Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa
File:                     3133382e33362e32382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          T4B4daOpG65CK93iSznpjbl6w77iIokPNMXGNCwKyZg=
Subject key identifier:   C6:67:2D:EA:3A:6A:5C:EE:E6:2B:84:8D:71:7D:B6:C2:BA:1C:4A:94
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4612B06F2F5105666589AD7DD4D7334297D8CB24
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:51 +0000
ROA not before:           Wed 01 Oct 2025 22:02:51 +0000
ROA not after:            Wed 30 Sep 2026 22:07:51 +0000
asID:                     273683
IP address blocks:        138.36.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:12:b0:6f:2f:51:05:66:65:89:ad:7d:d4:d7:33:42:97:d8:cb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:51 2025 GMT
            Not After : Sep 30 22:07:51 2026 GMT
        Subject: CN=C6672DEA3A6A5CEEE62B848D717DB6C2BA1C4A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:2b:90:84:87:0a:22:7d:2f:75:55:f6:d7:
                    0c:3d:c4:f1:1c:71:f7:f5:0b:9c:e8:b1:f0:e0:e3:
                    32:6e:3e:4c:7f:ae:30:f3:ba:99:9c:89:6c:7a:54:
                    3b:df:c2:78:bd:6c:56:22:3e:d6:bd:0b:32:56:6e:
                    3f:ae:97:19:a8:07:71:36:06:67:73:cf:e5:58:b6:
                    ff:e5:9d:0b:b9:59:2e:c5:b1:8b:64:d9:6d:d2:27:
                    72:75:24:8e:c0:4e:ff:fa:5e:b6:aa:fb:17:41:9d:
                    b6:86:28:8d:26:21:d8:ea:60:d5:48:76:aa:01:97:
                    6e:a1:a8:db:c2:6b:ae:5d:94:86:87:cf:ca:0f:52:
                    05:d0:bb:60:c3:7e:1c:f7:41:41:7d:61:d3:e4:63:
                    45:c8:0b:00:9f:e3:12:4b:a0:a3:0e:3b:a9:fd:cf:
                    f6:11:4f:51:3b:c7:a2:eb:8a:ce:5d:ab:90:f4:42:
                    d9:66:60:db:e6:b3:90:3d:d4:8a:a4:90:0e:95:c3:
                    70:5c:70:c2:7a:dc:cf:0a:f3:28:df:b4:ed:a1:51:
                    8f:eb:c5:90:18:8c:78:94:e0:ef:4a:01:60:64:7c:
                    45:1e:e8:a5:d1:13:3b:09:f1:0e:79:aa:ed:da:44:
                    3a:10:56:cb:ad:42:fa:df:70:ef:90:40:2e:14:33:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:2D:EA:3A:6A:5C:EE:E6:2B:84:8D:71:7D:B6:C2:BA:1C:4A:94
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:20:f4:06:c2:60:88:4a:8f:ec:69:ea:a6:5b:08:3a:16:
         10:c9:2a:34:2d:8a:7d:0b:db:b5:05:83:7d:b3:28:f4:51:18:
         31:75:03:b5:68:93:6c:fd:ec:23:33:b3:65:01:6b:bf:c2:c3:
         33:68:44:74:de:95:b0:79:17:95:02:c4:e3:2a:26:62:d6:01:
         79:a4:3a:8d:e0:ad:6c:b8:37:ac:7e:75:88:b7:99:32:b7:6d:
         3a:80:36:b5:2d:ae:58:e0:4a:16:08:b2:d5:7d:dd:c8:e1:ab:
         28:56:eb:ea:f2:20:c2:20:60:43:a4:d7:71:6d:88:2c:a4:a8:
         8d:4a:d6:f6:8a:36:08:4d:58:1a:7a:8e:73:33:dd:49:74:33:
         17:31:02:7c:cf:36:be:0f:74:8b:97:2b:3a:f8:b7:4f:c8:a9:
         83:2b:64:fc:f3:6c:76:e6:02:22:39:6c:26:e4:91:90:21:07:
         59:7f:94:a9:c8:20:c1:c9:24:09:e2:36:ed:53:80:11:67:cf:
         b1:47:67:29:3a:f7:94:25:2a:2b:69:8e:dd:ab:7a:43:a1:c7:
         13:11:99:a8:dd:bd:c0:73:9d:91:3b:77:9a:a8:ab:03:a5:4f:
         60:02:bd:fd:aa:8c:29:90:43:38:53:fe:3c:fe:d3:16:c6:15:
         d4:31:4b:c8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURhKwby9RBWZlia191NczQpfYyyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAyNTFaFw0yNjA5MzAyMjA3NTFaMDMxMTAvBgNV
BAMTKEM2NjcyREVBM0E2QTVDRUVFNjJCODQ4RDcxN0RCNkMyQkExQzRBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjiuQhIcKIn0vdVX21ww9xPEc
cff1C5zosfDg4zJuPkx/rjDzupmciWx6VDvfwni9bFYiPta9CzJWbj+ulxmoB3E2
Bmdzz+VYtv/lnQu5WS7FsYtk2W3SJ3J1JI7ATv/6Xraq+xdBnbaGKI0mIdjqYNVI
dqoBl26hqNvCa65dlIaHz8oPUgXQu2DDfhz3QUF9YdPkY0XICwCf4xJLoKMOO6n9
z/YRT1E7x6Lris5dq5D0QtlmYNvms5A91IqkkA6Vw3BccMJ63M8K8yjftO2hUY/r
xZAYjHiU4O9KAWBkfEUe6KXREzsJ8Q55qu3aRDoQVsutQvrfcO+QQC4UM1tRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUxmct6jpqXO7mK4SNcX22wrocSpQwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
MzM4MmUzMzM2MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAiiQcMA0GCSqGSIb3DQEBCwUAA4IBAQBXmyD0BsJgiEqP
7GnqplsIOhYQySo0LYp9C9u1BYN9syj0URgxdQO1aJNs/ewjM7NlAWu/wsMzaER0
3pWweReVAsTjKiZi1gF5pDqN4K1suDesfnWIt5kyt206gDa1La5Y4EoWCLLVfd3I
4asoVuvq8iDCIGBDpNdxbYgspKiNStb2ijYITVgaeo5zM91JdDMXMQJ8zza+D3SL
lys6+LdPyKmDK2T882x25gIiOWwm5JGQIQdZf5SpyCDBySQJ4jbtU4ARZ8+xR2cp
OveUJSoraY7dq3pDoccTEZmo3b3Ac52RO3eaqKsDpU9gAr39qowpkEM4U/48/tMW
xhXUMUvI
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:04 2025 by rpki-client