Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          vM7D7/noSHLGNzPfLMSVDCm7cyIYSnEU0py+f819gwQ=
Subject key identifier:   7A:2F:FA:D5:EA:CC:2F:CD:2C:B8:5D:99:0B:47:69:60:DD:5D:59:01
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6EC026100F618C0B672A711DBCE6FFD77E13C857
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:47 +0000
ROA not before:           Wed 01 Oct 2025 22:02:47 +0000
ROA not after:            Wed 30 Sep 2026 22:07:47 +0000
asID:                     273683
IP address blocks:        2804:8aa4:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c0:26:10:0f:61:8c:0b:67:2a:71:1d:bc:e6:ff:d7:7e:13:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:47 2025 GMT
            Not After : Sep 30 22:07:47 2026 GMT
        Subject: CN=7A2FFAD5EACC2FCD2CB85D990B476960DD5D5901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:3e:ec:7f:17:7d:a2:e3:ee:0f:d8:d9:7e:
                    0a:b4:7d:76:6b:35:56:a9:6e:15:9e:a7:6b:15:b4:
                    43:fc:18:7d:46:c3:21:ac:0b:3e:fd:81:01:39:60:
                    00:7b:79:6b:47:5e:8b:c4:3f:07:03:dc:2a:fd:46:
                    9f:37:44:26:6e:a3:e8:f6:1f:34:27:b8:02:1e:bf:
                    02:14:cc:d8:04:38:19:df:c6:f9:ef:3b:6b:d1:37:
                    39:f9:e0:72:be:49:62:34:01:d2:ff:c2:2d:7e:0e:
                    70:d9:2e:8b:41:01:6d:e6:64:d2:4e:f5:27:bc:23:
                    4d:c6:40:0d:53:dc:db:69:0f:3f:34:38:54:3d:55:
                    2a:67:28:54:6e:cf:9c:e2:5e:a3:2a:1e:f3:21:34:
                    ac:a2:96:5a:97:bf:ee:46:ee:c0:e6:41:27:bc:04:
                    c9:63:73:b0:1a:4b:c1:04:ca:cc:71:0c:32:54:5f:
                    b7:7a:51:85:63:5a:f4:bc:72:a6:57:19:e8:6c:1e:
                    05:68:57:9c:87:5b:d5:74:b4:e0:fe:e5:e4:7e:34:
                    5f:d4:85:a0:9b:51:56:2f:87:3e:dd:76:da:0b:e4:
                    97:6b:cc:b4:54:fa:f0:eb:fb:9c:20:18:de:46:3b:
                    0c:77:50:b0:f7:e7:0a:5a:92:d1:4f:11:fa:39:6a:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2F:FA:D5:EA:CC:2F:CD:2C:B8:5D:99:0B:47:69:60:DD:5D:59:01
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a333030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:e4:83:fd:08:27:c4:26:5c:ef:83:11:a6:45:20:d3:c2:
         35:3b:be:80:b3:31:ab:3f:24:0b:28:20:0a:07:72:6d:46:0d:
         50:9f:c6:15:97:61:25:89:f5:50:13:16:00:47:f0:de:e8:32:
         98:60:d7:d6:f5:b4:89:f5:cc:10:7d:cf:8f:37:80:d2:73:b7:
         38:8e:84:23:6d:9b:1c:dc:c1:e2:25:89:99:c8:40:90:f0:52:
         71:9b:9b:0c:32:eb:c3:5c:98:d7:4c:9c:66:52:20:38:b3:17:
         01:64:94:fc:75:54:7f:63:b4:fd:16:c8:1e:61:dd:7c:57:49:
         fa:5d:73:75:d8:8e:8f:71:b3:3b:54:a4:52:bf:97:10:d3:fc:
         a7:86:19:c5:6e:8e:84:87:c8:3d:10:19:ae:4e:61:38:54:0d:
         f3:89:40:bf:46:84:dd:ff:1b:5b:5d:37:48:f5:d0:33:40:72:
         af:ef:bb:dc:d6:29:50:45:63:b1:52:fb:c5:61:df:7f:3d:5a:
         7e:bc:48:e6:41:fc:a9:c4:39:34:d0:72:7f:56:69:fa:9a:94:
         60:fb:55:a8:13:ac:54:b4:ff:1e:5e:c0:34:35:42:e1:24:fa:
         e4:e4:90:2a:ac:c3:60:4a:85:80:7a:85:88:8b:bf:65:a3:a6:
         4c:e3:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:13:51 2025 by rpki-client