Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32332d3233203d3e20323733363833.roa
File:                     3137372e38342e3233382e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          WGAsvVwRxe5h289E7CGwZySbWz9Yz9aBOGzxvCRDUAs=
Subject key identifier:   28:D7:F5:AC:C4:34:70:D4:5B:39:03:29:3E:B7:54:E8:85:59:8B:99
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7B043A0926480CA9585E41023BB29A24DA3421E6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32332d3233203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:34 +0000
ROA not before:           Wed 01 Oct 2025 22:03:34 +0000
ROA not after:            Wed 30 Sep 2026 22:08:34 +0000
asID:                     273683
IP address blocks:        177.84.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:3a:09:26:48:0c:a9:58:5e:41:02:3b:b2:9a:24:da:34:21:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:34 2025 GMT
            Not After : Sep 30 22:08:34 2026 GMT
        Subject: CN=28D7F5ACC43470D45B3903293EB754E885598B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:87:8b:59:10:9b:51:c2:00:49:f2:e7:fe:
                    d8:2e:73:12:b8:fd:49:83:53:18:07:ce:64:c7:fe:
                    fd:bf:8c:fe:ff:33:8e:2a:79:b4:b0:f1:0f:41:45:
                    bb:a8:84:59:8e:11:82:f4:91:5a:cd:90:43:28:3b:
                    f3:ea:a9:13:06:0a:8e:53:be:e0:b0:ee:9c:b3:df:
                    bd:27:6b:26:24:17:ef:04:19:22:7c:f6:dc:58:bc:
                    ec:8c:81:87:9b:2b:d2:b3:83:4d:4a:d2:4c:3d:00:
                    6a:18:25:27:5a:9f:b2:7f:0f:05:13:83:ff:6f:1c:
                    8b:27:59:c1:8b:ec:fd:e5:55:e6:13:02:c9:a9:73:
                    46:ee:a1:8a:ed:66:18:42:00:ff:c9:ae:f9:51:66:
                    d3:ec:30:ff:31:60:19:2b:ef:d6:36:df:d5:35:26:
                    32:98:97:4e:9e:51:48:0b:4e:ec:d9:09:43:4f:59:
                    d9:46:cd:c7:ae:0f:cf:60:5a:de:99:ba:17:45:69:
                    ce:01:cc:83:f8:24:82:1f:5a:ea:79:ac:6a:da:44:
                    e6:8c:97:b3:47:91:03:5e:cd:fa:bc:59:9c:59:72:
                    44:01:d8:72:02:8f:d7:8d:f2:28:a9:9a:83:db:9c:
                    ea:00:d0:48:17:d4:d0:13:e2:b3:9e:54:e6:3d:63:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:F5:AC:C4:34:70:D4:5B:39:03:29:3E:B7:54:E8:85:59:8B:99
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:12:21:55:fd:81:76:8e:37:89:45:8d:a5:ca:de:1d:3a:a2:
         f5:02:6e:58:7f:23:a3:3e:b8:f8:ba:e5:a0:78:eb:23:d8:dc:
         24:7c:aa:9f:11:e4:98:6c:d2:47:00:1c:b8:38:12:2c:cc:53:
         91:a7:a8:7a:bd:22:27:f6:13:74:59:0a:06:99:b4:8a:d8:0b:
         ee:00:35:0b:7d:08:fc:fd:e8:4e:dd:c7:cd:8e:26:bf:6d:53:
         11:89:6e:0f:44:d1:7a:87:86:91:3c:b6:8b:cf:2b:69:3b:89:
         b0:2c:6a:c0:32:58:6f:5a:f1:9b:4d:c7:b7:87:67:71:f4:de:
         51:a9:a5:7e:fc:b8:2d:89:45:32:1f:23:d0:19:2c:e8:42:a4:
         26:27:e8:d5:ea:14:1d:d0:45:1f:32:84:66:35:9b:0e:61:9a:
         0b:fb:04:f6:76:3e:2f:03:5c:ae:5b:6e:1e:f9:2b:06:17:ed:
         b7:74:1e:1c:e2:87:3f:de:fc:50:fb:4d:79:95:c4:ba:2a:6d:
         d3:b3:6b:7f:fd:7a:44:70:eb:72:df:89:89:81:12:5b:9e:4c:
         14:b3:b4:1b:16:46:2a:89:6b:90:62:58:ae:02:f9:21:7c:74:
         08:22:02:3a:ab:04:5c:d1:18:80:6f:2c:7a:6c:e0:a6:61:00:
         33:52:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:05 2025 by rpki-client