Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233362e302f32332d3233203d3e20323733363833.roa
File:                     3137372e38342e3233362e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          /x1kCGz23ofOYs5I+Hc0JlaBmk/AD0gqZgVELWBa0vs=
Subject key identifier:   E2:C9:C8:23:A1:18:BA:8E:CA:E5:ED:78:40:51:54:AE:50:51:28:80
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7C99CE78163641BA130C7706391A21680150C0AD
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233362e302f32332d3233203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:41 +0000
ROA not before:           Wed 01 Oct 2025 22:03:41 +0000
ROA not after:            Wed 30 Sep 2026 22:08:41 +0000
asID:                     273683
IP address blocks:        177.84.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:99:ce:78:16:36:41:ba:13:0c:77:06:39:1a:21:68:01:50:c0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:41 2025 GMT
            Not After : Sep 30 22:08:41 2026 GMT
        Subject: CN=E2C9C823A118BA8ECAE5ED78405154AE50512880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:c9:61:b4:eb:f7:fa:71:45:df:38:35:55:
                    af:54:dc:1e:75:13:74:95:e8:01:50:a7:ce:14:78:
                    55:35:0c:73:97:22:01:45:f9:17:fe:5d:84:52:f6:
                    6e:5a:c5:3e:34:cb:ad:88:01:f5:77:6b:bb:1a:f4:
                    d6:42:d8:da:e3:f9:ea:fe:88:1a:36:b2:a7:4f:04:
                    56:79:f9:53:a1:83:cf:7c:de:8f:92:67:73:ed:ab:
                    c7:f6:69:f7:6b:ad:41:b9:16:2c:9c:f6:00:47:56:
                    af:35:df:e3:2f:31:50:88:f1:63:95:0b:7e:70:7c:
                    39:21:1b:b1:0d:27:77:b1:61:23:b2:39:f2:79:70:
                    e2:a2:0b:bb:0a:c4:06:f1:1e:2f:5b:c1:3e:3d:29:
                    ea:7a:ea:8a:fe:b8:04:2b:b5:29:c7:f1:44:25:41:
                    95:15:4a:3e:f1:88:07:bb:8c:39:f6:b1:39:11:30:
                    ce:9b:3a:1d:18:74:a5:71:63:e9:1c:27:b6:57:2e:
                    1f:a4:00:a9:d4:96:a1:d7:14:77:35:13:08:92:1d:
                    67:b4:0f:43:22:ca:63:7b:a3:64:9c:aa:7e:31:f2:
                    b9:a2:00:19:f3:66:57:e3:25:59:14:ec:7f:46:cf:
                    65:e8:3e:cb:47:88:e0:33:f2:d8:5f:2a:4e:bf:9d:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:C8:23:A1:18:BA:8E:CA:E5:ED:78:40:51:54:AE:50:51:28:80
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233362e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:03:d8:8a:15:18:7b:cc:08:a3:81:63:9e:ec:77:2e:18:
         b2:1c:b1:b7:4f:56:09:28:22:69:29:6e:42:82:f0:7c:3f:51:
         6c:8f:33:b7:46:3a:4b:5f:81:dc:d4:21:42:fb:47:69:45:8f:
         e1:ba:40:64:68:87:97:03:7a:02:0a:ad:69:75:e8:cf:be:67:
         07:54:da:9e:80:1e:9b:82:57:10:0b:4c:ce:3f:9e:dd:da:7c:
         1d:8c:9b:3c:0e:3c:b3:d4:fa:9d:b7:53:08:f4:1f:c2:35:1e:
         af:64:e8:69:f4:68:3a:c3:c6:7b:eb:64:93:1b:f7:08:8d:ee:
         f7:f8:8b:64:96:d1:00:64:55:4f:78:cf:5a:f6:49:d0:f3:76:
         ec:3d:25:c7:3b:13:df:3c:37:46:ca:0e:e2:cb:d8:ad:6a:74:
         f9:ca:02:f1:45:24:f5:10:ee:f8:3d:a4:ba:91:fa:5e:19:2e:
         02:ae:8c:af:02:8a:67:58:31:e0:a2:b3:44:1c:38:36:3f:55:
         27:bc:23:41:ad:3c:f5:cb:5d:f6:b6:cd:c4:6e:aa:b2:12:4d:
         7e:9e:2c:3c:c3:9b:99:f6:ba:6b:5b:91:ca:9d:00:fb:b7:fd:
         01:52:aa:1c:8f:12:93:2b:df:e9:73:dd:f4:d5:20:8a:4a:19:
         46:8d:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:09 2025 by rpki-client