Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32332d3233203d3e20323733363833.roa
File:                     34352e3233322e35382e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          oxYm0JOMCU5SxMursEv8QKq1OAoA6Giu8XYXf3Owxgw=
Subject key identifier:   E6:85:96:25:BC:97:76:35:BB:52:2B:09:08:1C:B2:42:7B:0C:CA:93
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       77AA11594DAE8F75C5EC633D0888764354FB445C
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:09 +0000
ROA not before:           Tue 09 Sep 2025 12:44:09 +0000
ROA not after:            Tue 08 Sep 2026 12:49:09 +0000
asID:                     273683
IP address blocks:        45.232.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:aa:11:59:4d:ae:8f:75:c5:ec:63:3d:08:88:76:43:54:fb:44:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:09 2025 GMT
            Not After : Sep  8 12:49:09 2026 GMT
        Subject: CN=E6859625BC977635BB522B09081CB2427B0CCA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:04:9e:10:69:38:25:03:83:93:bd:bc:a4:
                    22:e1:95:6f:75:a2:92:70:dc:d2:bb:bf:aa:e8:4a:
                    11:89:6a:62:25:82:1b:2e:8f:30:7b:fb:ea:27:87:
                    df:cb:5a:27:b1:76:60:1b:3b:5c:c6:48:ed:ad:5b:
                    95:76:d9:b0:5b:65:b6:87:cd:fa:4d:e9:2b:16:93:
                    3d:4f:7d:bd:4c:1f:53:f8:9c:b3:da:f2:64:6b:cf:
                    67:a5:0a:a1:b9:f4:d0:b5:ff:ae:2a:a4:cd:f4:eb:
                    53:4a:34:2e:55:1c:04:18:fb:13:c8:02:55:23:aa:
                    31:8f:ca:2f:e5:eb:01:7b:c2:28:a0:a0:48:fe:86:
                    e4:aa:95:e1:fd:09:ab:1a:fa:e5:e7:e3:1d:db:ae:
                    fd:88:63:fa:e4:df:1c:67:72:7c:3c:fb:a9:22:7c:
                    7d:4b:d6:e2:26:0b:4c:c0:63:6b:00:0c:10:e7:06:
                    1a:3e:f5:e3:6c:c6:0a:ab:d1:fd:8a:66:83:51:7d:
                    d0:cd:14:4e:fa:6b:14:5d:1d:03:cd:86:df:b9:40:
                    29:e4:3d:60:9c:f3:63:f3:c3:19:f5:6d:65:d1:7e:
                    6e:93:b3:ee:61:0f:11:18:1d:ee:ed:3c:08:3f:9a:
                    e1:3d:3c:9d:86:12:a9:82:31:35:71:45:4e:30:e3:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:96:25:BC:97:76:35:BB:52:2B:09:08:1C:B2:42:7B:0C:CA:93
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:5f:60:98:b6:ed:01:b2:40:08:22:de:c4:aa:df:e2:89:
         e1:7e:83:12:ef:f7:0b:ea:2c:e4:1d:6a:43:4b:91:31:dd:eb:
         26:3c:e6:8a:ef:a3:b3:e4:d5:5b:05:25:f3:87:cc:8f:70:61:
         17:90:82:28:f5:4d:43:e0:21:1a:98:07:4d:3b:c9:fd:e1:bd:
         b7:93:6b:df:95:d3:ea:dc:11:0f:57:22:ca:5e:af:31:67:1f:
         1d:3b:98:e8:9a:04:d3:e6:dd:28:8d:05:61:66:64:f9:ae:71:
         f3:cf:60:9e:c8:7d:6a:3f:c9:df:81:11:74:89:c1:0e:2a:d2:
         b1:1e:3a:ff:11:37:01:03:9d:b6:2d:eb:12:3e:bc:f9:03:e9:
         c2:57:69:72:09:12:83:99:a2:2e:f8:b4:3b:96:95:eb:dc:07:
         5c:c0:43:9d:95:c0:2a:a8:43:66:c3:05:e0:24:a8:5f:77:ae:
         e5:7c:28:e0:07:5b:dc:e0:49:4d:d5:b2:aa:67:e4:b7:4b:b2:
         05:8f:6c:d8:db:ad:76:26:1d:56:86:3a:63:55:43:99:76:39:
         9a:28:f0:aa:4d:1a:9c:cc:b5:a6:39:01:86:62:d3:79:04:3a:
         e8:20:ad:33:84:17:b1:ac:c4:7f:a7:30:39:1c:66:da:9f:62:
         7b:3a:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:04:33 2025 by rpki-client