Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3234203d3e20323733363833.roa
File:                     3138372e3132312e3134342e302f32312d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          PgbWkp/I/OQEQZIuYLB697jRNqdtZ23VvJDC/FDMhlw=
Subject key identifier:   DC:99:BC:12:B2:41:45:C8:0B:3C:06:65:0E:2C:FB:E4:9F:12:0C:39
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0A3FF3AA7FF9166ED7F02D3F0F199808A5DD1ECB
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:46 +0000
ROA not before:           Wed 01 Oct 2025 22:03:46 +0000
ROA not after:            Wed 30 Sep 2026 22:08:46 +0000
asID:                     273683
IP address blocks:        187.121.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3f:f3:aa:7f:f9:16:6e:d7:f0:2d:3f:0f:19:98:08:a5:dd:1e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:46 2025 GMT
            Not After : Sep 30 22:08:46 2026 GMT
        Subject: CN=DC99BC12B24145C80B3C06650E2CFBE49F120C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:56:ad:29:6b:8a:71:24:1a:32:56:71:d7:
                    f9:b9:52:82:18:eb:5c:98:1f:64:28:2c:b7:be:3d:
                    8a:15:1b:3f:6e:20:45:d1:9f:a2:c1:81:30:e8:f6:
                    ea:21:2e:55:2e:94:6d:c9:ce:c1:ee:b2:61:94:e5:
                    37:b7:ea:8c:85:23:00:0d:13:eb:c5:39:63:0f:d4:
                    bc:60:aa:47:7c:7d:e2:35:cc:c7:74:24:75:5e:f9:
                    71:61:07:31:5d:c5:7f:1f:ac:78:19:de:a1:14:8d:
                    59:3e:e2:a2:ca:17:37:57:a0:fe:5b:7e:f1:12:9b:
                    60:14:c3:4e:94:65:47:63:64:4b:c8:61:cb:3a:e0:
                    29:05:26:ea:dc:c5:84:a5:3d:14:a1:24:85:51:72:
                    77:20:60:5d:87:c6:29:19:5f:ce:ae:9e:ca:4a:5e:
                    7c:56:5d:08:37:6c:88:36:54:35:1d:d2:aa:15:15:
                    4e:57:3a:50:f7:3a:f7:63:c4:4f:65:75:ec:c4:eb:
                    10:2c:92:ae:8f:80:4e:dc:65:23:b4:e5:91:5d:d3:
                    8d:cd:e2:7c:4f:c4:29:18:2e:ba:74:b8:fd:51:0f:
                    eb:98:96:8b:e5:85:84:4e:ac:70:0c:29:60:33:45:
                    71:bc:d8:ff:1c:ae:5a:7a:f1:85:72:47:4a:43:1b:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:99:BC:12:B2:41:45:C8:0B:3C:06:65:0E:2C:FB:E4:9F:12:0C:39
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:06:7c:98:27:70:4a:fb:73:7e:c3:45:1b:f7:02:7e:73:
         5f:db:50:cb:cb:b8:22:e8:24:54:02:d9:a4:09:03:e0:be:57:
         e4:1e:03:ed:c1:23:88:75:56:92:68:9d:46:db:1b:72:f0:63:
         f5:c1:e6:38:30:e3:cf:4c:3d:ad:ad:9c:b2:10:8a:d9:6b:90:
         fe:08:1a:7c:c0:fa:8c:d9:7a:26:76:e8:c6:7a:be:6a:b8:7f:
         d4:9b:89:3f:fa:bc:a0:77:56:db:90:82:03:63:e0:58:2b:56:
         4c:aa:73:01:a0:54:62:fb:4e:e7:52:e2:ac:86:21:ce:8a:2c:
         7e:59:20:9b:1e:05:4b:7c:99:7b:66:05:be:30:ee:ef:24:17:
         f2:36:bf:4d:dc:c5:97:f5:3f:bf:bd:46:bc:93:80:3c:ab:3e:
         5a:11:31:98:a1:ca:99:57:f7:ff:5f:3f:f1:6b:9d:7f:c4:b3:
         25:ee:f9:4d:d0:1b:52:a9:fb:59:a6:fa:09:72:54:03:5a:e8:
         8a:ef:d3:f8:31:cc:4e:4e:93:5b:9f:8f:a8:1d:2f:75:20:b9:
         34:05:2b:f7:49:48:b9:f7:8a:e6:a5:d2:a4:89:1f:cf:95:bf:
         fc:aa:46:db:f7:28:3b:f8:55:70:90:6c:2e:7e:de:ba:19:2a:
         6a:4c:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:56 2025 by rpki-client