Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132302e302f32322d3234203d3e20323733363833.roa
File:                     3138392e382e3132302e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          0aw7bUUb1Pci6lPhjTgLEE/humfT06/VywzKR0CRq+s=
Subject key identifier:   19:68:85:3E:8F:B2:E3:C9:78:7C:57:C1:B2:76:E1:0A:19:F6:A1:30
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       11B3109CB0ABAE9D5C5C0DF690EFE7D0E7218517
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132302e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:59 +0000
ROA not before:           Wed 01 Oct 2025 22:02:59 +0000
ROA not after:            Wed 30 Sep 2026 22:07:59 +0000
asID:                     273683
IP address blocks:        189.8.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b3:10:9c:b0:ab:ae:9d:5c:5c:0d:f6:90:ef:e7:d0:e7:21:85:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:59 2025 GMT
            Not After : Sep 30 22:07:59 2026 GMT
        Subject: CN=1968853E8FB2E3C9787C57C1B276E10A19F6A130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:9f:b6:aa:52:a9:c6:8f:88:e7:3d:21:1d:
                    76:b5:98:44:2b:ac:cb:74:50:b2:de:d9:29:e8:d5:
                    fd:1e:1c:b2:72:19:83:b7:bc:d1:ad:30:56:07:88:
                    0a:9e:78:c2:87:d6:a5:96:52:20:46:ee:ae:4d:03:
                    a9:20:ce:f8:4b:a2:2b:dd:5b:11:b5:81:c2:e4:dd:
                    7c:d5:8b:4d:84:c8:cc:3e:37:52:fe:28:da:22:c9:
                    8f:46:5b:81:d1:34:6c:5d:f3:28:30:0b:e1:43:9d:
                    39:a7:9f:a9:2a:91:65:0d:32:dd:04:be:42:67:11:
                    0c:16:28:09:30:c4:23:9d:b4:f7:0f:39:53:2f:55:
                    ed:34:c2:8d:47:84:35:a2:4d:1f:c9:ac:2f:f4:10:
                    ff:7b:5b:db:dc:60:77:38:e6:35:4d:d3:05:83:9f:
                    1f:70:59:ca:a1:07:b5:07:06:88:50:d4:7d:0e:28:
                    ba:97:da:eb:cb:78:2c:94:68:11:63:b0:1e:53:02:
                    b6:c2:ac:e7:74:e6:1c:fe:16:8e:1e:d5:8d:3b:44:
                    de:b9:a9:5e:4f:1e:31:3e:20:c5:2f:2e:8e:47:60:
                    a9:0f:bb:0f:e8:bb:e5:e0:5b:98:a6:93:f5:9d:8b:
                    cd:45:a9:db:ed:cf:d7:1e:d3:6c:e3:15:a1:eb:49:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:85:3E:8F:B2:E3:C9:78:7C:57:C1:B2:76:E1:0A:19:F6:A1:30
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138392e382e3132302e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:aa:44:1e:11:f2:97:5b:6b:4a:fb:70:b8:05:60:0c:e4:e0:
         53:9e:2e:ef:cc:ed:5a:67:c5:77:46:0a:6b:e6:8c:9d:81:6d:
         8b:01:c2:b8:dd:37:d8:7d:8a:32:a7:43:0c:24:a8:43:51:e8:
         a7:89:66:d0:46:e3:cb:bf:4a:b7:56:e8:53:0c:c4:44:a4:8b:
         2e:2c:0b:c4:6a:52:5c:94:66:34:95:eb:ca:79:cd:8d:79:bb:
         e2:58:a4:06:c3:08:e1:13:38:37:42:2d:04:96:82:75:a4:ea:
         dc:f5:63:7a:3f:9c:e4:2b:b1:7d:2b:4c:24:84:ba:68:70:d0:
         43:f9:0e:86:72:3a:64:ef:83:16:34:b3:35:ad:98:df:70:1b:
         5f:1d:e3:06:fb:60:ac:0d:6c:f6:1f:d5:f6:3d:f3:ec:3e:2c:
         43:d5:bc:eb:3f:33:e0:b7:ad:48:d4:ab:c8:26:f7:ca:3a:0f:
         f1:ab:90:94:de:45:03:74:9c:33:bb:1e:45:e2:07:85:17:10:
         09:92:a8:b0:9c:97:01:78:4e:df:2b:4c:37:4a:5b:f6:de:bf:
         e1:cf:d5:d4:83:7f:ed:18:5e:d4:01:b2:b3:19:35:79:48:59:
         8b:fc:e3:42:cf:10:e2:20:23:94:9e:de:1a:87:90:89:f1:20:
         26:d0:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:49 2025 by rpki-client