Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa
File:                     34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa (raw, json)
Hash identifier:          2UcgPxqhQBAi2yDBDOCElRlf0casoJRPiLh1OU+hU8g=
Subject key identifier:   0B:20:1A:8F:F9:A9:CE:EA:17:D2:03:00:4C:C9:D5:26:88:C1:DB:E8
Certificate issuer:       /CN=EF3EBB37CD7BC65195339F12C6657C0438E1031C
Certificate serial:       36EB36BA7B2C8D7824CDEA51AA44A54EBF894FCE
Authority key identifier: EF:3E:BB:37:CD:7B:C6:51:95:33:9F:12:C6:65:7C:04:38:E1:03:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa
Signing time:             Mon 05 Jan 2026 22:15:27 +0000
ROA not before:           Mon 05 Jan 2026 22:10:27 +0000
ROA not after:            Mon 04 Jan 2027 22:15:27 +0000
asID:                     268823
IP address blocks:        45.173.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.crl
                          rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:36:ba:7b:2c:8d:78:24:cd:ea:51:aa:44:a5:4e:bf:89:4f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3EBB37CD7BC65195339F12C6657C0438E1031C
        Validity
            Not Before: Jan  5 22:10:27 2026 GMT
            Not After : Jan  4 22:15:27 2027 GMT
        Subject: CN=0B201A8FF9A9CEEA17D203004CC9D52688C1DBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:48:1a:25:d8:08:89:d1:0e:cb:58:4c:78:
                    b9:4e:dc:62:f8:2e:93:eb:a2:ed:44:44:7e:86:94:
                    8b:e9:ca:7d:0f:e9:d5:75:5a:8d:c2:36:b1:b8:0a:
                    e3:74:5e:b8:59:55:e8:40:72:7f:c4:ce:09:66:14:
                    d1:ea:a6:19:ac:ea:85:76:4f:5f:31:78:86:85:91:
                    e7:f6:cf:ea:45:68:bb:1e:85:f1:af:71:22:63:7e:
                    39:ea:64:b0:33:d8:7f:46:1a:57:1f:70:e3:97:f1:
                    ce:f0:94:44:47:8e:fd:c5:93:bd:03:85:31:07:66:
                    05:5d:6f:92:f0:42:1c:34:72:1b:89:dc:bb:29:d6:
                    54:77:ea:c3:d1:86:47:2f:94:cc:07:b2:85:e2:2b:
                    a4:aa:2e:68:6d:a1:a2:83:69:69:be:b9:04:ba:e9:
                    fd:15:4c:20:b9:dd:7d:6c:a2:e2:2b:8d:ec:2d:93:
                    20:84:28:2d:f6:f3:4f:f8:41:9b:e9:da:00:1c:3e:
                    63:f1:44:24:f0:6f:19:c8:e5:cc:4e:49:c9:9c:ac:
                    33:15:ac:e6:25:f3:9a:ba:19:06:86:5a:db:3a:ad:
                    cb:80:ef:39:24:ad:6e:1e:9e:dc:a2:2f:f5:ae:e7:
                    ed:f1:e3:c4:82:b1:52:c3:37:9e:7d:27:0d:ca:5e:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:1A:8F:F9:A9:CE:EA:17:D2:03:00:4C:C9:D5:26:88:C1:DB:E8
            X509v3 Authority Key Identifier:
                keyid:EF:3E:BB:37:CD:7B:C6:51:95:33:9F:12:C6:65:7C:04:38:E1:03:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:e9:73:51:19:77:87:2f:1a:52:49:3c:d7:3b:f1:60:76:dd:
         f0:fb:54:49:06:f4:ee:7a:46:e9:38:64:de:e2:32:ce:05:6a:
         71:4f:0e:6c:f8:7a:6b:26:d5:e8:07:8a:2e:32:f6:f4:f7:a6:
         c1:2e:1b:4e:de:d3:80:e1:db:d2:28:33:d5:ae:d8:68:36:e9:
         00:8e:d1:2e:78:7b:3f:83:0b:59:ff:25:1d:bb:df:94:9a:23:
         bf:c3:77:be:e6:24:8f:33:25:e2:55:97:06:43:cc:0a:12:ab:
         a9:ae:11:a6:32:b3:4d:8b:5b:39:31:6e:56:18:11:57:81:73:
         eb:cf:41:f9:fd:7b:6c:d2:cc:66:a1:96:01:53:32:a2:81:bd:
         23:08:09:94:c5:99:c7:0c:08:72:1d:8d:97:6f:6d:df:34:ad:
         82:b0:77:33:4e:76:43:e4:f2:c4:92:9a:1b:6e:7a:a4:16:d6:
         c5:5f:a7:1f:60:6f:79:d7:19:be:74:f7:92:05:fc:35:dc:f5:
         df:78:7d:31:21:d1:3d:40:b5:d4:3e:17:65:f5:1a:24:00:15:
         af:93:c2:f0:3e:8e:7f:0f:00:c3:50:a5:76:0b:10:99:f6:fb:
         e8:48:c9:d9:fe:5a:aa:d0:47:60:bd:46:e0:e8:05:48:26:cb:
         e5:a7:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:46 2026 by rpki-client