Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa
File:                     34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          gQnScBru/Z99xehU9oJ9LiTuSDgUMLVOuKePmXF/Tv8=
Subject key identifier:   9B:DB:E5:2B:67:4F:9B:80:EA:30:2E:A8:07:40:54:AD:E3:FE:36:20
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       9F7C9BF945839008C47D79D3FF7FDF1463DB71
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:45 +0000
ROA not before:           Wed 01 Oct 2025 22:02:45 +0000
ROA not after:            Wed 30 Sep 2026 22:07:45 +0000
asID:                     273683
IP address blocks:        45.233.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9f:7c:9b:f9:45:83:90:08:c4:7d:79:d3:ff:7f:df:14:63:db:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:45 2025 GMT
            Not After : Sep 30 22:07:45 2026 GMT
        Subject: CN=9BDBE52B674F9B80EA302EA8074054ADE3FE3620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:0a:63:e9:36:83:5d:02:a4:4f:6c:cc:36:
                    28:c8:2c:d2:d6:ce:e2:fb:30:dc:0e:5b:b2:7a:c8:
                    3b:df:62:7d:a4:6b:08:da:a8:bb:ca:11:d9:a6:54:
                    11:fa:3a:69:70:ab:d0:78:aa:2e:1a:73:13:df:96:
                    53:5d:a7:3b:f9:e1:53:05:fd:c0:f6:8f:b3:bd:d9:
                    8e:c2:80:25:69:4f:aa:17:a3:55:73:e2:72:88:91:
                    af:1d:2c:d4:a9:09:52:3f:42:ae:37:a3:20:8b:15:
                    22:98:4e:d4:88:c8:04:fb:59:08:6b:fb:fa:ac:59:
                    db:ae:cf:0d:7a:bd:12:8f:ef:21:77:19:6a:f3:7e:
                    f3:39:8e:ff:29:2b:2b:f2:06:31:e4:26:99:62:70:
                    79:0f:e0:87:3a:ee:83:7b:c1:c3:41:03:9e:93:f1:
                    43:26:39:9e:c1:e4:0d:db:c6:46:7b:99:ae:99:34:
                    b5:cb:b9:8a:2c:20:2e:93:82:f9:5c:ea:32:a9:3c:
                    fb:f2:7b:65:6a:a5:23:54:95:df:03:39:94:c5:7b:
                    96:52:23:41:13:7a:cb:73:eb:d4:a2:b4:83:af:1a:
                    be:2f:c0:95:fc:65:a2:96:67:3d:75:8c:d6:3c:19:
                    d7:3d:e2:e6:05:79:80:b4:2b:99:17:5a:ad:19:bf:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DB:E5:2B:67:4F:9B:80:EA:30:2E:A8:07:40:54:AD:E3:FE:36:20
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139362e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:b2:43:42:e2:fa:f7:a0:d8:60:6e:4a:50:76:81:94:9c:
         f1:4c:3e:ab:b4:25:ed:db:00:36:5f:72:de:3a:c8:46:df:38:
         9f:f1:23:d1:ab:b9:c0:73:b5:24:06:2a:11:50:69:d8:e1:11:
         45:95:50:0c:ba:13:4e:70:c3:40:f3:50:47:5f:71:53:74:de:
         b7:af:47:a5:80:69:01:2c:c0:5a:bc:f7:e3:7e:fc:51:7a:48:
         74:64:f6:f0:bb:66:ed:df:cd:4c:b3:cf:64:2e:2c:10:52:e9:
         68:de:1f:b9:9f:d0:10:b2:43:c3:97:67:86:6b:cc:76:b5:0f:
         04:38:07:c2:61:a3:f9:d5:70:8b:10:ae:e8:94:52:82:ef:c0:
         a6:22:e7:3c:1a:71:02:9e:e3:58:32:87:c7:17:5e:d8:d0:29:
         62:ee:13:60:bd:5c:5f:98:30:cf:80:8f:17:04:6d:f4:6c:a6:
         70:f2:41:4c:47:03:14:c6:80:23:97:8c:e2:f8:8b:ff:44:81:
         26:a1:d0:9c:62:a2:52:a2:11:54:ba:4d:c0:04:9d:87:bf:a2:
         e0:b6:d6:1e:3c:9f:cf:93:3a:82:38:2c:d6:e0:8b:22:e2:d4:
         f3:30:58:8d:bd:a2:92:60:91:25:31:0d:90:44:b1:ce:81:ba:
         4d:11:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:16 2025 by rpki-client