Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a323830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a323830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          zpCjxgtvaGfvQssQ22klcrMmg4PGzfRoqKKs33/hINM=
Subject key identifier:   F0:55:FF:B6:8F:1B:CF:74:D3:C8:BC:53:4D:0C:65:D8:53:63:4D:62
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       34BE1FDEE7B9355889ECDA0B1AB9C27178E3E0F0
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a323830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:53 +0000
ROA not before:           Wed 01 Oct 2025 22:03:53 +0000
ROA not after:            Wed 30 Sep 2026 22:08:53 +0000
asID:                     273683
IP address blocks:        2804:8aa4:2800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:be:1f:de:e7:b9:35:58:89:ec:da:0b:1a:b9:c2:71:78:e3:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:53 2025 GMT
            Not After : Sep 30 22:08:53 2026 GMT
        Subject: CN=F055FFB68F1BCF74D3C8BC534D0C65D853634D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:4d:d3:1f:b8:0b:66:71:f9:06:d7:1d:29:
                    59:0a:79:f6:87:b5:b1:aa:33:8c:7c:bc:71:c9:5e:
                    d6:a6:62:8d:f6:0d:bf:bf:77:06:ad:96:2f:eb:97:
                    b7:5d:eb:d1:e4:d8:57:f4:2f:5b:79:01:b1:9d:b1:
                    27:1a:ff:32:d1:2c:1c:c2:b0:3a:59:e3:f3:ab:3f:
                    61:d7:45:a3:20:a1:61:30:36:82:92:da:4b:20:ff:
                    6a:bb:b9:c2:bb:17:1b:9b:aa:30:d1:ae:ac:ed:b8:
                    c5:04:d6:ef:f2:60:85:98:04:bc:17:90:04:a1:bf:
                    cc:91:4c:b1:6c:dd:ad:f5:8e:90:6c:2e:9b:c1:db:
                    4d:6b:e7:ec:c5:7b:fa:8c:e8:ad:5f:74:2b:56:09:
                    90:31:9f:3a:0c:c0:2d:66:e2:1f:91:eb:e8:19:68:
                    bb:7c:cd:72:0f:4d:63:c6:1e:1d:0b:a0:54:90:d0:
                    90:ca:d0:f0:ce:f4:56:35:5e:07:b4:61:ef:c9:e4:
                    b2:e4:44:f4:87:7e:17:38:ab:66:73:75:68:c3:9c:
                    73:92:c2:8c:cd:87:bc:f1:de:84:6a:bd:5a:f2:6d:
                    e6:d3:f9:75:6d:20:b5:9d:f5:7b:27:d5:16:d5:bf:
                    4f:cf:f2:15:5d:92:fd:59:a9:d4:6b:7e:ea:a0:ed:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:FF:B6:8F:1B:CF:74:D3:C8:BC:53:4D:0C:65:D8:53:63:4D:62
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a323830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:7c:85:f2:83:2f:18:ee:56:f2:79:23:55:f1:41:4c:fb:
         b2:93:59:c1:50:f4:14:8d:38:58:4a:46:72:04:74:fb:31:31:
         81:96:c5:4b:5f:bc:b6:38:e5:5b:95:b9:8a:bc:19:27:21:27:
         22:c5:e0:fe:d3:dc:b9:13:13:63:f4:f6:ab:00:08:11:d5:2e:
         9e:8d:87:3e:ae:ee:f3:bd:d7:33:09:8d:2c:ef:aa:d7:22:9d:
         56:24:40:65:82:09:4c:ed:f2:6a:4e:8b:79:96:96:5f:c6:32:
         6a:b3:89:f5:31:e9:ad:e8:d3:a2:d7:f9:fc:9d:89:18:70:b3:
         3e:20:4e:90:ee:ec:82:d6:dc:2d:b6:55:f3:d3:b4:cb:b9:51:
         53:1f:de:f2:f3:e7:b9:aa:e2:8d:35:db:71:b0:af:3a:d0:ea:
         61:37:90:79:66:4f:85:5e:6e:a8:f8:05:94:7c:4b:5a:db:95:
         cd:0d:79:0b:fe:62:00:82:2e:d8:be:98:70:56:fc:aa:09:89:
         98:a5:a9:9a:60:be:05:79:56:12:fc:06:9a:1c:b9:57:f5:61:
         bc:22:b5:c8:86:b9:d4:75:72:c5:84:ee:cc:97:82:f1:da:b7:
         bc:bc:29:b5:21:d2:ef:fd:6a:90:d6:41:0c:95:e6:44:56:5d:
         13:7a:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:11:08 2025 by rpki-client