Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132352e302f32342d3234203d3e20323733363833.roa
File:                     3133312e3130382e3132352e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          wLh3opKywCX5NHUX70ttGaGJXr1QjPZBTjJUUxuMQZM=
Subject key identifier:   F1:CF:97:CA:B8:19:DC:94:D0:59:56:C5:41:51:02:65:71:09:00:C2
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       43AD9F110064633A7A397C490EDC47A26F152306
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132352e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:35 +0000
ROA not before:           Wed 01 Oct 2025 22:03:35 +0000
ROA not after:            Wed 30 Sep 2026 22:08:35 +0000
asID:                     273683
IP address blocks:        131.108.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:9f:11:00:64:63:3a:7a:39:7c:49:0e:dc:47:a2:6f:15:23:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:35 2025 GMT
            Not After : Sep 30 22:08:35 2026 GMT
        Subject: CN=F1CF97CAB819DC94D05956C541510265710900C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:b0:63:b6:32:52:5a:9b:bc:5d:b1:31:de:
                    56:9a:ca:d5:90:f5:af:f3:ba:7a:61:22:5b:09:5c:
                    98:cd:78:b3:a8:61:0f:10:86:33:8a:d7:b9:dc:1b:
                    48:0c:ea:f4:99:f9:f9:d3:88:e2:5e:37:1a:fc:1a:
                    dd:89:be:eb:38:b3:b7:c8:1f:1f:67:5c:52:b9:8b:
                    de:ed:7e:5f:dc:8f:56:07:de:f8:30:f0:78:cd:0d:
                    1d:19:19:09:1c:13:90:04:88:36:51:24:26:cc:5c:
                    74:a3:cf:f5:c5:22:11:5a:da:aa:89:28:0e:38:e8:
                    a1:50:76:c9:c3:11:fa:62:da:11:ac:25:ac:ab:9e:
                    8f:4b:4d:fd:71:88:22:d8:d2:f5:ad:54:89:2f:17:
                    07:30:92:ca:6a:65:55:76:91:31:98:c2:50:99:2b:
                    b5:61:50:ee:34:62:3f:a9:82:2f:44:01:90:6e:73:
                    72:55:3d:1c:77:a2:5f:13:6b:26:24:f2:0a:33:c2:
                    d3:0a:6a:43:f6:cb:f1:1d:16:8f:dd:d2:21:99:58:
                    6b:05:46:c9:82:ce:2e:2b:56:b3:76:a7:bb:60:4e:
                    9c:a8:98:9b:73:16:ef:5c:ff:24:64:01:7e:7e:06:
                    bd:f2:d8:1b:26:1a:98:a7:2a:ae:2d:81:55:fc:14:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CF:97:CA:B8:19:DC:94:D0:59:56:C5:41:51:02:65:71:09:00:C2
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132352e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:9d:fb:2a:f4:b0:38:1d:a6:2b:8a:9d:69:44:c0:7e:a1:
         7d:ac:ea:ed:3d:89:54:0b:0f:e6:dc:e3:cd:59:97:29:8a:5e:
         8f:c9:07:c4:2d:50:1b:1e:37:55:04:6e:bf:80:8f:70:5b:c8:
         64:7a:2e:09:66:c4:54:cc:63:c0:f1:ec:d7:26:76:53:8e:4f:
         89:cb:2b:a9:44:f0:a6:2b:1c:3a:09:54:c4:82:3e:fb:2a:18:
         28:77:3c:0c:bc:4b:71:66:31:3c:3e:c1:0b:d3:fd:7a:f0:7c:
         82:fd:70:64:4a:d7:6b:27:44:8e:a3:08:d6:6e:3e:ef:83:8b:
         77:ac:47:13:5c:1f:d4:32:69:8d:fb:e1:af:a7:25:a8:00:c1:
         d2:17:72:3b:d2:30:6c:cd:fb:72:6a:02:81:21:2a:75:2f:91:
         38:d2:d8:f8:14:a6:7d:c4:c0:e3:8d:8a:c1:cf:56:c9:f8:d1:
         5a:35:21:9d:99:ea:30:1d:7b:b2:e1:5b:84:ee:c5:95:96:24:
         30:84:54:4c:8c:c4:57:a3:c8:82:8d:81:e6:86:66:74:5e:4e:
         a1:02:dd:51:94:68:f9:8c:5c:86:6c:dc:23:7c:b8:55:b9:4d:
         30:55:f6:f9:78:84:83:3e:52:d3:7e:12:e7:35:a8:22:e3:ea:
         59:0b:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:17 2025 by rpki-client