Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33312e302f32342d3234203d3e20323733363833.roa
File:                     3133382e33362e33312e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          43qJeBmWREFqlSLK8Xi9Le8EWxmYjuUGmvEj8YVUsiM=
Subject key identifier:   87:E7:56:26:A6:9D:1A:E6:42:25:F2:FB:1D:95:2A:F5:45:31:B1:99
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       58B54B3EC84B3DB39A18CACAA7B495B1ED29EB45
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33312e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:39 +0000
ROA not before:           Wed 01 Oct 2025 22:03:39 +0000
ROA not after:            Wed 30 Sep 2026 22:08:39 +0000
asID:                     273683
IP address blocks:        138.36.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:4b:3e:c8:4b:3d:b3:9a:18:ca:ca:a7:b4:95:b1:ed:29:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:39 2025 GMT
            Not After : Sep 30 22:08:39 2026 GMT
        Subject: CN=87E75626A69D1AE64225F2FB1D952AF54531B199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:cd:9c:2b:d0:95:d5:5a:9f:8c:df:48:94:
                    84:d9:b2:be:31:c4:61:20:2e:3c:23:41:21:6e:e7:
                    2e:dd:2c:5c:60:87:15:d8:d0:f9:ab:e5:2b:76:fd:
                    81:af:1e:cc:47:1b:04:bd:03:f0:90:b5:bf:2e:2a:
                    e6:26:ed:73:ac:de:6d:31:4f:50:50:d4:bd:af:91:
                    9c:24:30:bf:92:00:c5:4f:c8:ae:92:14:ac:86:a3:
                    ee:21:a7:ee:ca:fd:66:e5:b2:58:80:df:ec:af:f9:
                    8b:be:1c:7c:38:07:5f:ab:8f:f0:75:ab:78:ca:46:
                    e7:23:e7:2b:a9:b1:29:b9:82:b0:e6:42:d5:4b:b7:
                    17:1f:47:8e:03:7d:17:3d:07:6a:2e:a6:ad:96:bf:
                    90:ef:90:e9:61:fd:da:f2:26:11:cf:ec:7f:a6:51:
                    79:4a:da:70:13:1f:3a:41:62:94:0b:64:65:8d:d2:
                    0b:38:54:bf:81:2b:82:a7:93:a3:96:a1:6a:45:86:
                    10:6e:a9:87:a4:98:09:6a:57:5e:e5:54:e0:a6:67:
                    88:70:32:b3:d5:21:50:96:ed:c5:41:9d:b8:7f:7b:
                    12:db:ec:65:02:6e:79:41:0a:a7:c9:53:f1:68:4e:
                    14:15:68:53:ae:c4:b4:30:f8:b1:bb:6f:98:12:c5:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:56:26:A6:9D:1A:E6:42:25:F2:FB:1D:95:2A:F5:45:31:B1:99
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e33312e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:00:c3:95:c1:2b:fe:e0:cf:d4:8a:48:e8:83:92:67:0e:ad:
         4d:27:09:ab:bc:c9:20:26:ac:fb:ec:1a:71:a6:a0:7c:f3:04:
         a4:e6:6e:fe:73:c0:22:e3:fc:96:d6:d9:67:8b:cc:c6:29:dd:
         18:34:4e:04:d4:af:d3:c5:70:ef:60:f3:bd:cd:c1:fd:e6:6d:
         13:88:8b:6e:f4:3d:0d:84:ef:3b:76:2f:01:3c:0f:7f:33:10:
         0a:c9:4c:87:4d:8c:86:8d:10:8a:10:7b:86:aa:2c:34:f9:8d:
         1a:4a:6b:f1:a5:c4:fe:9c:2c:75:0f:a1:4e:db:4a:b6:bd:f0:
         70:da:54:a0:9a:62:fe:5e:83:b8:c8:4f:7c:c3:f9:a1:00:cc:
         39:77:fa:4b:59:d9:6e:d2:32:f4:35:44:53:09:2e:7c:60:1b:
         c4:59:23:28:26:bd:ff:fd:39:c8:df:5a:1d:fb:e5:fa:97:b3:
         c0:bd:94:c2:67:ab:d3:5e:29:dc:0c:39:0e:9f:78:1b:63:69:
         44:3f:7d:5b:02:d3:35:d0:ae:2f:11:d0:66:56:89:4f:c9:58:
         3e:8c:f1:22:a4:73:4b:cd:c5:93:5d:e2:c1:07:1c:70:b8:f9:
         92:3f:47:ce:52:22:fc:03:53:35:5e:1d:c2:5f:b3:56:d1:d7:
         e9:54:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:21 2025 by rpki-client