Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32322d3232203d3e20323733363833.roa
File:                     34352e3233352e35362e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          EMe1va8tr8/4yMVQh5beQyBpK2RD0RUuYIA9Kf70yVE=
Subject key identifier:   C3:6B:EB:D6:BE:DE:A9:3C:51:FC:EB:D5:54:2F:AF:21:7B:4A:D3:B5
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       741002E1BCDEC828EBD7AAF6CB218DF56874451A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:10 +0000
ROA not before:           Tue 09 Sep 2025 12:44:10 +0000
ROA not after:            Tue 08 Sep 2026 12:49:10 +0000
asID:                     273683
IP address blocks:        45.235.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:02:e1:bc:de:c8:28:eb:d7:aa:f6:cb:21:8d:f5:68:74:45:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:10 2025 GMT
            Not After : Sep  8 12:49:10 2026 GMT
        Subject: CN=C36BEBD6BEDEA93C51FCEBD5542FAF217B4AD3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:2f:10:54:6b:ca:11:9d:b8:22:56:43:71:
                    c2:10:ae:a3:fe:81:68:6f:a7:56:35:99:25:50:0d:
                    99:a2:4c:df:30:b1:d3:97:f7:8c:40:a3:72:d1:6a:
                    71:d7:32:97:05:83:18:cf:63:73:1a:d7:0b:14:44:
                    e8:4b:de:60:f4:40:70:48:56:89:d2:09:1f:d1:d8:
                    c4:7b:fa:b1:26:35:f7:ee:6f:7f:1a:71:9b:1f:9e:
                    05:fa:67:2c:40:8c:a6:c3:bf:fb:41:02:00:5d:b3:
                    40:78:a0:ce:cf:38:a2:38:cf:5d:ee:cc:18:4d:68:
                    8a:25:7b:53:97:87:09:37:60:b4:43:14:87:e8:45:
                    a6:06:60:79:e8:e8:d7:97:52:ac:8a:72:39:24:57:
                    ae:d9:59:9e:e9:5c:1c:0e:52:ad:dc:55:10:19:82:
                    b3:8d:b0:b6:1a:b1:79:f4:bd:3d:f7:3a:c4:aa:2a:
                    f2:d1:76:75:52:ef:e8:30:52:da:2c:d2:8d:05:91:
                    b3:5e:68:23:93:5d:63:0e:1a:af:63:8e:4e:c9:55:
                    ab:a0:60:d7:40:db:ab:31:02:a6:a2:51:92:4e:1a:
                    f7:ab:17:82:85:69:bd:12:6a:60:74:ad:0a:e4:fa:
                    ce:ae:89:d5:33:e6:42:e2:b2:00:2b:92:97:f8:89:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:EB:D6:BE:DE:A9:3C:51:FC:EB:D5:54:2F:AF:21:7B:4A:D3:B5
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:c0:3c:40:d8:07:f3:55:57:79:6a:8f:ab:ed:e9:ed:52:
         d8:2d:fe:ac:f4:01:f9:96:d5:8b:a3:a2:5e:68:2d:86:43:a8:
         46:89:07:5c:6d:e7:4f:3a:0f:74:1b:8b:64:5f:7b:59:ec:16:
         72:98:57:02:f8:20:46:44:42:6b:25:8a:43:79:3d:27:33:0b:
         99:9f:95:e0:02:f0:95:24:3c:f3:ea:0a:1e:d8:0b:da:c9:d3:
         32:9d:57:ee:ae:08:62:a2:ee:82:58:5c:ac:ef:cb:52:37:73:
         a9:23:5e:58:9b:16:22:c5:1e:b0:e4:ae:10:fb:14:19:d9:a8:
         0c:8a:03:c2:cb:0d:76:da:d7:77:ef:70:01:03:f9:ea:b4:50:
         64:58:ff:b8:7d:1a:6d:cb:c0:72:0c:95:53:9d:e6:f8:78:74:
         ad:59:73:f3:2f:94:39:1b:2b:5a:cc:91:a5:35:48:e3:a7:32:
         6d:ea:15:c0:87:27:56:15:e9:25:1d:b3:9c:21:b2:2d:fa:47:
         b8:e1:e5:23:6c:33:84:a9:84:89:73:98:7c:19:2f:ac:06:87:
         f1:e6:f5:33:44:de:df:c6:b0:2b:85:66:8e:28:83:5b:3b:4e:
         04:69:3b:79:57:ed:11:01:8f:20:30:2e:b2:58:19:68:65:9b:
         1a:0e:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:32:13 2025 by rpki-client