Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a373830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a373830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          AcB7WL6SBabtzMjYRNZ1ndkGako38hbod72hkgEqeeg=
Subject key identifier:   38:E1:8C:8F:51:5A:B1:55:39:88:A2:88:E3:33:86:02:D3:7C:14:A1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       2582A3AEF0BC66EDEE02ED481537183B58DE2079
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a373830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:53 +0000
ROA not before:           Wed 01 Oct 2025 22:03:53 +0000
ROA not after:            Wed 30 Sep 2026 22:08:53 +0000
asID:                     273683
IP address blocks:        2804:8aa4:7800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:82:a3:ae:f0:bc:66:ed:ee:02:ed:48:15:37:18:3b:58:de:20:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:53 2025 GMT
            Not After : Sep 30 22:08:53 2026 GMT
        Subject: CN=38E18C8F515AB1553988A288E3338602D37C14A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:71:89:72:69:ae:90:6a:8b:d6:a2:88:70:
                    b5:2d:eb:9a:d5:bd:b6:bc:7d:31:cc:5d:2a:99:bb:
                    fb:39:aa:3c:f3:25:c0:f9:03:ab:79:ca:75:6d:10:
                    50:08:bf:20:f8:3b:9a:af:71:de:c0:ed:d2:0a:29:
                    1d:18:e3:3c:26:75:e0:70:11:38:43:89:60:e9:b2:
                    9f:d4:81:b1:58:0f:f3:e4:a2:e6:30:7d:8b:68:79:
                    bf:bf:c1:0c:1d:9f:61:51:0b:2a:73:5a:78:ea:48:
                    90:30:e6:fb:af:4d:43:61:fd:1b:69:bf:88:16:8c:
                    b9:ab:97:7a:52:59:94:e9:45:90:0b:86:1d:aa:bf:
                    55:65:ad:98:df:98:d8:88:cb:d3:cf:08:ea:ed:09:
                    db:e8:8b:14:27:07:9c:3d:54:2d:bb:f1:d2:62:c2:
                    0e:60:1d:d2:da:4c:f4:32:14:97:c0:b4:c4:2e:1c:
                    b5:ec:97:d8:4d:f3:cc:58:c5:27:40:74:58:44:25:
                    1d:eb:a0:d1:3f:bd:94:77:bb:e7:c0:c4:26:94:1f:
                    32:f9:05:65:48:93:13:66:e8:95:8c:cf:f8:68:a0:
                    0f:c2:09:99:82:7d:a8:b6:f9:56:5e:c5:74:27:e2:
                    c0:d9:b2:3b:3d:88:ae:08:5a:e8:0e:52:4e:e9:5d:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E1:8C:8F:51:5A:B1:55:39:88:A2:88:E3:33:86:02:D3:7C:14:A1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a373830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:7800::/37

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:48:88:f0:95:70:88:b9:d1:93:01:ce:76:2c:61:52:dc:
         26:a7:16:62:6c:c2:9c:23:31:4d:89:9f:50:32:56:fe:fa:38:
         be:01:81:41:20:d8:f7:ad:d1:cd:d0:52:10:0d:3d:89:f6:89:
         20:84:ac:c4:02:7d:d1:86:dc:6a:b9:70:5c:4a:0e:48:2f:81:
         4e:20:9b:69:3c:fa:6f:5d:d0:21:59:52:f7:88:42:c5:fe:fe:
         3f:31:6c:c9:fe:3e:69:01:b7:fe:e3:69:af:45:1b:4f:a1:d5:
         ce:dd:47:1c:9c:bb:ae:7f:10:6d:23:07:9f:e1:2d:dc:08:de:
         f0:25:bc:6a:77:27:a9:69:b4:02:4a:28:6c:97:d3:3a:f0:2b:
         2e:8b:90:91:00:d1:a6:2f:77:54:1f:50:28:6e:54:d6:db:bc:
         53:6f:3c:64:1c:e7:d7:96:ae:92:85:56:d0:3d:46:d6:a8:5c:
         7b:36:52:86:3b:cc:56:97:95:56:5f:c3:16:3a:ce:cb:80:fd:
         6d:20:18:48:3e:80:e4:73:75:de:71:2a:0e:22:26:e9:dc:71:
         41:49:f2:55:5c:fb:0c:02:e7:e7:73:a4:58:5f:6c:bc:ce:4c:
         3d:0e:d9:80:b5:30:6a:53:a1:93:97:ed:70:88:1c:b4:94:1d:
         8a:2a:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:20 2025 by rpki-client