Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa
File:                     34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          ArxTmzyYfcSFdp+GSVuxHB1w+3kjnQpZ7vn+GeGyUTQ=
Subject key identifier:   98:54:11:08:15:67:D4:C4:2A:4A:14:DA:AF:31:F5:18:45:1E:F1:F7
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       065F50F4A4CC2C392EE7E9C9148E5CAA08D5C05F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:01 +0000
ROA not before:           Tue 09 Sep 2025 12:45:01 +0000
ROA not after:            Tue 08 Sep 2026 12:50:01 +0000
asID:                     273683
IP address blocks:        45.233.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5f:50:f4:a4:cc:2c:39:2e:e7:e9:c9:14:8e:5c:aa:08:d5:c0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:01 2025 GMT
            Not After : Sep  8 12:50:01 2026 GMT
        Subject: CN=985411081567D4C42A4A14DAAF31F518451EF1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:03:59:70:81:81:ed:bd:05:1b:fd:09:1c:
                    96:6d:68:66:b7:64:63:f1:ab:5f:76:04:0d:0a:71:
                    5b:1e:0f:03:d3:ad:2b:2b:65:5f:89:76:e8:3c:f7:
                    6e:71:3f:dc:ee:f5:8a:3a:a9:93:cf:5c:89:33:e7:
                    63:1f:70:54:58:1c:51:68:0e:b7:5a:23:78:dd:ed:
                    55:0a:b6:22:cb:13:f1:c3:8e:34:36:46:b0:3d:11:
                    85:dc:dd:22:51:61:1c:c8:fa:31:a8:60:cb:19:15:
                    18:c3:39:95:be:6e:a5:d2:9e:7d:c7:f0:d6:0b:68:
                    4b:46:4d:8a:6c:78:3a:38:42:6b:d1:4e:33:4d:57:
                    af:4b:ed:30:2b:6e:fc:47:f2:e7:8e:37:86:b5:44:
                    9f:17:1b:a0:c1:43:f0:c9:54:4e:3e:07:0c:cc:89:
                    c0:37:50:75:87:f5:01:5f:29:ce:bb:34:d3:33:2b:
                    65:49:f0:11:0f:9d:2c:55:1e:0e:ce:44:06:49:78:
                    15:f4:d2:f1:06:97:66:8a:9f:f9:3f:83:98:11:f4:
                    53:73:0f:50:88:bc:20:05:69:98:f9:26:af:99:a6:
                    a1:6a:79:73:cb:bf:af:9e:1a:83:50:72:a8:3f:b0:
                    c3:67:96:39:a4:e2:9e:b6:11:d8:73:17:f8:d6:4a:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:54:11:08:15:67:D4:C4:2A:4A:14:DA:AF:31:F5:18:45:1E:F1:F7
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:49:3d:12:f0:95:b9:d9:93:66:f5:27:b0:c9:0e:4f:63:
         ae:cd:c9:60:dc:2e:40:9b:4e:d3:b3:4d:ed:0b:44:18:54:3c:
         d8:ae:04:21:52:db:0d:a0:ab:99:74:cb:c7:c2:d8:20:84:df:
         85:ac:57:33:7b:ec:ae:28:d0:54:05:90:0b:21:9a:75:a0:82:
         72:6b:d9:fb:0c:11:47:82:27:33:66:22:54:0b:eb:ba:97:f7:
         2c:ef:3e:d2:d7:65:e1:b8:38:d5:d4:fc:eb:23:59:07:df:49:
         19:11:5e:62:1d:f0:96:f5:cc:e9:c2:17:4c:3a:0a:9f:0c:5b:
         7a:03:b9:24:87:d3:63:32:c5:31:02:37:62:18:1b:7f:ab:fb:
         e8:f3:20:b6:4c:cc:8c:4d:cd:b5:d7:ec:77:f0:3c:55:de:bc:
         0e:9d:81:e3:fa:cc:13:1c:66:6a:d9:79:92:2b:bc:52:dd:50:
         ec:f8:6e:6a:8d:3f:bb:34:53:1a:aa:04:5f:aa:0a:9c:b5:61:
         67:b7:60:b4:ab:9d:11:ef:42:c6:41:9d:a9:7b:63:e6:0c:1d:
         94:56:9a:ba:34:d3:4f:60:17:61:24:ba:c5:76:1f:23:a5:a7:
         fd:f6:d8:68:6e:4b:12:38:03:df:c6:38:2c:93:49:5c:bf:7c:
         6e:85:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:30:48 2025 by rpki-client