Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623830303a3a2f33372d3438203d3e20323733363833.roa
File:                     323830343a386161343a623830303a3a2f33372d3438203d3e20323733363833.roa (raw, json)
Hash identifier:          7ftbPuj9alkRzaxlcUh3vfnk4FK37Bkn1pO/MFTHx7g=
Subject key identifier:   89:46:18:C2:DA:56:3E:10:A2:22:51:8E:64:4B:7A:90:7E:5D:B9:40
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       70B1EAE96373ADC7CC5B87D176AD104F1102773A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623830303a3a2f33372d3438203d3e20323733363833.roa
Signing time:             Mon 03 Nov 2025 19:04:29 +0000
ROA not before:           Mon 03 Nov 2025 18:59:29 +0000
ROA not after:            Mon 02 Nov 2026 19:04:29 +0000
asID:                     273683
IP address blocks:        2804:8aa4:b800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 09:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b1:ea:e9:63:73:ad:c7:cc:5b:87:d1:76:ad:10:4f:11:02:77:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov  3 18:59:29 2025 GMT
            Not After : Nov  2 19:04:29 2026 GMT
        Subject: CN=894618C2DA563E10A222518E644B7A907E5DB940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:58:8f:67:34:91:03:03:0b:3c:d3:c9:5e:
                    44:b4:d3:46:c5:11:41:ed:4a:94:f6:9f:5e:0b:5e:
                    f7:9a:b0:c1:dd:ea:04:97:e9:e8:27:79:60:07:18:
                    58:40:62:74:d7:ed:92:14:fd:5f:56:b9:7e:dd:f8:
                    30:69:88:6c:3d:60:b0:c1:75:10:db:f3:35:6a:2a:
                    1a:d3:50:68:29:8d:2f:75:d2:f5:b2:e5:56:13:82:
                    d9:75:13:3f:65:10:76:13:1f:ff:1e:92:18:70:0a:
                    4c:9c:2b:ff:a8:6e:e0:7e:67:c6:40:fa:26:34:d3:
                    5f:7d:cb:23:4c:f1:1b:5f:2c:af:c4:d3:51:95:5a:
                    eb:50:17:23:39:a9:5e:53:39:09:a3:50:02:7a:9e:
                    4d:df:67:7d:82:47:2a:c2:fe:73:27:95:74:7e:e2:
                    cd:a4:13:14:ed:bb:ad:bc:a2:f3:7a:99:b5:72:d9:
                    36:25:93:36:8e:46:5a:5f:55:90:68:54:25:22:1a:
                    d4:c1:6d:5b:28:7c:26:72:1a:a9:4e:4c:b8:24:e8:
                    fb:5d:ae:02:26:2f:76:78:db:f2:a6:d1:03:13:bb:
                    79:10:5f:39:82:30:6b:16:b5:9a:dc:9f:b8:dc:43:
                    1e:79:52:f4:91:0c:6b:14:00:e0:93:30:24:06:a7:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:18:C2:DA:56:3E:10:A2:22:51:8E:64:4B:7A:90:7E:5D:B9:40
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623830303a3a2f33372d3438203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:b800::/37

    Signature Algorithm: sha256WithRSAEncryption
         bc:8f:21:87:52:c0:ff:ea:22:5d:53:73:cc:89:20:c0:44:f1:
         55:d6:6a:6c:c3:ee:9b:9a:43:a4:b2:7f:95:02:88:ec:5a:6d:
         52:4e:02:4f:35:d3:9f:4e:97:28:ec:ba:8a:28:be:1c:50:97:
         6b:d7:35:20:1a:b4:0b:c0:26:70:da:14:f6:e5:a2:32:61:24:
         c3:42:a3:2a:47:20:f6:10:df:7f:61:b9:9f:5d:69:00:f3:37:
         2f:d6:28:92:f7:dc:e0:b1:6b:2e:84:68:c1:fc:1f:a9:a8:b2:
         ee:46:6a:10:b9:ca:c9:1a:b4:42:94:ad:93:28:1b:9f:f9:ae:
         64:d8:a0:07:6f:ce:4d:6b:f0:00:eb:2c:b3:70:6c:48:38:5d:
         2e:49:a7:66:5d:8d:94:c9:4b:fb:b8:d2:d7:a5:c1:3a:c7:ec:
         18:a2:58:35:1a:6f:9a:26:d3:01:2d:65:3a:71:dd:56:c6:8f:
         76:1c:1c:3d:42:3a:f4:b8:04:71:41:35:43:8f:d8:f4:12:cf:
         f1:2a:78:68:96:e9:ff:b0:ea:6a:53:a7:76:78:0c:c5:fe:7b:
         6a:00:a2:b8:5a:c9:a1:55:11:12:c2:63:cd:50:7e:c9:0d:aa:
         80:ac:1a:e3:b4:fd:cc:26:3a:ea:d0:15:b7:f1:d8:47:8f:22:
         cc:6e:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:35:54 2025 by rpki-client