Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32342d3234203d3e20323733363833.roa
File:                     3133312e3130382e3132342e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          WbY4Yp/fdvYtjFS0HG6rEkh+WFR+YXSkycw2P6Bqook=
Subject key identifier:   C4:39:2C:59:DA:A7:B3:47:93:3C:31:12:48:23:E7:DB:29:07:D0:13
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4A7F13A546252C6309198BCEBB37ED38451C81B1
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:10 +0000
ROA not before:           Wed 01 Oct 2025 22:03:10 +0000
ROA not after:            Wed 30 Sep 2026 22:08:10 +0000
asID:                     273683
IP address blocks:        131.108.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7f:13:a5:46:25:2c:63:09:19:8b:ce:bb:37:ed:38:45:1c:81:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:10 2025 GMT
            Not After : Sep 30 22:08:10 2026 GMT
        Subject: CN=C4392C59DAA7B347933C31124823E7DB2907D013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:23:38:8d:e3:dd:11:99:da:81:7a:0e:3f:
                    b0:ae:75:72:a7:91:b5:ff:31:e1:5a:74:df:1d:84:
                    e8:4d:d9:55:91:61:7a:72:13:75:a1:66:ab:b4:8b:
                    93:38:db:1f:7c:ce:d6:25:21:66:ba:8f:ba:17:91:
                    6d:95:d6:54:dc:ac:75:85:97:97:e2:48:30:22:a0:
                    3f:4a:b8:a4:89:4d:89:31:60:89:c5:f0:d5:b7:f0:
                    59:cb:c5:f5:fd:88:1b:bf:06:ae:ba:1f:75:c4:c0:
                    41:d8:a3:c4:7a:b6:2e:b6:38:2b:73:34:90:11:f6:
                    73:af:99:54:17:40:6b:ed:c0:1e:97:8a:1a:e2:e3:
                    ba:8e:27:69:c2:9b:82:9c:28:3e:06:37:e9:f5:db:
                    e0:b2:3e:6a:1e:33:b9:d4:05:11:0a:be:a6:d8:86:
                    1e:ca:89:51:05:22:66:fa:42:4b:f1:49:2f:6e:be:
                    3d:9a:fc:16:97:a4:6e:1a:86:6f:a9:71:d1:ba:10:
                    ee:57:4a:5c:90:f9:c2:7f:fb:5d:50:5d:e4:36:00:
                    25:3d:92:38:06:e2:f2:8a:40:97:39:80:de:98:75:
                    66:9d:d1:9f:3d:23:8a:39:73:8a:51:16:b3:3c:39:
                    73:b6:e4:7c:ed:37:4e:fa:ae:20:d4:c0:7a:e3:e3:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:39:2C:59:DA:A7:B3:47:93:3C:31:12:48:23:E7:DB:29:07:D0:13
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132342e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ac:8e:1f:b7:94:cb:58:f1:9b:0d:8e:c7:1f:a5:5a:3e:1a:
         a5:2d:6b:f8:38:71:4d:2c:18:ca:00:86:d7:b7:1c:3f:98:97:
         b0:b9:6f:4a:29:da:b8:de:c7:7a:48:3b:12:ec:3a:ea:1c:62:
         87:6b:3d:81:82:1a:bb:08:aa:cf:6d:93:40:cd:d6:4f:1e:a5:
         3f:78:e5:37:b2:5a:e8:7d:ff:69:27:a9:20:31:72:9e:f7:b4:
         9c:17:c7:01:51:b6:a0:55:5b:2f:0d:6d:a2:18:46:d3:19:80:
         65:13:3d:a8:ec:a7:2b:67:ba:f0:67:26:fe:89:87:77:f7:6d:
         9d:1c:19:6e:0b:32:11:5c:2a:81:3c:67:e3:5e:41:37:61:28:
         dc:6a:84:22:1b:1b:25:2f:4e:f8:f2:4e:8e:05:48:1d:2d:fe:
         a6:57:f3:f2:0b:86:9f:bf:01:82:3a:ce:b4:2e:d9:72:5f:38:
         2d:f1:ef:f0:49:c8:1b:3e:ec:76:e9:12:27:ea:5b:80:1a:ed:
         f6:4f:c1:15:a0:94:b9:3a:fe:f6:44:ca:9c:74:f1:84:35:6c:
         86:18:20:ec:ef:ef:fe:29:9e:d6:1f:6b:ec:92:65:c8:14:0f:
         08:dd:c7:bd:74:48:0f:2d:39:07:fb:c6:e9:05:bd:d6:ac:e8:
         5a:b6:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:18 2025 by rpki-client