Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa
File:                     3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          p494out80V4lA8DN4WZIiyldcBBnc9pwXNcjteQB8R0=
Subject key identifier:   E9:1D:32:B1:FC:12:F1:83:93:36:40:40:34:7B:4C:F9:DE:14:05:52
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       247743443B348BC372C244A9E8FAA4BD0E58CB15
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:33 +0000
ROA not before:           Wed 01 Oct 2025 22:03:33 +0000
ROA not after:            Wed 30 Sep 2026 22:08:33 +0000
asID:                     273683
IP address blocks:        177.53.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:77:43:44:3b:34:8b:c3:72:c2:44:a9:e8:fa:a4:bd:0e:58:cb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:33 2025 GMT
            Not After : Sep 30 22:08:33 2026 GMT
        Subject: CN=E91D32B1FC12F18393364040347B4CF9DE140552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:69:07:7b:59:f8:4b:07:a2:e6:d2:9b:1f:
                    b7:a7:d8:28:c2:27:00:c8:98:f3:32:de:cc:d5:9e:
                    12:fb:38:a2:d6:c7:af:95:01:f0:2a:79:e5:e8:47:
                    3f:6e:05:20:f8:2e:85:75:fd:4d:e3:eb:d7:f2:cd:
                    c7:1c:53:f5:be:3c:0a:43:27:3c:db:70:dc:dc:7d:
                    03:65:d4:68:a3:3d:55:19:33:bd:d3:8b:92:df:c0:
                    4c:84:0f:5f:71:f7:13:f4:68:bd:27:21:50:e7:3a:
                    ce:80:9c:df:0c:ca:76:d8:79:dc:64:48:0f:54:09:
                    48:3d:43:ad:9f:d7:72:86:aa:52:2c:aa:f4:3c:99:
                    95:dc:e8:a4:f7:da:fc:93:7a:1b:b6:2c:cf:4a:b1:
                    62:7a:1a:19:24:dd:cb:34:1f:f9:7f:36:50:c9:3d:
                    16:53:2f:46:5c:97:fd:a4:f7:1d:3b:4a:42:47:d1:
                    35:fd:19:3b:83:4c:53:05:7e:f7:b9:2c:00:be:85:
                    a1:14:fe:4f:de:66:23:10:2a:16:61:75:80:6b:f7:
                    c1:1d:6a:3e:2f:26:28:24:bb:2f:0d:4a:78:84:33:
                    98:6e:24:bf:61:dd:35:c5:d9:43:bb:d7:e3:32:82:
                    d2:26:b9:6f:a3:a6:2a:09:17:36:d4:e4:df:cd:69:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1D:32:B1:FC:12:F1:83:93:36:40:40:34:7B:4C:F9:DE:14:05:52
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136302e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:1f:92:76:cd:1c:71:37:3f:0b:54:f5:a4:fc:00:3a:c8:
         78:2b:fa:9f:c4:25:17:64:2f:29:1d:fb:6b:2d:11:3d:a4:5f:
         8e:09:32:fa:11:59:86:ee:21:18:7d:4b:83:d9:d0:ce:c6:a5:
         5d:aa:bc:6a:fa:10:b0:8d:8b:76:36:b2:80:35:66:d5:c9:4d:
         89:56:14:97:6b:7d:62:b8:03:94:97:ba:78:25:2d:aa:c8:85:
         6c:07:4b:98:50:1d:ab:8e:16:88:81:0e:e7:d8:8e:db:c0:c4:
         c2:a6:37:d9:88:74:bf:a3:a9:93:69:ea:33:ff:f6:b7:c5:e2:
         96:03:7a:e2:6e:54:2b:c3:49:1f:b7:ed:8f:e5:f9:e7:e1:8e:
         7d:73:6c:40:c7:e7:82:2a:4a:8a:e8:58:64:f5:8e:f1:aa:15:
         1c:a2:21:fb:4b:7b:5c:b6:39:d4:67:1a:5b:f3:ec:d7:01:8a:
         0f:a9:5e:5f:4d:54:12:bb:a0:3c:9d:e8:87:51:64:12:9e:d7:
         a3:a6:18:b6:da:27:2f:41:c7:f3:64:95:c4:b9:ef:39:82:bd:
         bd:07:ea:72:8a:c2:94:33:e6:06:62:d3:ec:18:5f:fc:39:cf:
         40:46:66:1b:17:c4:94:0c:05:94:73:f4:79:9d:19:e1:93:ad:
         20:36:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:03 2025 by rpki-client