Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32342d3234203d3e20323733363833.roa
File:                     34352e342e34302e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          jmQKdIpsvvQj4ZcENtnIifnzratKRtp/6umHN1JYbrA=
Subject key identifier:   A0:9B:43:DE:1B:BC:CC:02:96:C0:CE:15:C1:E9:1D:6A:1F:09:5D:0F
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6499969C99E1EA73E9B84A6675D3499817B7CB28
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:35 +0000
ROA not before:           Tue 09 Sep 2025 12:44:35 +0000
ROA not after:            Tue 08 Sep 2026 12:49:35 +0000
asID:                     273683
IP address blocks:        45.4.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:96:9c:99:e1:ea:73:e9:b8:4a:66:75:d3:49:98:17:b7:cb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:35 2025 GMT
            Not After : Sep  8 12:49:35 2026 GMT
        Subject: CN=A09B43DE1BBCCC0296C0CE15C1E91D6A1F095D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:98:3e:15:c6:96:55:72:01:38:e3:f5:6f:
                    ba:cf:53:f6:a1:3f:6d:c4:ec:01:70:de:98:45:d1:
                    57:d4:da:42:14:31:7c:c4:b3:57:47:30:01:a5:b9:
                    71:99:8e:1b:ab:6a:50:5f:fb:2a:b7:a8:a7:36:15:
                    d8:80:b2:b8:bf:e0:14:41:3e:d2:fd:a9:1c:f6:4a:
                    70:d4:3f:23:40:1b:30:1f:a0:fd:5f:11:14:a7:6a:
                    b7:8c:92:fc:e8:38:b0:35:a7:13:5a:22:93:8a:b2:
                    64:99:92:7a:e5:4b:74:bb:ac:77:3c:f1:ed:93:4a:
                    23:40:a2:ab:ed:21:b6:2d:f8:78:3f:dd:a8:b5:ab:
                    6a:a1:46:47:2c:33:cb:ec:b6:db:c7:cc:6e:16:8e:
                    1b:da:f4:4c:68:00:63:af:db:f7:2a:79:2a:a7:7d:
                    6c:14:a4:bb:24:82:9d:6c:7e:4b:e0:64:f7:3b:9e:
                    df:53:26:22:2c:e4:14:59:85:50:d1:d4:0e:da:9d:
                    7a:98:37:68:7a:6a:a9:3b:d1:18:9b:9f:61:e6:a0:
                    76:78:6d:6f:20:9f:e2:3f:54:2e:68:7c:fd:5c:e4:
                    ff:c4:52:4e:03:e3:ea:4a:32:49:ef:77:49:cf:70:
                    52:8b:89:f1:57:1c:26:81:20:a0:c9:da:01:12:3b:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:43:DE:1B:BC:CC:02:96:C0:CE:15:C1:E9:1D:6A:1F:09:5D:0F
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e342e34302e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:90:1c:b3:1f:47:05:b3:66:b7:5f:52:e3:38:0e:f8:0a:0a:
         66:0d:4c:5b:0e:21:ab:45:84:53:d3:61:33:ad:f3:ba:5a:ab:
         13:d6:13:6a:55:8c:be:a5:7a:58:47:cf:0a:8e:34:a8:e7:21:
         ed:7c:e8:82:f6:63:84:63:a5:8e:be:63:a4:7d:f3:fb:cb:84:
         55:39:a5:74:f5:95:b8:a5:14:db:a4:6f:08:a3:7f:3d:6c:8c:
         5b:1e:fb:26:8e:b9:26:3c:16:70:e7:28:97:ed:cc:67:df:ab:
         4c:6e:ce:0f:9d:01:84:76:de:32:58:17:06:86:78:2e:92:f3:
         17:ae:e2:ad:22:fa:31:8a:22:41:3a:c3:5d:21:e0:65:12:ca:
         b1:bd:c7:c7:da:4f:50:d1:e9:cd:f6:3e:63:26:56:25:22:f7:
         8e:32:b7:fa:56:91:49:1e:84:52:38:ce:20:b1:63:a0:ef:e5:
         eb:f0:dd:b0:fc:a5:8a:7e:4d:de:12:6a:b5:6e:c0:ff:32:f9:
         20:78:9d:d9:7e:8a:b6:c3:46:2b:0c:87:e6:46:ea:88:ee:2e:
         cd:40:dd:30:82:ad:48:d8:fa:08:cb:4c:76:79:1b:e7:1f:b8:
         87:be:e2:26:8c:61:ef:f1:34:88:45:1f:3f:12:4a:1c:39:e4:
         b6:d5:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:44 2025 by rpki-client