30:2d:
                    5f:46:c3:63:26:1f:9d:3c:17:60:4f:56:1a:f2:38:
                    d4:6b:f1:d5:3e:e0:e9:6f:64:19:d9:65:0e:91:1e:
                    96:27:b5:d7:d0:27:2b:9d:f9:60:21:91:91:56:e2:
                    7e:7f:ec:d6:12:26:1d:28:b3:ce:aa:e1:5c:9c:e0:
                    a4:df:ab:bc:b2:a7:69:82:fd:c1:24:8c:3f:56:b4:
                    bd:e5:64:af:52:a0:0e:5a:95:22:ce:9c:90:81:e0:
                    a5:99:f0:9f:2d:3b:89:09:f5:63:66:36:ec:a8:5a:
                    c3:98:5c:b9:5a:c9:5d:2a:97:d4:9e:65:96:d0:19:
                    5f:8a:32:03:31:12:52:81:03:8a:19:de:35:d5:c4:
                    d2:39:d2:84:4f:6d:ce:2f:f8:83:ba:c6:68:d6:f0:
                    70:9c:df:9d:ea:d4:f6:2b:8c:4d:57:3c:af:71:7e:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:86:C2:FB:E8:1B:9F:6F:EC:0B:0C:2E:5E:0E:F8:8D:6A:85:98
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:3800::/37

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:5e:43:20:28:68:f7:c3:6f:51:3a:b2:24:3d:4a:fc:65:
         bf:63:6c:d3:4b:f7:d0:0e:8e:1f:74:5f:b1:0c:37:41:b2:9c:
         14:e9:b5:ce:04:6e:58:d2:06:72:a1:89:6b:e2:ec:74:59:88:
         d3:07:25:ae:17:cf:41:5e:24:1f:ec:2f:52:e7:09:f6:4a:4e:
         28:62:90:7f:cc:f0:64:a1:5f:9e:50:80:51:18:28:7f:d1:1d:
         ec:5a:42:52:a4:0e:5b:9e:a3:a0:e8:18:cb:66:f5:99:21:33:
         11:a2:b3:36:d9:e4:3a:6e:4a:e5:90:c9:79:ab:e6:e2:62:e4:
         e6:65:80:e2:5b:8f:03:19:8b:87:b4:03:06:ab:da:d8:d9:78:
         b4:88:09:2c:9f:1a:79:ba:bb:05:3d:89:d1:25:9e:80:35:1e:
         7e:52:07:0b:bb:65:af:f5:6a:b5:2b:b0:1e:55:62:c9:71:7e:
         8d:13:fd:24:31:87:d4:46:8c:7c:e2:dd:53:61:48:82:08:db:
         65:4b:3e:f9:ce:68:c9:92:0c:61:6f:d5:4b:1d:8e:18:b8:50:
         fc:59:f1:a5:f1:d3:8d:e8:fa:98:b0:3c:88:b9:9f:66:34:f8:
         3f:68:2c:70:23:c8:2a:a7:55:4d:eb:c3:79:30:77:52:c4:55:
         be:48:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:33:23 2025 by rpki-client