Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          s31Srf/oJ1YerslmHaWDvnCXxa8zXkw9mZ7WBxPsOGs=
Subject key identifier:   8C:27:B5:A6:39:06:F4:97:D5:05:F2:A7:EE:F2:59:50:01:8D:1E:E6
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       13DBA88A8492AE3D490EE2654D352134D9A22C53
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
Signing time:             Wed 01 Oct 2025 22:08:31 +0000
ROA not before:           Wed 01 Oct 2025 22:03:31 +0000
ROA not after:            Wed 30 Sep 2026 22:08:31 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:db:a8:8a:84:92:ae:3d:49:0e:e2:65:4d:35:21:34:d9:a2:2c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:31 2025 GMT
            Not After : Sep 30 22:08:31 2026 GMT
        Subject: CN=8C27B5A63906F497D505F2A7EEF25950018D1EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:d5:73:e5:8e:3d:a1:b5:8f:46:7c:e1:b8:
                    96:8b:0c:2b:4a:20:04:d4:db:af:d5:d5:03:e0:f3:
                    b0:50:db:f6:6e:74:ff:c2:ec:5c:59:f9:1c:66:38:
                    ac:7a:27:c6:a7:7d:e2:b2:d3:be:b8:24:9d:4a:8e:
                    4e:ba:44:ae:32:2b:98:38:7e:20:61:03:99:ce:8f:
                    79:59:5a:27:52:4f:09:ab:34:e2:89:19:39:85:1b:
                    c0:da:16:56:56:51:db:81:d7:ac:bb:72:31:41:36:
                    53:d6:03:22:f1:3d:42:10:1f:b1:28:83:8f:be:fd:
                    fb:84:58:fa:b2:02:12:31:69:a7:45:5c:7b:57:92:
                    a8:bb:05:0a:10:4d:80:4f:88:e9:67:19:ac:e6:0b:
                    7f:8a:12:59:1a:0c:a0:61:28:18:23:8e:e8:12:92:
                    d0:1b:8c:ef:2f:55:54:a8:e4:6a:90:2d:94:e1:8b:
                    7d:24:7c:b2:ab:fe:8d:30:e3:f9:f5:c6:7d:21:79:
                    ae:10:f9:a5:40:5a:aa:ec:bf:80:c7:7a:46:be:7d:
                    ca:1f:eb:ac:b8:71:b1:e0:21:fb:74:a5:61:c4:80:
                    d5:10:61:d4:54:99:9a:5c:0e:5a:97:98:58:57:04:
                    81:cd:f2:d8:9e:da:4f:60:4b:fb:79:0c:8a:28:42:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:B5:A6:39:06:F4:97:D5:05:F2:A7:EE:F2:59:50:01:8D:1E:E6
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:03:67:b8:d2:df:fe:93:3c:74:58:56:14:1b:19:4e:84:c8:
         bb:2a:5c:da:c1:d5:df:a5:21:26:72:b6:9a:3c:0f:9a:d5:04:
         e8:4b:6c:f2:e5:3c:b6:ca:69:4d:65:90:df:b3:e0:b7:8c:07:
         d1:61:71:33:b2:ab:2a:29:a2:22:00:f9:76:5f:e7:35:fb:75:
         e4:48:53:3b:25:af:c4:cc:2b:7f:36:ee:5e:ab:8f:a8:52:72:
         5f:dc:7b:31:af:4a:68:01:95:84:37:9a:14:5d:85:d8:0d:a1:
         42:38:5f:f8:2e:d6:2c:c8:bb:ae:d2:d1:35:90:06:22:7d:33:
         b0:09:5e:25:8f:81:ea:28:9e:46:04:1d:36:f5:30:f6:2b:90:
         62:b1:9e:b8:56:81:dc:01:02:ee:d4:6c:01:76:99:3d:d2:9a:
         9d:10:bc:e6:b9:a5:ea:9c:21:38:9c:a8:e2:47:b5:c2:f7:bf:
         5d:9d:e5:83:30:25:ab:22:90:a3:56:49:da:d1:cc:1d:bc:10:
         90:3b:2c:ed:65:9e:7e:2f:fe:46:d9:f5:52:9d:4b:88:d5:28:
         3d:b6:03:e4:95:5e:29:ce:6c:5b:a3:47:d9:60:76:77:48:26:
         41:7b:86:12:d5:2a:ac:46:59:9a:c4:d2:8e:e8:fe:6b:2c:78:
         02:b6:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:55 2025 by rpki-client