Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
File:                     34352e3233382e34382e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          DnpFfJMLoXL45s0iw0CArWb0zwnVyqgqLMx+FChVF4c=
Subject key identifier:   79:D4:39:CE:5B:4D:E3:FD:B1:F5:53:0A:07:53:EC:D1:47:42:28:B7
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       1520FC03A824BE399D65FBA0721BAD803A3571D1
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:08:20 +0000
ROA not before:           Wed 01 Oct 2025 22:03:20 +0000
ROA not after:            Wed 30 Sep 2026 22:08:20 +0000
asID:                     273683
IP address blocks:        45.238.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:20:fc:03:a8:24:be:39:9d:65:fb:a0:72:1b:ad:80:3a:35:71:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:03:20 2025 GMT
            Not After : Sep 30 22:08:20 2026 GMT
        Subject: CN=79D439CE5B4DE3FDB1F5530A0753ECD1474228B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:9d:58:3c:ed:39:68:74:b8:35:91:17:f1:
                    d5:6f:71:f8:82:ab:76:60:9c:8b:40:a0:9d:43:b0:
                    61:f7:07:1e:c0:46:30:48:32:29:d9:db:54:b8:46:
                    a1:87:46:d6:54:90:1b:69:9d:cf:2c:4f:5a:b6:7c:
                    93:89:f1:a1:f2:ab:2d:6a:ab:0e:15:12:21:4a:f9:
                    98:22:c1:35:37:64:a3:15:b6:47:9f:e1:bc:50:2c:
                    95:93:7e:20:a1:91:1d:a3:8e:bc:ac:1f:10:93:cd:
                    88:30:13:f7:bf:aa:1e:4d:03:2e:37:80:02:f7:fb:
                    33:1e:d8:d1:6e:fb:9c:d0:bd:1a:66:0f:6f:64:7e:
                    39:3a:7a:08:9d:ca:eb:86:29:59:63:48:79:3c:00:
                    da:2c:13:ce:31:11:f8:a0:c4:08:4a:d1:98:d1:6b:
                    e4:48:8c:16:fa:25:5e:a8:91:42:00:36:b3:d0:27:
                    05:6f:1c:af:54:c8:0d:f6:36:17:d5:cf:ee:50:dd:
                    d8:ab:de:d4:30:1f:a6:ed:e6:f7:c1:2a:65:fb:d9:
                    08:1c:b3:d9:f6:f1:7e:79:a2:9c:c1:aa:3f:12:d3:
                    61:f0:b3:d0:ab:be:67:ac:30:86:5e:8b:8e:0a:ec:
                    be:e8:ae:cd:12:6f:6e:0c:60:78:aa:a1:96:6e:29:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D4:39:CE:5B:4D:E3:FD:B1:F5:53:0A:07:53:EC:D1:47:42:28:B7
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:25:f0:c4:33:82:c2:39:41:7a:b5:e9:fa:b4:d1:85:e2:
         b2:2f:39:38:36:b6:60:03:a8:8d:94:62:d0:07:16:3a:8d:28:
         68:f1:f7:48:63:8e:a8:97:66:c1:41:4e:09:c0:bb:e0:44:62:
         d0:bd:ff:c8:1f:ac:d9:79:4e:b9:83:4a:1e:8c:d0:11:48:f4:
         9e:36:cd:5e:92:7b:de:77:d5:d4:50:b9:b0:f5:c7:6c:7a:f4:
         d4:ab:83:90:9d:ab:10:ba:52:cb:e4:29:1a:3c:0e:1e:81:f1:
         bc:3f:b3:20:c3:2f:ca:a6:c1:54:66:86:3d:cf:33:4f:3c:be:
         c4:1a:46:d7:68:d6:de:a2:0a:25:b8:7f:5a:4c:22:96:b2:d6:
         9f:02:bb:62:ea:5a:35:b3:1a:67:83:e7:84:8d:67:e8:32:d0:
         b7:a3:ed:d2:86:f8:94:3d:1b:32:9f:f2:ca:61:83:05:6b:94:
         c5:f7:18:f3:95:a2:f0:ca:24:d8:95:d8:a7:62:f3:81:02:35:
         d9:c7:6c:f0:67:3e:47:7d:77:1f:fb:54:4b:10:a7:74:65:f9:
         19:d8:92:13:f1:bf:3a:d9:3f:3e:68:cb:06:bf:6a:85:7b:2b:
         82:1b:ad:5d:47:35:24:1a:9c:dd:90:e7:b3:08:52:ff:ce:e1:
         d5:9a:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:07 2025 by rpki-client