Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37342e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          7vNG/+DTlZITKmq/D7QPsKm5QgMrsRURCXlC9/dVcPk=
Subject key identifier:   02:70:4B:37:60:0D:6F:36:63:DE:0A:9F:08:26:E9:84:82:E7:E5:91
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       40BC6B700ED16C89C13A0A867B40AF4146614604
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa
Signing time:             Fri 30 Jan 2026 15:01:26 +0000
ROA not before:           Fri 30 Jan 2026 14:56:26 +0000
ROA not after:            Fri 29 Jan 2027 15:01:26 +0000
asID:                     267668
IP address blocks:        45.224.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bc:6b:70:0e:d1:6c:89:c1:3a:0a:86:7b:40:af:41:46:61:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jan 30 14:56:26 2026 GMT
            Not After : Jan 29 15:01:26 2027 GMT
        Subject: CN=02704B37600D6F3663DE0A9F0826E98482E7E591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:1a:55:8d:e2:0b:aa:bc:99:7a:cb:f5:98:
                    46:51:4a:2a:3e:72:4a:d5:b4:99:39:dc:af:7a:3a:
                    33:e5:96:04:b2:9c:99:3a:15:cd:54:72:92:39:59:
                    9d:ae:da:cd:2a:36:8f:09:17:b7:ab:30:de:e1:83:
                    6b:85:38:66:de:7d:83:89:4c:02:47:43:21:fc:30:
                    49:37:13:0b:25:9d:ba:c8:32:a2:59:e2:e8:37:14:
                    0c:f4:8c:cc:61:c4:9e:e7:4e:a0:3b:37:23:b9:df:
                    24:5d:db:30:20:ea:36:69:41:5c:77:3b:ee:a4:fc:
                    91:17:d1:c1:52:b5:0a:a8:81:fa:d9:e9:11:c1:dc:
                    a2:76:ec:e5:61:49:ed:57:d3:b8:ec:54:d6:ac:3c:
                    f6:76:21:06:3a:e0:da:fd:b0:88:56:ae:b9:ff:3d:
                    e4:74:8f:5e:6b:a6:b5:f4:7d:2c:82:ba:96:ab:c2:
                    85:ba:d9:3b:70:ec:45:8a:0b:9b:2a:dc:24:90:ab:
                    30:5a:29:00:9c:4a:fe:ac:5f:7a:e9:46:7c:8a:df:
                    d3:0e:ae:6b:06:cf:f4:ee:86:79:09:a9:1e:56:f9:
                    f4:52:c5:60:22:fe:40:92:8e:37:58:d4:5f:b2:41:
                    1a:3a:3b:31:90:06:be:8d:f5:02:e8:cc:f9:58:cd:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:4B:37:60:0D:6F:36:63:DE:0A:9F:08:26:E9:84:82:E7:E5:91
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:35:ca:7d:1a:ca:b9:a6:5c:4a:4d:e2:cb:23:02:6e:e5:
         85:b6:b0:58:68:51:86:67:15:b4:56:53:62:80:66:ce:68:74:
         b1:ea:1c:21:31:40:c8:17:27:8f:31:f3:47:27:11:c9:a7:5c:
         08:7e:4c:33:7a:a5:d9:44:bd:de:75:c0:3a:04:fc:55:84:2e:
         34:63:68:79:7a:f9:a4:52:f8:69:d4:2c:a3:d8:81:2d:76:0c:
         02:42:a9:42:a8:01:1a:ee:d0:30:f3:9e:de:54:18:b8:0e:36:
         bb:0f:63:2c:15:58:c1:57:fd:eb:2f:bf:0b:4c:d5:04:7b:f4:
         03:9f:9a:7c:f6:de:b3:25:6e:1f:cb:80:e0:85:39:6c:3a:38:
         4f:f9:24:e7:c9:72:ee:2c:df:03:4d:7a:db:87:d7:30:10:f0:
         30:52:f9:5f:63:41:2a:b3:b3:01:45:98:b2:6e:4f:94:c7:be:
         a2:ce:59:43:b4:90:c7:bc:1e:a6:bf:c6:68:1c:7e:1a:88:cb:
         e4:ff:97:b5:88:4f:4c:54:a6:9d:e9:d1:97:25:12:ef:7f:f1:
         47:d8:bf:93:0c:3a:c4:a1:c9:10:0a:d0:70:b7:41:f8:8e:97:
         05:18:1a:c4:23:20:d1:aa:55:0c:cb:c4:40:e2:c2:21:bb:65:
         02:fd:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:34:59 2026 by rpki-client