Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          mWujyvbo54AP4filfl7U87A4tMUzhxATNuyn3rhhjyo=
Subject key identifier:   5C:82:17:A6:F5:FB:68:90:59:E7:62:DD:37:BA:58:41:9F:DA:94:0C
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       11CA27F7CAAB3B540248E38F817FEDC7CD562699
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:50:03 +0000
ROA not before:           Tue 09 Sep 2025 12:45:03 +0000
ROA not after:            Tue 08 Sep 2026 12:50:03 +0000
asID:                     273683
IP address blocks:        45.235.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:27:f7:ca:ab:3b:54:02:48:e3:8f:81:7f:ed:c7:cd:56:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:45:03 2025 GMT
            Not After : Sep  8 12:50:03 2026 GMT
        Subject: CN=5C8217A6F5FB689059E762DD37BA58419FDA940C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:2f:ea:f1:03:4a:37:66:68:9b:a1:38:fd:
                    0d:71:06:8a:71:92:4e:48:e6:5a:ae:72:6e:eb:83:
                    86:1d:17:5b:43:1a:6d:a9:cd:e7:85:0a:0d:f0:3d:
                    22:b2:3e:a9:41:e7:ec:26:d9:16:5e:0f:f5:1a:64:
                    98:bd:af:8c:a8:a9:5a:f5:17:1b:9f:e2:f0:1a:65:
                    82:89:80:3c:2b:3c:f8:37:78:2d:79:e7:c2:1e:e1:
                    25:68:a7:ee:56:3b:a3:0a:04:bd:a3:de:12:6d:6b:
                    e8:1e:a4:c5:80:b3:9f:6c:78:69:96:a2:f6:dd:e0:
                    79:6e:75:47:8e:43:12:3c:f3:67:bb:63:8c:d2:24:
                    f3:2c:b4:46:f5:78:5d:35:db:75:92:00:eb:2a:2d:
                    bb:88:26:99:7e:a9:53:da:55:88:8d:5f:31:3a:49:
                    da:58:0c:eb:6e:ee:66:cd:fb:05:43:fc:d9:be:35:
                    1c:24:0b:8b:75:8d:c4:c6:91:41:e7:5c:64:87:92:
                    20:1d:86:69:31:2d:0c:65:4e:e0:ae:84:ae:86:8d:
                    1e:03:0e:d8:e6:07:40:df:d0:96:21:3b:fc:a6:a8:
                    60:c7:c2:4d:38:90:b0:67:bf:55:c0:da:a1:d8:ba:
                    12:75:e1:2c:10:7a:80:f0:96:3e:18:5d:e4:29:36:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:17:A6:F5:FB:68:90:59:E7:62:DD:37:BA:58:41:9F:DA:94:0C
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:34:0c:12:ac:ad:28:df:e0:83:51:2e:5f:9d:d7:44:0f:
         dd:78:c8:40:3a:fc:b0:d3:33:66:ea:67:5d:05:78:ec:9a:c2:
         01:a5:fb:3b:01:bf:36:db:12:c5:1b:28:5f:6e:ef:43:0b:64:
         23:9e:e7:e8:54:6a:85:2d:a4:e7:2d:cb:bb:89:c3:c3:32:19:
         3b:88:dc:a1:17:6c:14:b1:78:9a:c0:35:34:a2:dd:01:70:32:
         ef:be:f2:0a:8a:b7:58:b5:28:17:d0:1f:05:e4:47:18:ae:39:
         4c:4f:69:bc:ab:ea:99:70:27:17:32:9f:27:04:14:60:34:e4:
         87:a2:f3:2c:01:91:32:59:3e:2c:4a:6c:89:da:c7:69:8c:cc:
         f8:01:34:b3:f5:71:c0:79:0b:b5:28:aa:a3:da:c5:85:42:7b:
         06:20:ab:ef:a8:ba:d8:9f:54:9f:c2:09:fe:08:29:4e:bd:99:
         37:eb:82:53:cc:f2:97:c7:9e:51:9b:ea:eb:e7:6c:77:52:d4:
         af:8a:7b:01:54:e9:50:36:7f:30:c6:30:c9:5b:6c:34:85:e6:
         26:45:a7:93:73:cd:14:1a:b1:a5:c8:39:4d:30:58:33:52:86:
         0f:05:ed:a5:26:f6:f2:cf:18:46:b2:4e:86:6e:85:52:47:4a:
         90:42:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:06:45 2025 by rpki-client