Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233322e35382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          BqAQyYh0KUnAGIPxUybxdYP5K8TiRIyVCqBO8iunu2E=
Subject key identifier:   03:E0:7F:63:55:3D:93:54:8C:71:14:4B:FF:C5:C1:70:58:52:62:9A
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       2751A2CD3F1627C69B849B3170C4F8653DDDFAC6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:38 +0000
ROA not before:           Wed 01 Oct 2025 22:03:38 +0000
ROA not after:            Wed 30 Sep 2026 22:08:38 +0000
asID:                     273683
IP address blocks:        45.232.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:a2:cd:3f:16:27:c6:9b:84:9b:31:70:c4:f8:65:3d:dd:fa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:38 2025 GMT
            Not After : Sep 30 22:08:38 2026 GMT
        Subject: CN=03E07F63553D93548C71144BFFC5C1705852629A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:d9:3f:3a:bf:58:d0:cb:f1:68:63:c2:17:
                    e9:ea:71:31:86:e6:47:57:fd:4f:25:c5:ab:dc:bc:
                    d7:5c:1e:f8:11:6e:cf:a9:44:cf:e4:ef:3f:f5:97:
                    69:7e:c6:ec:f9:15:6d:d5:1d:39:78:10:e5:50:61:
                    1e:3f:9b:c6:78:80:65:b6:ad:58:40:7f:b0:2f:71:
                    c2:d9:3a:aa:c8:26:ee:80:dd:03:42:c8:02:bd:44:
                    70:07:7c:75:29:8f:14:34:fc:b6:5b:f2:b1:81:32:
                    79:e1:1b:fb:8e:b1:2e:e1:ad:7b:b0:3f:2e:13:fc:
                    e5:c3:46:8d:4c:74:44:90:cc:3b:5b:59:64:48:bc:
                    94:ee:0c:17:cd:aa:9d:df:a0:c9:b2:89:69:e7:dc:
                    78:7f:25:b4:fb:3c:b9:7a:c9:4c:dc:c2:69:72:77:
                    89:2a:11:9d:3d:98:42:42:af:d1:34:71:e3:45:55:
                    6f:69:9c:03:45:a1:dd:71:7d:be:b6:a2:ef:c4:8b:
                    07:04:7f:fe:12:05:63:d7:5b:14:01:7e:e4:1f:b8:
                    e1:88:85:a7:cf:21:f1:76:b2:65:5e:21:1b:f4:be:
                    3a:3b:00:01:b0:cf:db:72:1d:12:4b:a4:83:35:1c:
                    3b:e8:37:4b:eb:7f:c0:85:45:0f:28:e0:26:1e:a9:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:7F:63:55:3D:93:54:8C:71:14:4B:FF:C5:C1:70:58:52:62:9A
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:e6:7b:cb:06:0b:c8:20:00:76:ca:bc:4c:f2:26:ee:ad:
         33:89:36:d6:3f:26:fe:37:a7:1a:57:c5:de:93:b3:2b:a7:a4:
         4b:1e:2c:5a:9a:f4:22:9a:19:6d:a2:bc:8f:57:26:38:ff:99:
         81:e1:f8:09:d7:46:3c:16:b3:87:6a:49:ba:3f:7d:b4:f0:23:
         09:37:64:a2:d2:6f:ea:53:40:f3:2c:b3:a7:5e:bb:a9:1b:96:
         7d:d3:cf:01:65:43:c5:e3:42:bf:8e:c2:0f:20:27:6c:d1:2d:
         87:e8:b3:f6:83:f6:a4:60:3e:bd:c2:47:27:ab:c3:e5:9f:74:
         d5:85:d8:a5:77:4c:74:0c:cd:30:db:10:3a:8f:8d:24:17:d4:
         48:09:67:01:50:f0:da:5e:41:2f:7c:85:b4:85:e7:2d:d0:cb:
         ca:3f:81:19:15:16:5e:c3:7f:5d:bd:b2:86:56:2b:f4:a2:22:
         b4:e3:75:47:ea:69:82:65:6e:c0:41:0a:a2:1a:cf:df:1f:34:
         fe:3e:8d:e0:35:2c:42:42:4b:3b:18:18:79:bc:7c:b5:d9:81:
         c3:26:05:ef:f8:14:a4:90:a0:db:21:7f:22:ab:58:dc:bc:d6:
         ce:21:c2:90:ca:c3:77:19:08:0a:c7:bd:93:d8:14:7b:c3:a7:
         0a:c8:8f:eb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJ1GizT8WJ8abhJsxcMT4ZT3d+sYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAzMzhaFw0yNjA5MzAyMjA4MzhaMDMxMTAvBgNV
BAMTKDAzRTA3RjYzNTUzRDkzNTQ4QzcxMTQ0QkZGQzVDMTcwNTg1MjYyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJgdk/Or9Y0MvxaGPCF+nqcTGG
5kdX/U8lxavcvNdcHvgRbs+pRM/k7z/1l2l+xuz5FW3VHTl4EOVQYR4/m8Z4gGW2
rVhAf7AvccLZOqrIJu6A3QNCyAK9RHAHfHUpjxQ0/LZb8rGBMnnhG/uOsS7hrXuw
Py4T/OXDRo1MdESQzDtbWWRIvJTuDBfNqp3foMmyiWnn3Hh/JbT7PLl6yUzcwmly
d4kqEZ09mEJCr9E0ceNFVW9pnANFod1xfb62ou/EiwcEf/4SBWPXWxQBfuQfuOGI
hafPIfF2smVeIRv0vjo7AAGwz9tyHRJLpIM1HDvoN0vrf8CFRQ8o4CYeqW+FAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUA+B/Y1U9k1SMcRRL/8XBcFhSYpowHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzMyMmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALeg6MA0GCSqGSIb3DQEBCwUAA4IBAQBzuuZ7ywYLyCAA
dsq8TPIm7q0ziTbWPyb+N6caV8Xek7Mrp6RLHixamvQimhltoryPVyY4/5mB4fgJ
10Y8FrOHakm6P3208CMJN2Si0m/qU0DzLLOnXrupG5Z9088BZUPF40K/jsIPICds
0S2H6LP2g/akYD69wkcnq8Pln3TVhdild0x0DM0w2xA6j40kF9RICWcBUPDaXkEv
fIW0hect0MvKP4EZFRZew39dvbKGViv0oiK043VH6mmCZW7AQQqiGs/fHzT+Po3g
NSxCQks7GBh5vHy12YHDJgXv+BSkkKDbIX8iq1jcvNbOIcKQysN3GQgKx72T2BR7
w6cKyI/r
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:24 2025 by rpki-client