Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa
File:                     3137372e36372e32382e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          So/ttskUqw9mExz3SLxTmQYXdusUUeRUzsI0ABgGPWU=
Subject key identifier:   BC:D0:E7:E9:CF:CF:0F:0C:BF:39:D1:B8:86:91:2B:06:4E:50:B5:88
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7F561BA87DD7EFA137D00DDBD6A1D24927B24B7B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa
Signing time:             Wed 01 Oct 2025 22:08:21 +0000
ROA not before:           Wed 01 Oct 2025 22:03:21 +0000
ROA not after:            Wed 30 Sep 2026 22:08:21 +0000
asID:                     262324
IP address blocks:        177.67.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:56:1b:a8:7d:d7:ef:a1:37:d0:0d:db:d6:a1:d2:49:27:b2:4b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:21 2025 GMT
            Not After : Sep 30 22:08:21 2026 GMT
        Subject: CN=BCD0E7E9CFCF0F0CBF39D1B886912B064E50B588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:aa:7b:82:51:d0:20:57:81:e0:09:3c:f6:
                    64:eb:73:f7:df:5e:50:52:9f:b0:1d:ea:42:50:af:
                    94:0d:c7:bc:bd:bf:4a:0f:49:97:a1:85:49:bf:82:
                    bd:c7:02:18:03:24:a0:0d:da:8f:86:e8:41:71:09:
                    69:00:67:60:74:d7:1b:53:40:c3:97:ca:44:bf:a3:
                    fb:09:54:3c:c9:a1:23:1b:dd:c9:b3:54:0a:f3:85:
                    72:07:09:89:33:1e:92:a8:cc:47:2a:39:d5:b1:20:
                    74:77:a0:22:43:93:22:a1:5b:a3:5f:e1:98:b3:f5:
                    a3:0d:66:e6:4c:c5:65:2d:1b:ad:f8:af:c6:9f:f0:
                    ce:df:c5:94:d5:16:72:5c:3e:9c:a6:0a:2a:d8:bf:
                    33:ed:7e:c3:08:be:08:5d:c8:20:cb:11:18:d2:c4:
                    27:a3:b4:d5:c0:e7:5b:32:f9:ce:20:49:b2:58:0a:
                    f8:74:d6:9f:4d:cb:5c:67:02:f3:90:89:4f:13:dd:
                    5f:c9:98:7e:c1:42:d1:b2:95:54:b4:48:ad:1b:7b:
                    96:93:18:c1:d8:1b:9a:38:51:7f:41:5f:e7:1f:04:
                    b5:a6:6f:1d:54:f8:6b:46:5b:46:b0:44:ac:3e:90:
                    56:17:cc:59:86:cd:6b:5c:9b:f4:ee:41:8f:6e:4e:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D0:E7:E9:CF:CF:0F:0C:BF:39:D1:B8:86:91:2B:06:4E:50:B5:88
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:27:e0:c1:2e:bb:c3:d4:29:9d:2f:08:25:03:c2:14:f3:1e:
         99:d7:bc:ee:12:00:f5:4c:dd:c2:b6:d1:54:ab:14:11:56:af:
         fe:23:85:c6:85:e6:a7:52:41:91:54:53:1b:a3:7c:7d:29:c7:
         d8:e5:90:90:32:eb:e2:86:88:17:35:53:c6:fb:9f:e1:3f:83:
         9b:1d:e8:b7:57:ae:fa:6a:96:e8:05:6b:c0:8e:31:1d:a0:00:
         ed:d7:e0:ef:10:af:c3:88:ad:bd:cb:64:6a:2b:93:65:15:52:
         ff:d2:5a:16:80:96:61:40:28:9c:64:42:db:ea:d4:a1:b1:0c:
         87:e9:6d:ab:a8:65:2b:95:2f:fb:83:20:3a:b1:31:b6:cb:9b:
         ce:26:21:a6:b8:b6:6f:0a:72:51:26:91:cf:07:9a:c1:2f:46:
         c1:b3:5e:33:c4:a4:ed:c4:4d:b5:6f:40:31:cf:22:a1:cc:28:
         44:07:21:3e:88:c7:2a:5b:eb:a2:aa:99:a0:f4:4a:dd:63:14:
         d3:07:3a:96:bb:3d:09:d7:bf:30:6f:18:af:38:50:7c:3a:5a:
         68:cb:a5:b0:af:43:2f:56:33:34:18:75:e1:90:58:ec:0f:91:
         63:97:d2:04:ca:44:63:40:88:42:f2:bb:8e:a1:0b:7f:04:36:
         9c:37:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:10 2025 by rpki-client