Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136322e302f32342d3234203d3e20323733363833.roa
File:                     3137372e35332e3136322e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          pcP86/k7Gu3jo9ZpZ8xziSyQmSFDF6vuUQT9/t/YYcA=
Subject key identifier:   FB:82:AC:58:D0:B2:09:9F:B3:62:C3:09:CB:D5:A6:30:99:95:3D:4E
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6A2F4C9F6655BB2BEF37B4C008DE4AD6F10DB0C7
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136322e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:42 +0000
ROA not before:           Wed 01 Oct 2025 22:02:42 +0000
ROA not after:            Wed 30 Sep 2026 22:07:42 +0000
asID:                     273683
IP address blocks:        177.53.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2f:4c:9f:66:55:bb:2b:ef:37:b4:c0:08:de:4a:d6:f1:0d:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:42 2025 GMT
            Not After : Sep 30 22:07:42 2026 GMT
        Subject: CN=FB82AC58D0B2099FB362C309CBD5A63099953D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:cc:93:24:75:53:69:2c:34:18:df:a2:a9:
                    a7:1c:cc:b1:05:9b:6e:d3:a6:86:b3:39:d8:31:66:
                    b1:d0:7a:b3:5d:ff:ef:bc:8e:36:d2:3f:ed:b5:1b:
                    9e:9b:94:63:5d:e5:b2:ac:dc:6b:2c:00:ad:43:d5:
                    9c:55:16:b5:dc:e6:dc:c6:5a:2b:ab:48:38:5b:19:
                    08:ba:75:3b:7b:64:11:e5:07:08:96:85:5a:1e:d0:
                    af:4b:50:6c:b7:b3:d8:5d:11:a6:f0:a3:10:bc:53:
                    66:da:f0:8b:28:f8:d8:d9:9e:76:b0:2c:a6:8f:55:
                    cb:cf:86:64:85:b9:84:14:74:00:ae:c0:b5:67:f4:
                    d3:3b:df:ee:41:95:13:fb:a4:92:9d:03:69:bc:82:
                    76:44:63:76:b4:00:58:dd:42:52:c2:6c:80:dc:e5:
                    f8:97:98:3c:eb:8e:6c:40:8f:2c:e7:ce:d6:09:bd:
                    e8:40:0e:30:b5:dc:08:6e:4b:0a:e0:53:e8:2f:2f:
                    8b:d8:c0:cb:32:3d:03:59:92:67:3a:7d:86:89:36:
                    d2:a6:c5:d2:a9:df:c2:57:48:f8:cc:31:8b:72:11:
                    62:88:80:65:d5:a2:9b:16:e2:db:cc:18:c8:c5:b6:
                    0b:7c:5a:67:ef:2a:6d:08:ab:16:9c:21:ef:0e:18:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:82:AC:58:D0:B2:09:9F:B3:62:C3:09:CB:D5:A6:30:99:95:3D:4E
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e3136322e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:d8:4d:f1:01:68:26:9d:53:f2:6b:69:c9:1a:44:b2:3f:b6:
         49:0d:b4:17:a3:99:93:a9:42:2f:15:52:30:f5:4c:6d:62:aa:
         5e:2d:7c:05:4f:2a:fb:ce:e2:72:6e:e2:84:95:4c:e0:f1:e5:
         9b:95:af:38:bc:84:09:64:57:e5:bb:f2:80:47:04:f5:22:f9:
         3c:2a:24:38:e2:75:56:0e:68:64:30:0c:7d:55:0d:20:f4:ba:
         1b:3b:28:d9:4c:a3:b6:e3:c7:7b:39:84:49:f0:7e:c1:43:54:
         d4:54:17:66:bf:8a:69:ec:52:82:72:ff:3f:e2:16:c3:3f:29:
         98:a7:a8:0a:be:87:90:2a:29:96:94:b2:fd:f8:74:05:07:4e:
         bb:05:31:39:4b:6c:aa:56:38:eb:07:d9:88:9d:a6:51:6e:da:
         b8:c6:af:e3:b2:5c:de:ab:96:85:ab:83:b9:b1:f3:91:d8:17:
         04:01:40:80:c7:ea:48:61:5d:00:b5:30:d5:ea:5d:8c:05:7c:
         f2:d4:b5:63:69:d0:23:de:dd:04:6d:b6:91:5f:ff:1f:64:4c:
         9b:a2:3d:8a:43:98:c0:d0:4a:25:b1:88:fd:68:de:58:24:00:
         f5:54:5a:ab:c7:ae:ba:5d:7f:69:f4:33:6a:52:12:b4:c5:de:
         87:b9:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:03 2025 by rpki-client