Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          mlgyTnx5SZVosZwlmD+k/u2pBpghOIdZK3TGxn1QRH0=
Subject key identifier:   77:1B:32:07:94:80:F7:CC:26:D1:4E:9C:16:CA:BD:D2:BE:F7:50:D8
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       4AAE8684864ABA2463EAB7949042F38882B209
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32342d3234203d3e20323637363638.roa
Signing time:             Fri 30 Jan 2026 15:01:26 +0000
ROA not before:           Fri 30 Jan 2026 14:56:26 +0000
ROA not after:            Fri 29 Jan 2027 15:01:26 +0000
asID:                     267668
IP address blocks:        45.224.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:86:84:86:4a:ba:24:63:ea:b7:94:90:42:f3:88:82:b2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jan 30 14:56:26 2026 GMT
            Not After : Jan 29 15:01:26 2027 GMT
        Subject: CN=771B32079480F7CC26D14E9C16CABDD2BEF750D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c8:4e:6c:7e:98:a7:b2:f5:2b:fb:27:1f:15:
                    8a:da:d1:1c:bb:dc:b6:57:ba:b7:c5:8c:48:57:28:
                    52:b1:81:31:68:69:55:5f:68:e4:d1:f7:b7:af:15:
                    64:3f:a6:42:7d:6e:a7:ba:85:7d:8e:7a:03:a2:e1:
                    d2:ee:0e:e9:fa:0b:24:38:b8:8d:5c:9c:19:e5:8f:
                    a6:c1:4a:fc:06:c5:75:74:6c:8f:61:15:73:33:c5:
                    f8:ea:bf:46:1b:3d:53:5d:86:e2:60:39:54:67:f2:
                    af:13:6c:80:ba:dc:2c:58:25:77:5d:b0:52:34:be:
                    71:e8:66:f2:9b:09:30:37:c2:ee:af:ee:ab:b5:7d:
                    9b:ad:31:59:44:21:35:0b:23:8d:da:03:34:c8:11:
                    8e:b2:ff:5e:1a:dd:b1:14:81:34:c6:6d:3b:a0:d7:
                    12:ea:ea:5e:96:3d:9b:f4:0f:f1:31:68:2b:3d:dc:
                    e0:b6:7c:75:57:fe:ee:6e:a2:ba:35:6f:91:aa:cf:
                    ee:80:ba:d7:76:15:a6:58:82:80:9d:28:90:4a:ed:
                    30:e4:b1:c6:f2:9a:02:bf:98:61:a7:4d:08:a0:54:
                    70:f0:d1:44:3e:c7:f1:b0:87:95:4f:cc:89:bb:c7:
                    14:a2:e0:22:f3:91:e3:f4:b4:ef:28:a6:32:e9:31:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:32:07:94:80:F7:CC:26:D1:4E:9C:16:CA:BD:D2:BE:F7:50:D8
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:61:8a:7b:22:1b:7f:5b:e6:ac:25:09:d7:ea:5c:64:9e:55:
         05:98:70:58:db:bc:3f:58:ee:25:5b:08:3f:54:1d:72:f6:51:
         ba:aa:d9:e4:2d:15:13:7e:e2:c4:0a:37:44:3b:36:3f:65:17:
         dc:b1:ad:3c:49:fc:f3:eb:07:be:c5:3b:a2:28:ba:ac:ee:58:
         10:10:c6:ba:c7:7d:f0:8b:b3:13:d2:ea:f3:bf:6f:92:f5:6b:
         8d:9c:7c:1d:81:cf:69:88:5c:aa:7f:5d:73:b7:9f:76:a1:e0:
         08:80:d7:7a:b1:24:77:5a:d7:d0:0b:1a:4a:bb:99:15:65:b1:
         9f:7e:f8:0e:46:30:71:bf:aa:81:03:f5:13:bd:e0:37:02:8b:
         f2:d6:df:17:c8:50:48:8c:bf:eb:5d:d6:c1:0d:be:b0:c1:b7:
         c9:8b:1d:8e:8d:93:d0:78:da:56:48:3e:12:e1:55:85:4e:87:
         57:94:69:51:4c:69:44:8d:2d:fb:73:16:43:e2:2b:62:50:ad:
         0e:03:0f:83:74:4a:9a:58:53:81:df:a3:44:94:32:b2:ff:4f:
         cd:dc:0c:5a:e6:e6:14:2f:87:2d:5d:d1:8a:59:ac:a2:1b:16:
         e2:45:a8:fb:c7:33:fc:82:9b:73:f8:b7:b7:36:7d:b4:cd:fb:
         36:b1:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:23 2026 by rpki-client