Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa
File:                     3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          cCJgz2DwwOr5RAjKGNBIRWvnwOMgJgbMjlfZ8wCqkec=
Subject key identifier:   C8:C4:49:35:02:30:2E:F4:21:96:92:72:B7:EA:99:DC:0C:50:AD:B1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4C0B21CCD011424E8F96279A639EFEB4511AFDB8
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:00 +0000
ROA not before:           Wed 01 Oct 2025 22:03:00 +0000
ROA not after:            Wed 30 Sep 2026 22:08:00 +0000
asID:                     273683
IP address blocks:        177.84.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0b:21:cc:d0:11:42:4e:8f:96:27:9a:63:9e:fe:b4:51:1a:fd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:00 2025 GMT
            Not After : Sep 30 22:08:00 2026 GMT
        Subject: CN=C8C4493502302EF421969272B7EA99DC0C50ADB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:73:5b:45:8e:b3:65:3a:b8:be:b5:e7:92:
                    fe:2c:e2:ab:c2:e3:9e:43:01:bb:46:c2:f9:1f:a9:
                    2e:8d:b0:e4:dc:ea:e1:0a:26:0e:f8:8e:db:1e:fb:
                    3f:ad:0e:59:62:c0:98:26:37:2c:ce:5b:21:1b:17:
                    48:3a:73:37:44:22:ba:f9:12:7e:6e:20:1e:c9:44:
                    9f:3f:ca:b0:48:5c:94:a0:b9:be:25:0b:93:99:2d:
                    e5:7f:70:bd:03:50:a6:64:e6:c5:d0:e9:31:7c:eb:
                    8d:8b:4a:dd:27:55:42:b8:93:77:2d:f2:4b:50:8e:
                    41:70:a4:51:5c:2e:2d:cc:5a:bc:1d:85:22:17:cc:
                    0a:92:7f:04:29:22:b1:48:80:4e:74:18:a8:f1:fe:
                    be:d7:49:03:67:49:82:f7:b8:ba:da:c8:13:4c:1f:
                    aa:8f:50:0c:21:73:64:8a:28:b0:bc:c5:38:07:0c:
                    24:c6:91:fd:e4:0a:6f:b1:36:f7:31:e8:ad:5c:75:
                    04:0e:b0:72:69:b4:25:02:4e:95:d7:23:14:c1:e5:
                    7b:df:64:31:4f:f6:60:1f:b0:dc:70:72:9d:9d:9f:
                    15:ad:df:c7:72:61:b9:e6:f7:54:be:84:c7:cb:91:
                    e1:f1:f6:b2:cc:2f:b5:c9:54:6c:d3:4a:89:55:06:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:49:35:02:30:2E:F4:21:96:92:72:B7:EA:99:DC:0C:50:AD:B1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233372e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:1d:e6:52:66:b3:85:59:06:df:54:d5:03:91:3a:89:92:
         d8:7a:e8:0a:18:80:ab:b4:c1:da:11:b8:c0:60:7f:b4:25:05:
         83:20:ce:5e:d7:15:70:6e:19:19:aa:8f:d5:63:c7:ec:70:f5:
         70:e2:c7:99:cf:ff:ff:76:2d:f5:7c:8a:b9:6c:df:88:ab:df:
         fd:66:89:9d:36:71:d2:13:38:5c:c0:fb:fb:d6:43:73:f5:cc:
         36:44:5c:38:9f:c7:39:ce:ff:7c:9d:c2:2d:51:6f:ad:22:0b:
         83:41:b3:75:03:36:42:d1:9f:a8:27:81:93:56:e3:7f:1b:1a:
         86:8c:a9:ec:e5:13:94:39:f1:1e:ac:4e:87:70:7c:f2:34:ce:
         3e:4a:11:73:69:b8:56:30:da:a0:2d:c6:e1:42:e1:cf:fd:3d:
         d1:28:a8:a2:26:f5:96:f2:ec:2a:e5:15:56:33:e8:bd:93:73:
         44:02:4f:5b:5c:7e:f1:9c:2a:2a:61:04:4c:24:98:de:83:46:
         7b:1a:df:8f:5d:b6:e8:05:5b:24:8e:16:72:a9:1a:3e:f9:91:
         05:77:ff:6e:f2:ad:40:b6:15:9e:dd:46:c6:36:17:07:e1:93:
         bb:2d:f6:2e:d7:07:01:09:1a:62:4b:b9:ed:71:98:a9:52:22:
         5b:61:54:e6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTAshzNARQk6PlieaY57+tFEa/bgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAzMDBaFw0yNjA5MzAyMjA4MDBaMDMxMTAvBgNV
BAMTKEM4QzQ0OTM1MDIzMDJFRjQyMTk2OTI3MkI3RUE5OURDMEM1MEFEQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOHNbRY6zZTq4vrXnkv4s4qvC
455DAbtGwvkfqS6NsOTc6uEKJg74jtse+z+tDlliwJgmNyzOWyEbF0g6czdEIrr5
En5uIB7JRJ8/yrBIXJSgub4lC5OZLeV/cL0DUKZk5sXQ6TF8642LSt0nVUK4k3ct
8ktQjkFwpFFcLi3MWrwdhSIXzAqSfwQpIrFIgE50GKjx/r7XSQNnSYL3uLrayBNM
H6qPUAwhc2SKKLC8xTgHDCTGkf3kCm+xNvcx6K1cdQQOsHJptCUCTpXXIxTB5Xvf
ZDFP9mAfsNxwcp2dnxWt38dyYbnm91S+hMfLkeHx9rLML7XJVGzTSolVBtSpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyMRJNQIwLvQhlpJyt+qZ3AxQrbEwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
NzM3MmUzODM0MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxVO0wDQYJKoZIhvcNAQELBQADggEBAInWHeZSZrOF
WQbfVNUDkTqJkth66AoYgKu0wdoRuMBgf7QlBYMgzl7XFXBuGRmqj9Vjx+xw9XDi
x5nP//92LfV8irls34ir3/1miZ02cdITOFzA+/vWQ3P1zDZEXDifxznO/3ydwi1R
b60iC4NBs3UDNkLRn6gngZNW438bGoaMqezlE5Q58R6sTodwfPI0zj5KEXNpuFYw
2qAtxuFC4c/9PdEoqKIm9Zby7CrlFVYz6L2Tc0QCT1tcfvGcKiphBEwkmN6DRnsa
349dtugFWySOFnKpGj75kQV3/27yrUC2FZ7dRsY2Fwfhk7st9i7XBwEJGmJLue1x
mKlSIlthVOY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:57 2025 by rpki-client