Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa
File:                     3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          OA8j3dhSbX3+d6THkXyLckwkq4ZV93RciXsMaD2PW8g=
Subject key identifier:   C0:C0:10:09:30:D8:75:98:FE:82:F8:9D:78:6B:6E:08:14:56:B6:6B
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       5EB022D4D66A6751B85BCFE1805627B9D002BCBD
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:56 +0000
ROA not before:           Wed 01 Oct 2025 22:02:56 +0000
ROA not after:            Wed 30 Sep 2026 22:07:56 +0000
asID:                     273683
IP address blocks:        177.84.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b0:22:d4:d6:6a:67:51:b8:5b:cf:e1:80:56:27:b9:d0:02:bc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:56 2025 GMT
            Not After : Sep 30 22:07:56 2026 GMT
        Subject: CN=C0C0100930D87598FE82F89D786B6E081456B66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:76:36:57:17:02:a8:b9:f3:ac:6b:b5:ae:2e:
                    25:f4:24:43:ab:b7:c9:85:6e:ba:e8:eb:8a:bf:2a:
                    65:a4:ca:cb:4d:e3:9a:4c:c3:d5:93:1c:79:fb:1a:
                    80:8e:2c:47:f6:93:1e:02:47:35:d7:e9:37:96:fe:
                    84:61:8e:c9:70:f8:71:87:52:a8:8d:d9:19:6f:f9:
                    1b:de:60:f9:a0:15:56:09:46:12:f5:7f:b6:45:5e:
                    cc:10:a7:09:7f:db:04:73:ca:be:06:fa:00:df:3e:
                    96:82:58:b8:3c:b9:16:7d:4c:94:5a:f7:eb:66:cc:
                    cb:ed:29:9b:26:2b:1e:a9:2b:7c:df:f6:5a:5d:2d:
                    c9:17:29:a5:f1:8b:f8:ee:d8:58:11:b0:f8:18:19:
                    59:a4:37:1d:49:d7:6d:66:01:b6:cb:33:88:c0:cd:
                    c3:96:d3:7d:78:8d:4c:58:64:ae:bb:0a:49:c8:cc:
                    81:db:4b:87:7b:02:09:f7:4a:cb:10:e4:8b:f6:b7:
                    68:4a:3f:32:98:c9:9f:e1:82:ca:cf:46:cc:ef:75:
                    3b:12:d6:61:53:5a:b4:89:ed:ee:a2:8f:44:a8:6b:
                    40:2e:3e:e0:64:3d:cb:46:14:26:2f:37:7e:ce:10:
                    ec:78:66:97:f9:8d:d3:bf:3a:00:08:d9:0e:65:f4:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:10:09:30:D8:75:98:FE:82:F8:9D:78:6B:6E:08:14:56:B6:6B
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e38342e3233382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:63:fe:7b:06:82:19:c7:c3:bb:b5:c8:a8:e7:46:18:5b:44:
         19:77:01:c9:ad:8c:c5:21:0f:3d:ad:86:de:b3:9a:d9:64:b9:
         8b:1c:d1:eb:75:52:16:8b:cf:89:4c:95:70:3a:d6:59:ea:87:
         fe:d7:83:9e:63:5a:df:0b:ff:cf:0a:cb:e4:fb:24:18:6d:7f:
         45:47:a6:a3:eb:71:e3:e0:06:f5:9d:02:a4:b9:79:cf:8a:68:
         52:59:96:6c:2e:73:da:59:df:b4:29:be:9e:d2:b8:d8:f5:7c:
         e5:ca:51:51:9d:db:08:e4:c5:e0:59:2f:1e:ba:10:46:8e:a9:
         50:5e:c0:59:bd:94:5c:11:50:55:b0:ba:cd:76:f5:ac:1e:e8:
         25:a3:2a:ef:0f:0d:37:1a:2c:72:4d:d0:30:ff:33:8d:0d:d7:
         4f:a0:97:46:54:bc:5d:52:fd:0e:ae:1d:21:92:ae:66:1f:c0:
         48:38:3e:91:72:30:bb:2d:34:06:76:01:57:b7:70:bf:f5:a4:
         d1:39:76:bf:a0:97:54:66:cc:3f:62:84:0d:ac:88:df:28:65:
         75:46:b9:de:90:65:2b:da:0e:49:f6:57:d0:46:7c:89:d9:8a:
         6c:61:7a:4f:62:f0:ce:06:d2:36:91:6c:61:f0:76:3b:5d:80:
         70:da:47:30
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXrAi1NZqZ1G4W8/hgFYnudACvL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAyNTZaFw0yNjA5MzAyMjA3NTZaMDMxMTAvBgNV
BAMTKEMwQzAxMDA5MzBEODc1OThGRTgyRjg5RDc4NkI2RTA4MTQ1NkI2NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0djZXFwKoufOsa7WuLiX0JEOr
t8mFbrro64q/KmWkystN45pMw9WTHHn7GoCOLEf2kx4CRzXX6TeW/oRhjslw+HGH
UqiN2Rlv+RveYPmgFVYJRhL1f7ZFXswQpwl/2wRzyr4G+gDfPpaCWLg8uRZ9TJRa
9+tmzMvtKZsmKx6pK3zf9lpdLckXKaXxi/ju2FgRsPgYGVmkNx1J121mAbbLM4jA
zcOW0314jUxYZK67CknIzIHbS4d7Agn3SssQ5Iv2t2hKPzKYyZ/hgsrPRszvdTsS
1mFTWrSJ7e6ij0Soa0AuPuBkPctGFCYvN37OEOx4Zpf5jdO/OgAI2Q5l9OeXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUwMAQCTDYdZj+gvideGtuCBRWtmswHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
NzM3MmUzODM0MmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxVO4wDQYJKoZIhvcNAQELBQADggEBADNj/nsGghnH
w7u1yKjnRhhbRBl3AcmtjMUhDz2tht6zmtlkuYsc0et1UhaLz4lMlXA61lnqh/7X
g55jWt8L/88Ky+T7JBhtf0VHpqPrcePgBvWdAqS5ec+KaFJZlmwuc9pZ37Qpvp7S
uNj1fOXKUVGd2wjkxeBZLx66EEaOqVBewFm9lFwRUFWwus129awe6CWjKu8PDTca
LHJN0DD/M40N10+gl0ZUvF1S/Q6uHSGSrmYfwEg4PpFyMLstNAZ2AVe3cL/1pNE5
dr+gl1RmzD9ihA2siN8oZXVGud6QZSvaDkn2V9BGfInZimxhek9i8M4G0jaRbGHw
djtdgHDaRzA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:52 2025 by rpki-client