Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a3830303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a3830303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          hIFg7LNPtQTN+iKi33p+Fm5cjK8HbhZfHp6w8q+AKu0=
Subject key identifier:   0B:D7:64:E3:91:55:C9:4F:D2:5E:7D:97:FD:C4:16:B0:61:97:E0:12
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4CC593C2DBF3189A51C04269649ACF2798FC101F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a3830303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:54 +0000
ROA not before:           Wed 01 Oct 2025 22:02:54 +0000
ROA not after:            Wed 30 Sep 2026 22:07:54 +0000
asID:                     273683
IP address blocks:        2804:8aa4:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:93:c2:db:f3:18:9a:51:c0:42:69:64:9a:cf:27:98:fc:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:54 2025 GMT
            Not After : Sep 30 22:07:54 2026 GMT
        Subject: CN=0BD764E39155C94FD25E7D97FDC416B06197E012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:ee:32:45:ab:0d:16:5e:4d:6b:4e:58:3a:
                    bb:e9:d7:33:fe:95:2c:83:cc:12:31:d1:02:ab:b2:
                    38:55:6c:f0:b1:31:a3:d7:e7:0c:71:c6:ae:35:21:
                    48:1d:73:1a:ec:0b:ba:ca:48:98:c5:59:00:a8:f3:
                    d9:ec:3c:e7:6a:5b:13:ec:ba:aa:b3:dc:8c:d8:83:
                    40:a8:f9:c1:ca:a9:1e:8d:06:ea:e8:e0:8b:20:d8:
                    69:8e:ff:f7:bc:7f:00:e1:24:cb:e4:c6:74:2c:00:
                    63:e3:b6:26:54:31:bb:0d:d3:0d:15:e3:d8:c8:07:
                    01:4e:36:f4:52:f4:d0:36:11:e9:33:d1:29:ac:20:
                    5f:4b:dc:fc:8e:97:64:e2:08:21:21:6d:3e:1c:e5:
                    2f:d2:35:6e:2c:d5:46:8d:f4:f3:04:a8:38:7b:31:
                    40:f8:73:e1:32:29:6f:6f:71:79:a1:4c:04:67:09:
                    4d:d1:ac:33:db:1a:dd:1a:9a:c0:7f:5c:14:4b:ea:
                    1e:8b:06:cd:da:69:a9:16:12:b8:2e:d4:93:00:22:
                    3c:ce:56:e9:fe:1e:59:a2:23:75:e5:41:b8:6b:dd:
                    a8:44:17:f9:91:b4:4d:cc:fb:29:13:ce:12:70:3f:
                    65:b4:ee:a3:64:8e:d9:d3:2f:5c:03:a3:98:c7:8b:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:64:E3:91:55:C9:4F:D2:5E:7D:97:FD:C4:16:B0:61:97:E0:12
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a3830303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:81:25:cd:27:4a:eb:77:4f:ed:ad:c0:37:bd:83:d9:79:
         0f:58:ed:d1:09:f1:d1:23:83:5c:d2:30:d6:ac:0e:40:4d:de:
         18:84:9b:4b:eb:9a:31:b5:3e:0c:77:fc:99:9e:f4:8d:d2:7e:
         b7:9a:b5:80:0d:4c:19:fe:7c:43:52:eb:7a:ec:c4:2f:2e:e0:
         62:d8:79:2e:0e:c7:f1:a6:27:9b:be:89:03:e3:c8:69:fc:02:
         12:6e:c8:4c:46:4e:11:be:89:cd:fc:8c:3b:70:02:9a:7f:2c:
         74:4f:74:e6:6d:22:d4:7a:64:c6:6e:fd:79:9a:35:15:1a:19:
         0d:a2:bf:8d:f4:06:6d:f9:a2:6f:6d:97:a9:7e:c6:c7:6a:25:
         f1:6b:b9:ff:e8:56:5a:3c:13:5d:9c:e5:d4:aa:7d:52:12:2c:
         bc:12:a6:01:22:1d:34:c1:61:5a:30:12:3b:b2:3d:04:5f:ba:
         7d:8f:d9:45:5f:55:63:d8:74:35:1c:1a:0c:4d:3d:3c:bd:aa:
         c5:2d:da:f3:af:04:74:5b:5b:2a:84:a8:c1:5f:fa:ba:73:00:
         bf:47:fc:cb:f9:6f:a6:6e:a3:28:34:05:37:c7:cf:31:8a:28:
         08:b1:ce:04:0c:1a:a8:08:a6:54:06:98:35:5e:bc:34:26:22:
         d8:5c:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:07 2025 by rpki-client