Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35392e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233322e35392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          97v9TWSGzQmLE2S6tMdcpWdhRHIuofDWP3Ln6OU5eDA=
Subject key identifier:   82:9A:01:A9:32:D4:3F:F5:EE:DF:7F:F1:08:6B:B8:AC:B3:78:29:7E
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       49AA9990C89CE94D1F8009B37B0899B2C72E45F5
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35392e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:59 +0000
ROA not before:           Tue 09 Sep 2025 12:44:59 +0000
ROA not after:            Tue 08 Sep 2026 12:49:59 +0000
asID:                     273683
IP address blocks:        45.232.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:99:90:c8:9c:e9:4d:1f:80:09:b3:7b:08:99:b2:c7:2e:45:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:59 2025 GMT
            Not After : Sep  8 12:49:59 2026 GMT
        Subject: CN=829A01A932D43FF5EEDF7FF1086BB8ACB378297E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:60:39:8c:4e:8c:b1:4a:9d:95:90:4c:2a:
                    9b:6d:fe:54:f4:7f:5b:e2:22:38:e3:54:c3:95:0d:
                    05:83:24:5c:fd:d7:16:2b:7d:d9:87:b0:6e:cc:3e:
                    ef:4d:89:67:1e:3b:80:5f:4b:fc:b7:f0:93:35:7e:
                    85:aa:e1:63:8c:de:34:e0:51:e8:36:38:bf:03:c8:
                    be:0b:de:71:ff:c7:b1:7f:19:6f:89:29:e2:e5:a4:
                    80:80:36:be:51:b8:01:31:90:a2:8b:23:0b:1c:b2:
                    28:81:ab:dc:9c:7c:6b:4d:9a:03:5c:6c:3c:31:8e:
                    3a:f7:8d:51:47:2d:2a:e4:52:a9:61:93:8f:69:96:
                    a1:94:96:37:12:ee:da:29:62:9d:8f:eb:b0:cc:b6:
                    b5:4e:5c:b9:e5:9e:39:17:6b:fc:73:6a:6b:a2:90:
                    6a:b9:ee:70:52:e4:8d:02:25:34:8f:00:45:a2:e3:
                    8c:e2:ef:58:bd:34:35:a3:2a:a7:3a:8a:8f:f6:0e:
                    6e:40:8d:4b:5e:d7:9d:29:bf:07:68:5b:55:44:1e:
                    56:49:a0:09:ed:8e:d2:e5:d7:21:76:4c:71:67:de:
                    48:ea:16:26:85:e2:04:5e:16:d7:2c:0b:35:41:be:
                    b8:6f:32:68:e2:a1:e2:8c:c2:4e:74:25:00:08:d8:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:01:A9:32:D4:3F:F5:EE:DF:7F:F1:08:6B:B8:AC:B3:78:29:7E
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:18:9a:1b:3b:bf:9d:7e:41:55:32:3a:f5:4f:f2:65:18:5b:
         6e:25:3c:5f:55:d9:ee:de:ad:f3:58:9a:41:dc:20:9b:c1:20:
         6a:9d:61:8f:72:d1:54:74:2d:20:0d:c5:f8:5c:35:67:f1:bd:
         8d:c8:a9:9e:50:d0:ea:7f:ce:b3:15:15:b5:b0:12:fc:3a:7e:
         a5:6d:83:2c:19:5e:d5:97:f1:28:8e:bf:7a:7c:65:34:fd:72:
         cc:6b:3c:0f:61:c7:18:d0:02:d0:85:33:d3:5d:6e:a4:d2:b1:
         cf:f4:51:a2:f2:a7:0a:48:2a:66:bf:1b:c3:31:c6:ed:1d:64:
         32:d8:04:5b:94:b4:fa:74:5a:e1:8f:20:46:dc:9c:8d:25:36:
         1e:32:ea:12:04:77:f1:62:7e:b2:0f:b8:41:fe:3c:80:3f:41:
         13:94:44:33:67:2c:30:c5:e6:a7:a8:b0:07:8e:26:c1:1b:a0:
         c0:f9:63:98:86:97:ca:7b:63:b9:c1:30:01:69:c4:55:45:11:
         33:7d:84:cc:9b:ea:c4:48:91:d1:08:ca:21:fe:64:81:05:8f:
         80:71:bc:b3:f5:5e:50:50:6f:64:09:8d:1f:5e:f7:4b:7c:e6:
         17:b0:fa:f9:54:fd:4a:59:d0:bc:b4:9b:48:da:02:43:7b:c3:
         9f:bf:7e:d6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSaqZkMic6U0fgAmzewiZsscuRfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0NTlaFw0yNjA5MDgxMjQ5NTlaMDMxMTAvBgNV
BAMTKDgyOUEwMUE5MzJENDNGRjVFRURGN0ZGMTA4NkJCOEFDQjM3ODI5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCev2A5jE6MsUqdlZBMKptt/lT0
f1viIjjjVMOVDQWDJFz91xYrfdmHsG7MPu9NiWceO4BfS/y38JM1foWq4WOM3jTg
Ueg2OL8DyL4L3nH/x7F/GW+JKeLlpICANr5RuAExkKKLIwscsiiBq9ycfGtNmgNc
bDwxjjr3jVFHLSrkUqlhk49plqGUljcS7topYp2P67DMtrVOXLnlnjkXa/xzamui
kGq57nBS5I0CJTSPAEWi44zi71i9NDWjKqc6io/2Dm5AjUte150pvwdoW1VEHlZJ
oAntjtLl1yF2THFn3kjqFiaF4gReFtcsCzVBvrhvMmjioeKMwk50JQAI2L/vAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUgpoBqTLUP/Xu33/xCGu4rLN4KX4wHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzMyMmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALeg7MA0GCSqGSIb3DQEBCwUAA4IBAQBnGJobO7+dfkFV
Mjr1T/JlGFtuJTxfVdnu3q3zWJpB3CCbwSBqnWGPctFUdC0gDcX4XDVn8b2NyKme
UNDqf86zFRW1sBL8On6lbYMsGV7Vl/Eojr96fGU0/XLMazwPYccY0ALQhTPTXW6k
0rHP9FGi8qcKSCpmvxvDMcbtHWQy2ARblLT6dFrhjyBG3JyNJTYeMuoSBHfxYn6y
D7hB/jyAP0ETlEQzZywwxeanqLAHjibBG6DA+WOYhpfKe2O5wTABacRVRREzfYTM
m+rESJHRCMoh/mSBBY+Acbyz9V5QUG9kCY0fXvdLfOYXsPr5VP1KWdC8tJtI2gJD
e8Ofv37W
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:34 2025 by rpki-client