Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa
File:                     34352e3233322e35362e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          2i5MBDWQn6Id7IJv/p35Eqoj4KKluC/BCdihEN7wNIs=
Subject key identifier:   12:9C:6C:1A:7C:57:B0:C2:1B:4C:3C:E5:82:15:BD:3E:02:B3:D0:3C
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       399525D073890F3638453A345F4FF375F4799B04
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:27 +0000
ROA not before:           Tue 09 Sep 2025 12:44:27 +0000
ROA not after:            Tue 08 Sep 2026 12:49:27 +0000
asID:                     273683
IP address blocks:        45.232.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:95:25:d0:73:89:0f:36:38:45:3a:34:5f:4f:f3:75:f4:79:9b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:27 2025 GMT
            Not After : Sep  8 12:49:27 2026 GMT
        Subject: CN=129C6C1A7C57B0C21B4C3CE58215BD3E02B3D03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:5a:58:61:9f:b4:3e:6b:7c:c6:0a:2b:93:
                    0c:fa:40:a3:02:dc:94:67:01:d1:2e:48:17:34:2c:
                    66:05:d0:df:05:30:7c:a5:a8:66:00:72:08:cd:b2:
                    6f:cc:65:71:1a:20:47:0d:61:7b:8e:48:1f:1d:f7:
                    da:37:94:8d:62:f2:5e:19:de:bc:5a:be:af:27:8c:
                    b4:e0:73:7d:03:cb:2c:6e:61:ef:59:e5:69:bc:c5:
                    aa:24:b8:ae:f5:b1:7c:36:0e:46:29:37:95:01:aa:
                    d1:d6:f5:5e:05:4d:cd:a5:a6:51:c9:67:87:35:f5:
                    bc:c8:e9:4b:91:7f:94:e9:ad:e3:8e:3e:63:36:82:
                    d1:80:6e:0d:0a:69:a7:c3:04:8d:e0:a2:8f:7b:e5:
                    f7:73:97:7c:80:cf:95:a6:12:bf:d1:5f:db:dc:1a:
                    59:45:6f:05:d9:55:6c:08:8f:a3:ba:69:c0:e5:14:
                    75:35:54:99:20:10:98:64:6d:62:8f:8d:db:97:a5:
                    a7:5a:68:df:2e:7b:16:b3:b0:29:91:e9:9c:ad:f9:
                    e6:a4:08:3b:df:6a:8a:2c:52:16:7c:a8:13:a9:5d:
                    50:ec:42:25:df:fb:47:b3:cc:ab:02:f9:36:84:04:
                    3a:2f:44:83:4e:53:ec:77:20:f2:2a:2e:0a:08:97:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:6C:1A:7C:57:B0:C2:1B:4C:3C:E5:82:15:BD:3E:02:B3:D0:3C
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:d2:60:08:af:18:7a:29:bd:8e:65:9a:03:d6:ff:4b:ea:
         25:93:52:f8:1d:7a:3a:ac:57:22:44:01:9a:31:bd:92:44:69:
         6f:11:11:29:43:58:ce:72:fd:a3:67:e8:f8:eb:9e:48:b9:01:
         aa:03:bb:85:33:21:8d:d0:f1:44:a4:41:71:0e:3f:ef:af:92:
         61:8c:fc:06:0d:43:ca:84:ee:84:7c:58:31:14:44:5a:06:46:
         ca:e1:e0:79:bb:a5:4c:5b:24:5c:01:f2:2a:02:cf:d3:12:8c:
         7f:73:a1:7b:ee:fe:95:c9:01:e9:d9:7a:49:cd:2f:c1:d2:27:
         03:97:d5:d6:60:ee:94:22:e6:44:16:25:da:df:8a:bd:f8:2e:
         0a:57:b1:13:df:f9:0b:14:ef:17:60:91:da:08:80:c1:7b:6b:
         9e:1c:57:ba:b6:6b:d6:73:6a:56:70:44:41:27:f3:2c:52:ef:
         d5:39:af:61:4c:63:79:aa:f4:83:46:11:a7:e0:3a:b9:12:ba:
         14:13:3b:91:de:9f:16:cf:46:f2:a2:8a:f5:bd:42:d6:de:46:
         28:d8:c6:38:08:4d:18:8d:8d:6d:4e:d1:c1:8e:73:7d:23:6f:
         d4:93:b0:c1:f5:71:cd:2e:80:37:64:6f:3f:8e:10:6c:3f:cb:
         65:f8:c4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:31:21 2025 by rpki-client