Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          AnnPgKSmRaKtgWMx4//1GRBdi+1csFkZQPyurAEyNDM=
Subject key identifier:   C5:8C:A0:D6:D6:10:64:D1:1D:1A:BE:3D:4C:6D:7A:1C:EA:DC:ED:03
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       19EC717ABB68351F757431E698A95797A5B4310B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:19 +0000
ROA not before:           Tue 09 Sep 2025 12:44:19 +0000
ROA not after:            Tue 08 Sep 2026 12:49:19 +0000
asID:                     273683
IP address blocks:        45.235.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ec:71:7a:bb:68:35:1f:75:74:31:e6:98:a9:57:97:a5:b4:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:19 2025 GMT
            Not After : Sep  8 12:49:19 2026 GMT
        Subject: CN=C58CA0D6D61064D11D1ABE3D4C6D7A1CEADCED03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:88:6e:4f:a1:6c:59:11:43:3f:91:2d:ca:
                    25:b8:0d:d6:28:0b:1b:65:1a:24:6f:ac:d4:3d:91:
                    a0:58:3e:2c:8c:25:1d:6d:7c:a5:d1:b3:ff:8d:d9:
                    f8:c7:94:6e:72:cd:e4:18:c2:50:aa:36:68:68:ef:
                    c0:62:b3:a6:5f:16:c7:5b:39:fc:e3:67:41:cb:ed:
                    c2:1a:13:d6:94:14:4e:41:e9:46:25:ac:32:79:0a:
                    b3:5f:f9:b1:bc:34:ac:03:c9:2d:c2:44:ed:ba:f4:
                    ed:7f:88:eb:a6:d4:80:16:83:c4:58:5b:b9:44:a5:
                    23:2e:38:ac:8a:12:b6:ac:92:de:17:5f:d0:05:4e:
                    0e:29:b2:37:77:46:fc:f4:2a:c8:75:ef:d9:12:3b:
                    3c:49:1e:dc:1d:d6:49:26:0e:e1:54:9c:ea:53:d4:
                    7f:1d:2e:1b:62:6d:ff:e7:25:58:85:77:cb:55:86:
                    2c:3c:86:ce:7d:1f:56:64:66:2c:d5:37:41:9f:a7:
                    7a:bb:41:c4:e9:14:31:85:3e:fc:79:7f:29:cf:dd:
                    3d:64:db:48:6a:d5:b9:65:e3:2b:df:be:b0:ad:80:
                    60:77:f3:50:52:b5:63:4f:1b:56:8d:5f:54:2f:7e:
                    6f:0d:a5:5b:b1:b2:5b:91:d3:0c:2f:04:cb:ac:60:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:A0:D6:D6:10:64:D1:1D:1A:BE:3D:4C:6D:7A:1C:EA:DC:ED:03
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:17:e1:8d:e8:33:19:dc:14:a7:c6:f3:39:5e:c1:b0:e9:
         08:ce:50:96:5b:96:80:ea:05:3a:89:3c:b1:31:f1:7e:b1:f8:
         9d:db:09:5b:d4:fa:09:b4:cb:ba:0c:98:cf:a1:72:b4:66:fb:
         a9:d4:b3:61:b3:a7:d1:7d:10:5c:58:2f:ff:32:dd:f4:54:e5:
         69:be:94:61:82:ee:38:bd:3d:22:14:0d:19:01:91:fa:85:fd:
         c0:37:dd:26:43:98:e1:36:3c:6c:6f:c9:f5:86:f0:48:b2:bd:
         17:23:01:05:ae:bc:37:e0:98:44:f0:af:fd:c6:96:0a:04:56:
         2d:6c:21:a1:9a:ee:07:53:0b:3f:07:e7:f2:34:e4:e2:6d:e6:
         e8:27:bb:b2:01:71:c8:8f:99:0e:37:9e:80:11:0a:ce:f5:a8:
         a8:2f:96:36:4f:9a:dd:c4:c6:95:a7:fe:85:8c:68:7a:26:9c:
         a7:e8:a8:d3:1c:27:78:06:fc:da:2d:8b:07:ae:fa:4c:9c:a3:
         5f:e8:82:b3:1d:d1:c3:eb:31:2e:b6:59:51:72:d9:bc:7f:8b:
         24:fc:f0:20:33:ee:de:09:6c:75:65:68:07:20:e4:6f:a6:9c:
         7a:d5:5e:f2:34:ef:69:2e:47:60:79:c9:83:54:26:25:1f:9b:
         e0:e2:0a:90
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUGexxertoNR91dDHmmKlXl6W0MQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0MTlaFw0yNjA5MDgxMjQ5MTlaMDMxMTAvBgNV
BAMTKEM1OENBMEQ2RDYxMDY0RDExRDFBQkUzRDRDNkQ3QTFDRUFEQ0VEMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbf4huT6FsWRFDP5EtyiW4DdYo
CxtlGiRvrNQ9kaBYPiyMJR1tfKXRs/+N2fjHlG5yzeQYwlCqNmho78Bis6ZfFsdb
OfzjZ0HL7cIaE9aUFE5B6UYlrDJ5CrNf+bG8NKwDyS3CRO269O1/iOum1IAWg8RY
W7lEpSMuOKyKEraskt4XX9AFTg4psjd3Rvz0Ksh179kSOzxJHtwd1kkmDuFUnOpT
1H8dLhtibf/nJViFd8tVhiw8hs59H1ZkZizVN0Gfp3q7QcTpFDGFPvx5fynP3T1k
20hq1bll4yvfvrCtgGB381BStWNPG1aNX1Qvfm8NpVuxsluR0wwvBMusYFTvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUxYyg1tYQZNEdGr49TG16HOrc7QMwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzM1MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALes4MA0GCSqGSIb3DQEBCwUAA4IBAQApxhfhjegzGdwU
p8bzOV7BsOkIzlCWW5aA6gU6iTyxMfF+sfid2wlb1PoJtMu6DJjPoXK0Zvup1LNh
s6fRfRBcWC//Mt30VOVpvpRhgu44vT0iFA0ZAZH6hf3AN90mQ5jhNjxsb8n1hvBI
sr0XIwEFrrw34JhE8K/9xpYKBFYtbCGhmu4HUws/B+fyNOTibeboJ7uyAXHIj5kO
N56AEQrO9aioL5Y2T5rdxMaVp/6FjGh6Jpyn6KjTHCd4BvzaLYsHrvpMnKNf6IKz
HdHD6zEutllRctm8f4sk/PAgM+7eCWx1ZWgHIORvppx61V7yNO9pLkdgecmDVCYl
H5vg4gqQ
-----END CERTIFICATE-----
Generated at Thu Sep 18 18:00:46 2025 by rpki-client