Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa
File:                     34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (raw, json)
Hash identifier:          AHfHPvEd6pJ7+ew8+MDw961/4ZAx2XTKZXD6+MDoiWs=
Subject key identifier:   BD:79:1F:FE:03:88:CD:54:43:42:57:E7:03:9A:63:FA:43:A4:DB:F0
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       33670E328CCF84977947B25304A541E522F4F614
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa
Signing time:             Thu 05 Feb 2026 01:43:29 +0000
ROA not before:           Thu 05 Feb 2026 01:38:29 +0000
ROA not after:            Thu 04 Feb 2027 01:43:29 +0000
asID:                     269392
IP address blocks:        45.184.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:67:0e:32:8c:cf:84:97:79:47:b2:53:04:a5:41:e5:22:f4:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Feb  5 01:38:29 2026 GMT
            Not After : Feb  4 01:43:29 2027 GMT
        Subject: CN=BD791FFE0388CD54434257E7039A63FA43A4DBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:f1:e3:1f:13:33:b5:c3:80:d7:65:07:b5:
                    51:df:23:92:8a:e1:ad:52:9c:05:47:ce:d2:3d:3d:
                    3e:20:ed:b4:6f:ab:7f:b3:f2:6f:89:67:2a:84:dc:
                    ab:ed:0f:54:82:67:04:db:83:07:38:1f:65:b2:d9:
                    ed:ab:16:57:68:6f:76:0d:90:0b:89:7f:92:03:da:
                    04:f6:27:a5:9f:3c:82:5d:a9:5e:64:c4:62:0c:23:
                    fe:40:e4:65:e6:e7:b1:4f:3e:6b:b7:8c:cf:61:d5:
                    5b:d0:7f:2e:5e:b6:ea:4f:dd:7a:9c:1e:69:ad:a4:
                    c1:60:71:25:01:29:45:94:3a:24:13:98:16:1a:6b:
                    d2:33:a3:42:81:c2:16:d8:48:68:b3:35:10:00:c8:
                    da:8f:e0:1e:56:dc:d4:4c:a8:15:0d:71:06:15:82:
                    18:0d:2c:27:98:9c:aa:2f:89:c2:55:3f:ba:64:80:
                    29:ed:82:46:13:48:60:9f:34:37:ea:74:c7:62:fd:
                    65:03:ae:af:5e:36:b7:31:07:d1:fd:46:63:9f:02:
                    a1:58:95:1a:55:57:4a:df:61:9e:7a:45:b6:57:08:
                    d7:03:46:cc:76:c6:26:1b:ed:62:ba:c9:e8:e2:26:
                    3b:22:c9:57:fd:f3:25:73:32:89:31:ec:00:30:3a:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:1F:FE:03:88:CD:54:43:42:57:E7:03:9A:63:FA:43:A4:DB:F0
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:77:e0:e3:58:62:d8:db:c0:a3:4a:ad:97:56:09:73:4d:
         1c:54:00:f7:1e:b7:94:4e:94:de:d5:45:1d:b4:8c:d1:09:0a:
         8f:b1:77:ce:d0:47:5c:90:68:61:84:68:03:bc:f0:56:62:09:
         63:35:f3:6d:4b:1a:2d:3e:9a:37:e4:0e:37:98:f2:35:40:77:
         96:17:05:f5:e3:1d:7a:29:7c:ec:04:4d:c6:6d:f5:40:59:ca:
         f8:9e:15:56:2a:59:c5:e6:b8:08:96:d0:0d:5e:8c:97:25:4d:
         05:12:4f:b1:33:ef:35:1a:d1:19:43:1d:91:bb:c1:64:e0:c7:
         7f:e4:c5:a4:61:98:ae:d0:1e:06:db:b6:bf:56:73:89:4f:fe:
         50:ab:79:39:eb:90:c2:73:42:e0:53:75:b6:63:a0:67:c2:0c:
         31:e3:9e:dc:42:d4:03:9e:b2:7c:19:8c:d8:de:58:e5:a1:ef:
         1f:31:11:27:d9:9a:40:bb:32:8d:6f:4f:86:ff:10:ac:59:9d:
         7f:5d:43:a5:34:9e:e0:cd:a3:c6:3b:7d:46:70:4a:1b:f2:b7:
         7a:0a:34:34:e4:23:1d:e3:ee:20:f4:3e:1c:82:42:9a:a6:d7:
         e5:49:e6:0e:73:af:e3:4d:ca:8b:9c:fa:a4:a2:b9:76:25:dc:
         70:05:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:21:08 2026 by rpki-client