Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e34302e302f32312d3234203d3e20323733363833.roa
File:                     3137372e35332e34302e302f32312d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          20MznE3ATPJooXZv8irrPrX+AHADwGSwE3KDZ3z7W1E=
Subject key identifier:   49:AF:46:2A:45:3B:BD:99:0C:62:E7:B2:B1:20:BC:21:A7:35:9C:BF
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       2BF8892D58DAE9773FF2DD591E02001DA18EB3D9
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e34302e302f32312d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:50 +0000
ROA not before:           Wed 01 Oct 2025 22:03:50 +0000
ROA not after:            Wed 30 Sep 2026 22:08:50 +0000
asID:                     273683
IP address blocks:        177.53.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f8:89:2d:58:da:e9:77:3f:f2:dd:59:1e:02:00:1d:a1:8e:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:50 2025 GMT
            Not After : Sep 30 22:08:50 2026 GMT
        Subject: CN=49AF462A453BBD990C62E7B2B120BC21A7359CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:4f:ef:c4:66:cb:7f:a2:50:d2:ae:fc:8d:
                    83:07:b1:50:6f:f4:59:35:f5:bb:5e:6c:af:94:62:
                    1e:e9:52:2b:95:8b:dc:c5:67:d4:51:28:b1:b8:4d:
                    4c:ce:13:ea:a8:2d:6b:e3:ba:a6:2f:ce:dc:bb:5a:
                    35:06:b6:7d:52:c5:fe:d8:c3:77:5a:65:c9:3e:0f:
                    6a:9a:76:07:99:9e:48:e0:7a:41:06:55:43:7f:15:
                    c0:38:67:61:87:c3:4f:4e:64:c9:c5:8c:6c:40:d3:
                    ad:57:9c:ed:26:e6:b4:98:51:84:e0:83:ab:4e:ba:
                    e5:5b:c9:69:a0:f3:3e:e4:fc:77:fc:18:af:47:f3:
                    6e:ab:b3:a9:ea:ed:52:ce:60:cb:86:b6:ed:0e:83:
                    a4:4d:6a:45:6f:27:1d:1c:35:cb:2e:e4:5b:73:c7:
                    16:52:f1:37:73:30:81:d5:74:80:f8:18:b9:35:31:
                    1e:72:2f:ed:56:1e:ca:d5:b3:52:4e:13:63:7c:02:
                    c1:a5:d8:37:f4:97:eb:fd:04:37:2b:80:18:5c:e1:
                    0b:67:50:37:b8:ec:63:78:5f:c6:c2:3d:02:b3:d3:
                    8d:a1:2c:b3:9c:fb:89:38:9a:78:45:5d:ef:38:09:
                    bd:6e:38:48:d4:ea:62:e2:dc:c9:26:03:ed:81:fe:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:46:2A:45:3B:BD:99:0C:62:E7:B2:B1:20:BC:21:A7:35:9C:BF
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e35332e34302e302f32312d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:ab:16:ff:d3:ba:c1:ea:06:27:17:da:31:f0:6e:a4:f5:84:
         28:d0:2a:9c:a5:20:82:13:fc:c1:92:a7:49:f0:a5:a4:c5:46:
         6f:6f:d5:59:48:39:41:8a:c4:ab:b6:aa:9b:8d:c8:49:49:6d:
         31:d5:e8:a1:71:86:8f:3a:a3:b7:d1:2e:7b:a9:fd:41:31:e3:
         8f:7f:e6:2b:36:7d:0f:f5:f4:56:d8:3d:f5:df:bd:cd:c9:17:
         32:6d:2a:d7:07:cc:6f:31:54:6a:2c:c2:0b:0a:8a:80:59:a9:
         46:0c:09:25:a0:6f:1d:0f:98:6d:33:ca:2a:dc:14:8e:7e:83:
         90:f9:da:30:47:87:b4:cf:eb:26:d0:16:8f:d8:c4:46:cb:47:
         1e:ad:bc:58:44:17:cc:0b:a0:8f:29:e2:31:f0:10:01:9e:21:
         83:02:83:97:4a:65:b6:41:49:92:57:e4:49:c1:c9:c8:a9:ea:
         cd:4d:f7:55:95:41:c6:4a:d6:95:0f:3f:51:42:7d:64:f6:73:
         0b:51:b1:d0:39:01:be:04:cb:06:96:c2:e3:2a:71:70:82:43:
         07:34:fa:1a:16:3e:4e:8c:11:b7:d7:cd:de:98:66:8e:66:66:
         1a:91:1d:ee:63:5c:76:18:36:69:81:e8:93:81:22:af:db:8f:
         02:da:e3:3a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUK/iJLVja6Xc/8t1ZHgIAHaGOs9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAzNTBaFw0yNjA5MzAyMjA4NTBaMDMxMTAvBgNV
BAMTKDQ5QUY0NjJBNDUzQkJEOTkwQzYyRTdCMkIxMjBCQzIxQTczNTlDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQWU/vxGbLf6JQ0q78jYMHsVBv
9Fk19btebK+UYh7pUiuVi9zFZ9RRKLG4TUzOE+qoLWvjuqYvzty7WjUGtn1Sxf7Y
w3daZck+D2qadgeZnkjgekEGVUN/FcA4Z2GHw09OZMnFjGxA061XnO0m5rSYUYTg
g6tOuuVbyWmg8z7k/Hf8GK9H826rs6nq7VLOYMuGtu0Og6RNakVvJx0cNcsu5Ftz
xxZS8TdzMIHVdID4GLk1MR5yL+1WHsrVs1JOE2N8AsGl2Df0l+v9BDcrgBhc4Qtn
UDe47GN4X8bCPQKz042hLLOc+4k4mnhFXe84Cb1uOEjU6mLi3MkmA+2B/qUXAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUSa9GKkU7vZkMYueysSC8Iac1nL8wHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
NzM3MmUzNTMzMmUzNDMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDsTUoMA0GCSqGSIb3DQEBCwUAA4IBAQBbqxb/07rB6gYn
F9ox8G6k9YQo0CqcpSCCE/zBkqdJ8KWkxUZvb9VZSDlBisSrtqqbjchJSW0x1eih
cYaPOqO30S57qf1BMeOPf+YrNn0P9fRW2D31373NyRcybSrXB8xvMVRqLMILCoqA
WalGDAkloG8dD5htM8oq3BSOfoOQ+dowR4e0z+sm0BaP2MRGy0cerbxYRBfMC6CP
KeIx8BABniGDAoOXSmW2QUmSV+RJwcnIqerNTfdVlUHGStaVDz9RQn1k9nMLUbHQ
OQG+BMsGlsLjKnFwgkMHNPoaFj5OjBG3183emGaOZmYakR3uY1x2GDZpgeiTgSKv
248C2uM6
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:08 2025 by rpki-client