Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132372e302f32342d3234203d3e20323733363833.roa
File:                     3133312e3130382e3132372e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          20RPYKoM8+2L/eg/c6zdvmUWRWXaEcTEJJ31WZODesY=
Subject key identifier:   D7:8B:24:2D:7C:6D:EB:E2:5F:65:39:69:78:A4:94:F1:F1:47:7C:B8
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       3F1722ADFA83ADB2C39CCD8FE8734B5E65F8DD3F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132372e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:50 +0000
ROA not before:           Wed 01 Oct 2025 22:02:50 +0000
ROA not after:            Wed 30 Sep 2026 22:07:50 +0000
asID:                     273683
IP address blocks:        131.108.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:22:ad:fa:83:ad:b2:c3:9c:cd:8f:e8:73:4b:5e:65:f8:dd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:50 2025 GMT
            Not After : Sep 30 22:07:50 2026 GMT
        Subject: CN=D78B242D7C6DEBE25F65396978A494F1F1477CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:d3:ae:4b:cf:d4:48:df:4e:d4:e8:b5:8f:
                    c8:41:9b:3f:fc:b0:94:5a:42:4b:21:b3:2c:76:2d:
                    15:ee:7f:4d:70:03:c8:68:43:58:01:66:ec:c9:e4:
                    c0:21:78:96:47:2c:8f:bb:16:9a:b9:db:45:e1:29:
                    b6:c2:b7:c3:7e:83:c4:df:72:33:63:35:94:c1:27:
                    1c:c3:c4:cb:01:76:1d:ec:34:fb:8b:15:5f:94:9c:
                    d4:42:ae:e7:d2:65:b8:0a:0c:f0:0d:ad:1f:26:06:
                    3a:c5:04:ce:ba:c7:82:ab:89:73:92:b0:8d:36:0e:
                    39:dc:70:01:ef:f6:de:aa:82:08:44:58:e2:b3:0c:
                    e7:87:a9:fe:27:93:c1:16:a7:71:41:1d:70:54:c8:
                    f4:b9:52:31:83:5c:0e:9a:8c:fd:95:ac:4a:bd:dd:
                    98:09:e9:1e:6f:cf:fd:66:42:22:69:01:88:06:c0:
                    3b:5d:90:14:98:44:e1:e3:56:5e:b0:51:00:8d:0f:
                    3d:aa:d8:84:d8:5a:8a:89:af:f4:01:b0:f5:25:4e:
                    3f:9f:61:36:f9:7f:a7:8b:ec:f2:ca:cb:16:0e:81:
                    ba:86:b9:a1:1d:45:7b:27:29:01:19:7c:8d:b1:c6:
                    56:52:b0:e0:d2:7c:cd:a6:61:0f:ef:db:89:a6:b5:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:24:2D:7C:6D:EB:E2:5F:65:39:69:78:A4:94:F1:F1:47:7C:B8
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130382e3132372e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:23:6f:ea:1b:8b:58:cb:3d:60:8f:5a:fb:38:b2:24:03:
         03:5c:85:1f:30:af:69:02:36:2b:94:23:46:5d:0d:33:e2:fc:
         55:60:8c:fe:af:a8:f6:de:6a:ce:6d:64:7a:3b:38:35:10:a2:
         52:34:aa:0a:c5:ad:b9:52:c5:ed:a4:aa:0c:16:af:e4:09:c9:
         7b:26:80:91:47:f5:c0:60:39:36:f2:7a:3f:32:8c:77:3a:1a:
         df:df:98:07:90:10:6a:7d:02:2b:aa:a6:b8:f2:ff:8a:23:52:
         ab:70:66:8e:88:1e:49:6a:f9:3e:97:c2:3b:27:62:ad:5a:12:
         5b:a8:b2:7f:9e:60:8c:10:33:9d:a8:e4:00:7e:74:a3:19:9c:
         8b:40:04:16:b3:f2:f3:00:de:b9:a9:00:66:97:d9:27:cb:7a:
         d2:40:bc:5f:80:b1:e7:97:6a:6b:e7:f4:4c:19:db:d8:0d:06:
         e4:59:5b:19:81:54:1b:d7:48:07:22:6b:f1:09:7c:49:c1:1d:
         3c:26:90:9e:7a:0a:b4:65:e0:63:58:1c:a9:eb:de:02:36:71:
         65:f3:71:51:51:24:79:cb:13:2a:63:36:ec:53:ea:e3:f0:1e:
         2a:61:36:5b:f8:c3:37:e2:f7:39:ab:c6:a9:b1:50:a8:b7:6b:
         31:1d:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:35 2025 by rpki-client