Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          /rQEiDL5maCE6CF8eASq6UW8NYV+Re/SFCXyI3cfa60=
Subject key identifier:   0B:4D:1E:16:0B:3F:17:A4:60:1C:E7:42:9F:7E:05:3E:28:B5:74:0C
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       1244A6AADF03849B70CE3F889C71C79D5A0D491A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:49 +0000
ROA not before:           Wed 01 Oct 2025 22:03:49 +0000
ROA not after:            Wed 30 Sep 2026 22:08:49 +0000
asID:                     273683
IP address blocks:        2804:8aa4:1000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:44:a6:aa:df:03:84:9b:70:ce:3f:88:9c:71:c7:9d:5a:0d:49:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:49 2025 GMT
            Not After : Sep 30 22:08:49 2026 GMT
        Subject: CN=0B4D1E160B3F17A4601CE7429F7E053E28B5740C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:9d:a1:54:2f:30:45:8b:8f:15:b7:03:9d:
                    87:fa:d1:e1:27:4a:60:58:25:e6:56:f4:c6:08:f2:
                    c8:de:09:8b:d3:0a:b1:df:31:d2:6b:11:56:8b:7a:
                    d0:13:eb:d3:93:67:c3:d8:04:ac:c4:5f:fd:70:21:
                    a0:5d:87:b5:b4:cb:20:9b:bd:10:bc:47:cd:29:fa:
                    37:f9:aa:14:12:f8:76:50:58:dd:62:99:02:20:69:
                    08:8d:96:f2:d9:35:9f:37:7b:c2:d4:c9:fe:e1:16:
                    14:36:75:02:43:57:0a:5b:cb:c2:d3:e0:15:eb:a4:
                    0e:00:5c:48:5b:ee:29:a8:6c:dc:ae:ae:b5:80:79:
                    de:90:95:7f:31:5a:c8:48:bc:30:76:22:41:33:20:
                    71:38:9b:07:aa:74:25:91:bb:99:69:b7:b9:c4:4b:
                    5d:2c:68:56:06:74:47:e8:fd:db:27:e9:ab:10:e6:
                    b2:a2:3a:b4:53:64:1a:ee:ed:92:2e:b7:06:0f:91:
                    fe:2b:1d:0e:a1:6d:e2:70:88:0c:e0:60:20:9b:41:
                    03:15:49:ce:de:d0:10:11:0c:53:72:10:40:cf:ae:
                    c1:d1:99:88:48:7c:ae:2d:3b:07:f4:81:94:82:81:
                    a2:65:b4:97:45:d0:e3:96:fc:8f:b6:51:27:c1:08:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:1E:16:0B:3F:17:A4:60:1C:E7:42:9F:7E:05:3E:28:B5:74:0C
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a313030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         58:81:28:24:2b:b5:49:c3:c6:fe:c5:66:fc:67:7d:8e:c2:b2:
         47:50:c5:ae:31:53:30:43:16:57:05:86:08:a2:47:80:8c:46:
         c3:6e:79:08:9a:f1:6c:be:a2:ef:a6:72:c9:a7:7c:5f:11:fe:
         1e:02:d8:66:d2:a4:5b:3b:c8:39:c6:3c:2c:f4:6a:44:aa:bb:
         c8:e7:cd:67:47:64:b7:82:d5:60:be:9b:f7:79:51:af:ab:49:
         c9:a0:11:b6:1c:d2:11:dd:8a:f7:e1:f7:64:de:58:33:45:19:
         d4:ee:b7:9f:14:ae:ae:f4:b9:66:78:20:4a:fc:47:9d:b1:72:
         80:85:1e:98:25:ee:ca:c2:7e:91:88:a0:59:ac:01:70:3c:01:
         a5:53:69:a7:62:2d:e7:93:a5:7d:f0:b7:aa:ea:c3:24:6d:45:
         0a:99:b2:26:32:d6:fc:46:30:ac:0c:95:3f:f1:a9:51:a5:0c:
         a3:94:e1:f3:c8:53:d8:87:0e:97:65:bb:ff:e0:69:41:c9:50:
         26:1f:93:94:9b:f3:1a:25:c7:c1:ae:b6:04:44:1d:47:a3:e7:
         9e:2f:99:5d:d5:f6:37:d5:c1:45:9b:63:5a:91:5b:e4:73:41:
         70:cb:18:b1:31:45:88:3f:37:0b:b3:fd:20:8b:96:95:e0:78:
         95:04:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:33 2025 by rpki-client