Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132362e302f32342d3234203d3e20323733363833.roa
File:                     3133312e3130382e3132362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          PaV59n+aBXI7qUA1082+bLT5muE0q59VR7Ir15+fmkM=
Subject key identifier:   D7:CD:FF:9B:FF:EE:18:D1:26:CF:AF:24:FC:E6:61:42:FE:5F:D6:49
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       5A51075DDCB6B8F6EF3074DFD238D5FCA265D549
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132362e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:00 +0000
ROA not before:           Wed 01 Oct 2025 22:03:00 +0000
ROA not after:            Wed 30 Sep 2026 22:08:00 +0000
asID:                     273683
IP address blocks:        131.108.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:51:07:5d:dc:b6:b8:f6:ef:30:74:df:d2:38:d5:fc:a2:65:d5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:00 2025 GMT
            Not After : Sep 30 22:08:00 2026 GMT
        Subject: CN=D7CDFF9BFFEE18D126CFAF24FCE66142FE5FD649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:54:71:a6:c4:86:05:35:70:9f:a2:4f:12:
                    01:d0:e0:aa:30:7b:42:23:11:ab:cc:9d:15:f9:e3:
                    46:47:9a:94:66:ff:8e:3b:ab:87:d5:8a:7b:39:ef:
                    02:8e:8a:96:f0:fa:48:af:36:7f:c6:29:99:bb:68:
                    be:34:85:f0:c0:27:71:95:36:ce:54:bc:4e:4e:d0:
                    ef:a1:8c:9b:48:7b:00:8e:7a:cf:77:0d:67:e1:bd:
                    f8:a7:0a:8a:c1:a8:bb:ba:69:cd:55:cd:52:99:65:
                    eb:ff:f0:f8:19:9e:3e:00:c0:9c:36:22:d8:73:e5:
                    6e:45:d9:6f:02:c4:eb:28:c5:f6:7c:ed:ed:b3:b6:
                    3b:e3:59:d9:32:80:5d:9a:da:a7:ad:6a:5f:23:59:
                    7a:98:ee:be:32:2f:7c:d5:64:6c:a4:42:50:4b:a7:
                    22:c2:40:75:4a:97:29:94:14:03:4a:78:c5:2b:ca:
                    88:50:cc:79:04:e7:12:ba:0f:81:72:ae:28:54:96:
                    f2:de:91:04:e4:ad:11:52:c3:4f:e9:de:87:1f:6a:
                    17:93:07:ed:5d:1b:e9:d9:d7:07:78:b6:20:9d:8a:
                    06:ec:05:46:81:2b:e2:13:d2:b1:65:73:3c:62:36:
                    26:7b:17:a2:c9:46:82:90:cf:72:6a:59:c2:02:08:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:FF:9B:FF:EE:18:D1:26:CF:AF:24:FC:E6:61:42:FE:5F:D6:49
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:60:f9:67:ee:70:15:41:3d:c1:be:09:c3:7c:1a:85:3b:
         09:05:31:95:19:c8:1c:f1:1c:7e:bb:1a:5b:45:e9:dc:97:6b:
         e7:e3:59:93:3b:02:31:52:3f:6e:b9:ac:cd:a2:58:8b:fc:6b:
         95:eb:fe:9a:07:57:95:cf:45:fe:16:68:72:97:ba:cb:2d:90:
         0f:9b:a8:82:9b:4a:6f:7b:d5:5b:95:e8:72:6e:07:8e:eb:18:
         59:45:76:b1:0d:31:ea:a8:22:af:c9:d5:f6:95:d9:9f:4c:68:
         5c:09:be:50:e3:73:dc:04:a7:d3:6c:98:cc:b4:85:b8:cb:1b:
         26:c5:5b:c3:21:34:03:f6:9c:90:f6:95:55:58:95:a0:44:bc:
         13:fc:b6:7d:78:0f:1e:b7:46:03:96:d4:f4:96:5a:6b:81:9e:
         b4:5f:a6:b7:7c:c9:26:87:b8:78:72:12:47:f1:22:f4:ba:fc:
         b5:8d:ed:05:2b:43:ca:b2:bb:57:74:ea:27:70:45:fa:e5:98:
         2c:d3:d3:af:3d:a0:e6:67:e6:09:41:d3:4e:6c:42:49:97:a9:
         5a:e9:4c:14:d9:1c:e3:29:41:b4:26:48:66:22:8d:8f:13:20:
         68:de:9d:5c:f1:ed:3a:93:81:94:3c:7e:ea:8e:c9:d1:b4:cf:
         9b:03:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:31 2025 by rpki-client