Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa
File:                     34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa (raw, json)
Hash identifier:          yt4flrkj2IQqJIVEek32zlyTxZTwXRzp5PDl/5RWQX0=
Subject key identifier:   CC:53:00:7F:B3:1B:E1:D8:A0:D9:97:EC:97:3F:BD:48:CA:92:2D:BC
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       6C84D27E4E13B1DB7C1D03AC5D4014E2A6C40FB9
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa
Signing time:             Wed 04 Feb 2026 17:38:35 +0000
ROA not before:           Wed 04 Feb 2026 17:33:35 +0000
ROA not after:            Wed 03 Feb 2027 17:38:35 +0000
asID:                     269392
IP address blocks:        45.184.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:84:d2:7e:4e:13:b1:db:7c:1d:03:ac:5d:40:14:e2:a6:c4:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Feb  4 17:33:35 2026 GMT
            Not After : Feb  3 17:38:35 2027 GMT
        Subject: CN=CC53007FB31BE1D8A0D997EC973FBD48CA922DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:35:4c:80:c7:89:ac:c8:6e:1c:4a:e6:8a:
                    53:72:2b:39:52:01:69:87:87:0b:84:a0:a6:67:f9:
                    c4:6f:7b:46:ea:5f:72:d2:34:61:db:8a:cc:cf:a1:
                    9d:e1:75:40:b3:71:89:58:55:b7:9c:48:1d:ab:e1:
                    47:a6:91:ac:72:03:d5:55:da:05:29:46:30:3c:8b:
                    9f:cc:92:74:87:aa:70:47:5d:3a:f4:90:ba:3f:9c:
                    4d:d2:25:8c:16:71:8f:47:5b:12:e7:29:e4:75:a7:
                    48:fa:cd:94:b5:a9:3e:75:41:0a:8d:47:86:d0:d1:
                    24:34:99:4c:1a:7e:ad:33:7e:af:cf:7b:d8:bc:6d:
                    fd:c2:66:9e:8a:65:12:3c:86:c0:62:ae:94:16:10:
                    45:87:71:4a:a8:fc:24:78:5d:da:bb:22:79:7c:08:
                    d5:35:e4:e0:40:ec:2c:69:bb:34:47:58:2a:ec:5a:
                    2f:d3:48:2c:8a:9c:11:ff:9a:8d:fa:2e:5e:79:77:
                    07:6c:b0:c7:40:10:5e:2d:be:7a:ed:c6:f6:45:0a:
                    50:82:28:2c:de:e4:6d:13:00:b1:8d:94:17:5a:7d:
                    a6:76:48:75:f5:9f:c6:1d:14:cd:da:9e:b3:6d:03:
                    a4:c6:d2:c0:0d:f3:3b:80:52:19:ff:02:1f:52:bf:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:00:7F:B3:1B:E1:D8:A0:D9:97:EC:97:3F:BD:48:CA:92:2D:BC
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:ac:6a:c5:a9:59:ca:b7:73:dc:9c:21:24:6f:1f:e1:96:
         45:c2:d1:13:02:ce:ff:b5:a5:89:75:8d:06:40:86:00:b0:51:
         41:35:88:a8:bb:d3:5e:a0:97:34:2d:87:56:10:16:ea:b8:07:
         3a:fd:00:c0:a6:8f:4d:ef:03:10:8d:51:74:8c:d7:c6:42:e9:
         dd:03:1b:bb:1c:d1:96:67:c5:fe:4f:d2:17:02:2b:dc:44:ec:
         c1:57:55:f9:ec:0b:f0:f9:57:0c:0c:df:17:6d:11:c8:a7:da:
         5d:76:8b:6b:3d:87:0d:a2:d6:55:79:ca:8e:92:ce:88:89:6f:
         96:0f:35:6e:0c:f0:e3:48:78:82:19:7a:86:08:97:36:5e:16:
         80:a5:00:24:3a:ad:b3:67:3a:7d:85:9f:de:47:18:46:76:da:
         04:9e:c7:9e:34:6d:51:a8:3f:2d:8f:6e:ce:cf:d9:64:90:54:
         a3:6e:1e:1f:15:fb:54:8c:4b:29:44:f0:fe:0a:64:06:77:3b:
         30:cc:c7:bd:3f:b0:de:9a:fa:3a:ff:2f:d0:7d:ec:cc:ec:fc:
         9e:4e:38:b2:4b:25:f1:96:eb:a7:82:fd:ef:d9:19:4d:c4:68:
         36:1e:13:b1:24:0f:ed:b6:09:f1:c5:bc:71:d5:1c:91:fc:e6:
         f3:aa:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:13 2026 by rpki-client