Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a343030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          5kUyGsBAlDU7L8xukuF3pBMWXb75VP1TKL35E9LTnYs=
Subject key identifier:   1A:F9:05:74:4F:9D:E8:62:5D:F0:8A:1C:C6:93:E7:F9:55:CB:73:19
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       37B365E370DBD1AA1963F6316E86A22D571753A8
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:53 +0000
ROA not before:           Tue 09 Sep 2025 12:44:53 +0000
ROA not after:            Tue 08 Sep 2026 12:49:53 +0000
asID:                     273683
IP address blocks:        2804:8aa4:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b3:65:e3:70:db:d1:aa:19:63:f6:31:6e:86:a2:2d:57:17:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:53 2025 GMT
            Not After : Sep  8 12:49:53 2026 GMT
        Subject: CN=1AF905744F9DE8625DF08A1CC693E7F955CB7319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:75:c2:74:b1:77:2f:3a:47:fa:37:db:76:
                    c3:f3:e0:2d:16:9f:38:db:51:ee:1c:46:74:80:d8:
                    09:06:4b:50:9b:42:f7:da:98:51:f9:34:3e:72:61:
                    28:50:09:7d:25:07:80:34:f8:b0:7a:c5:f6:42:86:
                    8f:08:df:4c:24:0c:e8:b4:8b:05:bd:e2:b8:03:4e:
                    ba:20:95:d4:fd:aa:9a:3b:45:3e:ff:ad:47:02:8e:
                    84:0d:27:65:9a:7b:38:7f:b2:1c:19:9b:e1:39:7b:
                    26:e7:52:bf:4a:2d:01:e3:e7:a1:a9:fa:7f:f5:63:
                    77:e0:64:ab:92:19:22:49:fd:54:dd:ec:0b:54:07:
                    78:3f:4c:09:7d:18:c8:6e:82:b3:d9:8a:fb:07:88:
                    09:bb:5f:48:6a:8c:04:e3:72:a7:8d:0e:20:1e:6b:
                    78:ab:02:5c:71:f8:a5:2e:ed:70:45:f9:19:0e:44:
                    e7:e5:c1:48:f4:e8:b3:77:7d:2e:07:7d:70:3c:dd:
                    dd:fb:7a:a6:cb:cc:f4:61:39:0b:7a:1d:88:3a:67:
                    85:44:5e:81:8b:e4:43:5b:d2:f3:43:af:54:18:99:
                    d6:e7:e4:e0:04:b7:78:b0:0a:2a:00:3d:e1:83:11:
                    0b:26:02:45:aa:c1:39:f8:a7:f8:3f:00:26:03:c1:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F9:05:74:4F:9D:E8:62:5D:F0:8A:1C:C6:93:E7:F9:55:CB:73:19
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a343030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:54:2f:3f:6b:c3:c0:d1:7e:69:a0:39:a0:1e:80:ba:6e:
         bd:ba:7d:bc:e1:93:b9:54:86:2e:8a:cf:c2:00:c7:83:29:08:
         e9:3e:c6:53:e4:a4:74:c5:36:68:7a:6a:34:aa:65:d7:31:e5:
         0f:ec:eb:d4:31:3f:fe:d5:bb:6f:6a:5d:58:74:6a:c0:36:ea:
         07:25:f3:c6:42:bd:a0:9d:43:a9:ea:c0:97:0b:29:df:b1:bd:
         36:46:8a:65:2a:73:d3:e9:7c:5d:1a:28:97:30:fd:88:6a:fe:
         d2:e7:1e:fc:43:61:8d:27:b3:90:51:31:49:a1:26:7b:2f:e3:
         fa:2a:44:21:1c:1f:b7:9a:d7:84:31:ef:2b:21:80:9f:cb:65:
         65:62:cf:69:46:4a:cb:8d:25:84:8e:85:6d:06:7d:ab:2c:f9:
         66:1a:6d:cc:41:3c:a4:c9:51:49:60:4e:02:fe:7d:49:10:11:
         fc:76:83:d4:ac:78:e7:0b:2e:b9:01:8b:9d:64:de:5f:05:01:
         cf:3f:65:70:22:35:d9:33:59:05:13:21:e5:dc:21:0e:83:99:
         e9:d4:e6:5a:3a:91:a5:a7:e4:c7:d1:f7:26:40:70:2a:75:a6:
         bb:5d:e5:06:cd:4d:b7:0f:ad:7c:66:ec:b7:97:3c:64:a1:ba:
         9c:fd:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:54 2025 by rpki-client