Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3134382e302f32322d3234203d3e20323733363833.roa
File:                     3139302e3131322e3134382e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          9Q6ZbMknRCIPtII1cduMJMw5mlELwRFKO3dNtbQMnA4=
Subject key identifier:   27:1D:FB:BF:B9:8A:EA:F0:D9:C1:F0:41:39:55:8D:85:05:B2:BB:1E
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       2C0972534363A9F1CB5E0B9F28765EE69B3B4A4E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3134382e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:09:03 +0000
ROA not before:           Wed 01 Oct 2025 22:04:03 +0000
ROA not after:            Wed 30 Sep 2026 22:09:03 +0000
asID:                     273683
IP address blocks:        190.112.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:09:72:53:43:63:a9:f1:cb:5e:0b:9f:28:76:5e:e6:9b:3b:4a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:04:03 2025 GMT
            Not After : Sep 30 22:09:03 2026 GMT
        Subject: CN=271DFBBFB98AEAF0D9C1F04139558D8505B2BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:53:4c:af:ec:a2:b3:b0:2c:de:36:44:7f:
                    c8:8b:f6:5b:d0:de:e2:b8:78:0d:a6:a2:23:90:2d:
                    e2:a0:26:2c:e2:6c:21:d2:48:30:5d:f9:7f:c6:dc:
                    ad:f3:5d:95:fd:82:c3:7c:61:0a:d4:75:e8:94:a0:
                    4a:9b:13:4f:d7:c7:62:96:47:0d:57:b1:c2:a6:97:
                    05:a2:cb:2b:d9:66:37:3c:db:57:d3:50:f6:de:36:
                    0d:3f:53:f9:bc:a8:b8:26:3b:96:91:39:50:2e:63:
                    2e:d0:aa:bb:ee:dc:ce:31:7a:94:fd:40:c8:b5:60:
                    8d:c5:43:8e:2d:1f:d8:67:59:59:05:66:76:c8:b1:
                    55:09:2e:a7:6a:f6:4a:ec:b4:01:35:10:98:51:8d:
                    a0:9d:ea:bc:24:c4:e9:02:7c:92:06:10:6c:cc:b4:
                    06:bd:80:8c:9b:2a:d0:90:ee:f7:60:35:78:e8:3c:
                    43:cd:da:e3:8a:c1:e8:70:c7:e9:4d:e0:a8:2e:47:
                    1b:02:23:d1:70:13:7f:0d:3e:11:a0:a8:22:40:29:
                    c8:dd:4e:cb:c4:c0:13:b2:11:d7:e0:81:7d:18:7f:
                    bf:2f:0e:41:69:f5:b8:63:6b:51:1a:75:ce:4f:9b:
                    24:b2:3b:1b:4e:c9:f3:79:5c:5f:0e:4e:2c:2f:ec:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:FB:BF:B9:8A:EA:F0:D9:C1:F0:41:39:55:8D:85:05:B2:BB:1E
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3139302e3131322e3134382e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:32:49:7f:d8:09:7f:7d:d6:b5:9e:de:b0:0e:21:66:39:
         fe:0c:53:fe:3a:b8:a3:90:a9:81:24:c4:50:e0:ae:8c:c1:d1:
         f7:cf:bb:b8:eb:f5:d8:11:38:89:7d:77:dd:25:d7:2c:5d:e9:
         be:fe:23:f6:8a:39:cd:5f:d9:72:ae:81:9f:b5:69:94:44:1d:
         88:5e:d9:12:d9:06:de:b2:5a:6d:e3:24:ee:b2:ed:89:dd:9c:
         a0:c6:e4:79:a6:94:bd:9a:3e:22:9d:f3:a8:43:7e:e4:5a:b5:
         90:28:5b:e5:ab:11:95:1d:3f:aa:3d:e0:b0:ee:43:40:d2:5d:
         8a:82:92:ed:d1:3b:00:e4:83:f1:5d:9c:8e:cf:9b:14:d4:e3:
         16:ca:0d:3a:f9:06:0f:d9:b8:91:71:55:49:45:17:d9:74:b3:
         17:2b:2b:4a:ba:ab:ce:b8:25:7e:57:75:42:18:41:1d:e7:9e:
         d8:6b:6c:97:aa:cf:97:8a:ac:27:12:b7:6f:11:37:e1:7e:9b:
         30:ea:be:78:2e:18:8b:43:53:a3:49:90:95:df:88:af:56:e1:
         49:6d:cc:3b:13:54:e5:fc:af:34:ae:4d:ff:00:37:59:35:d3:
         8e:81:74:38:36:f2:69:b3:f8:93:e3:7b:59:70:0a:9b:2f:3c:
         f4:c6:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:56:58 2025 by rpki-client