Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32322d3232203d3e20323733363833.roa
File:                     34352e3233322e35362e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          JA3ZFrmMAPBEJIsRa6aNmsqtp7FCipROo6IqncUKnPk=
Subject key identifier:   76:8D:62:4F:E6:57:DA:E6:8A:95:4F:CF:F3:17:FA:03:0F:D6:28:FC
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7E988480B02086BF392766F63E0391F914F4C7A6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:38 +0000
ROA not before:           Tue 09 Sep 2025 12:44:38 +0000
ROA not after:            Tue 08 Sep 2026 12:49:38 +0000
asID:                     273683
IP address blocks:        45.232.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:98:84:80:b0:20:86:bf:39:27:66:f6:3e:03:91:f9:14:f4:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:38 2025 GMT
            Not After : Sep  8 12:49:38 2026 GMT
        Subject: CN=768D624FE657DAE68A954FCFF317FA030FD628FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:4a:72:6b:7d:df:0d:4c:75:85:0a:84:de:
                    d5:e2:8c:1d:c8:d6:7b:18:73:26:e9:83:ad:45:0d:
                    e3:16:c2:b3:d4:d5:1a:95:dd:d6:c7:d5:5c:0f:44:
                    36:ea:68:15:55:03:6c:a8:ee:49:ef:d6:7c:ec:95:
                    c2:08:65:80:25:5f:c4:86:9b:8f:79:bd:d7:90:02:
                    f3:e6:06:e1:44:ca:12:b0:ad:b3:fd:b4:70:d4:e1:
                    10:fa:44:95:0f:88:2e:0c:dc:65:34:e2:5a:7d:66:
                    6b:e5:5a:dd:dc:1e:92:6a:b0:ab:38:63:fe:cf:39:
                    cf:c5:f1:79:bb:16:fb:10:ac:bf:9d:e9:3f:31:6f:
                    be:20:42:00:1c:4e:7e:86:03:03:4f:1c:13:3d:22:
                    56:c7:d3:5c:0c:a8:4f:fc:12:3e:be:4a:6d:f7:bb:
                    26:a7:c8:ad:3e:5c:0b:f6:d3:68:84:2e:90:42:8d:
                    65:d1:e1:54:09:54:99:84:d2:da:17:07:80:5e:0d:
                    f1:45:57:31:df:0a:96:12:b3:e4:8a:52:67:d6:1a:
                    1e:2f:a4:a8:36:9a:59:72:33:97:6b:04:f3:cc:35:
                    6e:81:ab:6e:e3:58:09:67:f9:1a:c3:21:15:2d:71:
                    ea:75:d8:11:75:95:b0:12:e1:95:a7:22:94:23:d7:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:62:4F:E6:57:DA:E6:8A:95:4F:CF:F3:17:FA:03:0F:D6:28:FC
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:92:e5:08:22:6e:73:fe:0f:63:2e:75:f8:9b:1c:13:4c:
         8d:f5:7a:b9:f6:1d:5f:86:93:32:8e:19:bd:23:09:2a:f6:37:
         f8:8d:48:fb:01:cf:be:67:24:6e:e4:62:95:f7:25:68:7e:a0:
         1d:36:93:b9:e9:40:8b:8e:eb:30:72:94:df:8d:f5:a7:c6:53:
         98:ce:c9:e6:99:6b:46:b9:04:62:97:5c:ad:12:e5:ff:0b:29:
         12:d2:62:88:78:d4:e7:aa:5c:1e:d2:28:72:1a:ba:01:2b:3f:
         38:a7:55:7f:23:1f:28:4e:ef:34:a9:31:61:60:c1:09:b7:ae:
         dc:6f:ba:72:eb:32:10:17:12:d2:bb:eb:74:61:44:a6:87:ee:
         8a:8c:fb:62:94:96:4d:57:a6:d1:cc:ae:80:25:5a:83:83:e1:
         1f:a7:ae:dd:05:37:79:96:bf:d9:a3:53:18:2d:b5:b8:f8:1e:
         d4:10:ce:af:71:af:f1:1e:e6:65:05:e9:bb:6a:05:e5:db:12:
         e2:5c:0b:e3:a8:de:7f:8a:37:36:0d:b7:81:a6:9b:3a:f7:5c:
         aa:f8:bc:c9:4b:96:9f:f1:fc:f2:24:b6:d1:51:ed:48:ff:37:
         26:98:bb:79:62:a2:9d:16:6a:2d:33:09:c8:81:21:2f:4d:a3:
         e2:34:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:01:09 2025 by rpki-client