Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa
File:                     34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (raw, json)
Hash identifier:          I3k2FU5rjgkyCg8M0pvsts88eHOrvPjWx/m7qdU1BpE=
Subject key identifier:   CF:9A:96:36:99:69:96:B8:1A:A9:EE:78:17:77:91:4D:45:C1:89:07
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       338055F3C90F69727D4822B1C3F74BE88B35AF57
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa
Signing time:             Thu 05 Feb 2026 01:43:29 +0000
ROA not before:           Thu 05 Feb 2026 01:38:29 +0000
ROA not after:            Thu 04 Feb 2027 01:43:29 +0000
asID:                     269392
IP address blocks:        45.184.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:80:55:f3:c9:0f:69:72:7d:48:22:b1:c3:f7:4b:e8:8b:35:af:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Feb  5 01:38:29 2026 GMT
            Not After : Feb  4 01:43:29 2027 GMT
        Subject: CN=CF9A9636996996B81AA9EE781777914D45C18907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:34:7a:01:4c:6a:9f:a3:a8:fc:2d:99:23:
                    1d:9a:db:c0:9c:0c:d1:bf:03:5c:79:b1:b7:ff:58:
                    5d:9e:0a:be:86:0a:47:fc:a5:96:cf:d7:ce:32:ed:
                    42:8b:a6:70:33:5b:a7:c6:30:17:00:b1:c1:5e:aa:
                    82:f5:16:c5:87:47:f5:3a:99:43:16:3b:98:8c:42:
                    02:31:dc:0a:01:92:9f:44:f1:df:3b:74:5b:bb:ac:
                    85:15:42:94:be:f7:cb:2c:a0:01:ea:c1:9c:c1:0f:
                    aa:47:ab:3b:66:b7:01:dd:f2:49:be:3c:3c:c3:32:
                    1b:e0:29:45:bb:c6:c3:61:3a:cc:23:8c:ef:8d:a8:
                    4b:4a:d7:cd:44:b9:9d:75:0f:ef:09:7f:b0:04:c9:
                    b4:d1:f9:bf:99:d9:10:91:a4:8e:74:fd:a3:d5:a7:
                    81:d4:75:d5:fb:a3:40:91:3b:28:c3:37:33:06:11:
                    81:bf:e7:d5:e6:7c:2e:c8:1f:c8:19:bb:5f:07:14:
                    c4:ef:29:5a:eb:12:b9:7e:96:ab:c3:87:44:c9:c4:
                    61:c7:b9:5a:b8:32:26:fa:03:04:1b:f7:f7:b8:05:
                    06:60:48:2b:29:89:fd:1b:00:47:39:50:0f:09:08:
                    77:b7:0d:7c:dc:d6:52:3a:55:83:59:8e:bb:4a:22:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:96:36:99:69:96:B8:1A:A9:EE:78:17:77:91:4D:45:C1:89:07
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:80:18:c6:c5:92:d8:c6:5e:04:05:50:f7:4f:9b:5f:4b:
         0f:e3:3a:15:3a:8f:99:4c:d8:e8:71:07:52:de:6d:35:3b:9f:
         96:3b:eb:09:bb:fc:f1:54:cf:fa:16:d7:f6:d1:91:68:9f:94:
         9a:81:90:f8:97:f2:d0:44:6b:03:63:bd:dd:7b:c1:7f:00:d1:
         4f:c5:9e:0b:53:ee:60:8d:be:5b:73:3b:63:ee:1d:b0:e8:54:
         d2:14:ea:d4:91:c2:3c:e2:41:da:fb:32:e4:2a:fe:21:bc:b5:
         b0:4f:b0:26:de:cf:f4:24:33:9b:db:44:ae:69:01:37:81:81:
         e6:81:e7:ec:0c:a4:6c:15:49:b4:7b:ae:95:23:f0:42:9c:d8:
         0a:f8:d4:25:a5:7f:da:4e:b3:f8:53:bc:04:8a:dc:e9:05:00:
         24:37:1e:a8:9d:b8:22:dd:11:5b:97:b8:7b:69:c3:0d:d3:7d:
         39:1e:8e:8b:1e:6f:0f:4d:31:88:30:e8:93:72:2d:b3:eb:03:
         28:c7:a7:d0:6d:14:72:bf:fb:94:7b:27:97:28:59:5f:40:60:
         7f:16:48:e6:35:0e:a1:bb:a3:fe:3c:b1:f4:b6:0e:19:2a:7f:
         62:80:e0:2d:0a:e0:be:70:8d:20:26:e5:90:e1:47:c4:d0:d2:
         77:92:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:32 2026 by rpki-client