Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
File:                     34352e3138342e36302e302f32322d3332203d3e20323639333137.roa (raw, json)
Hash identifier:          I0c5wVSdQa7yLSjf/uiuUcK8PJyCfs66kwMmxkTE2bM=
Subject key identifier:   45:97:FF:72:94:B8:1F:1C:D1:0E:FB:D3:01:45:E6:1B:C2:AE:5C:88
Certificate issuer:       /CN=EAFACC4CC465C679CE06E06B6183F7E1D043DCAB
Certificate serial:       044BA2C949DBB84D4799CDB33D0B4DC48BB9B651
Authority key identifier: EA:FA:CC:4C:C4:65:C6:79:CE:06:E0:6B:61:83:F7:E1:D0:43:DC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
Signing time:             Tue 03 Feb 2026 14:48:01 +0000
ROA not before:           Tue 03 Feb 2026 14:43:01 +0000
ROA not after:            Tue 02 Feb 2027 14:48:01 +0000
asID:                     269317
IP address blocks:        45.184.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.crl
                          rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:a2:c9:49:db:b8:4d:47:99:cd:b3:3d:0b:4d:c4:8b:b9:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAFACC4CC465C679CE06E06B6183F7E1D043DCAB
        Validity
            Not Before: Feb  3 14:43:01 2026 GMT
            Not After : Feb  2 14:48:01 2027 GMT
        Subject: CN=4597FF7294B81F1CD10EFBD30145E61BC2AE5C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:2d:a4:f9:19:b3:ba:b3:cb:be:27:21:f7:
                    92:82:f2:4d:53:ff:37:15:3e:b1:e6:36:d7:87:14:
                    54:37:2d:dd:f1:d3:9a:c7:ab:75:3a:e4:3d:8b:24:
                    1c:c1:46:e1:04:cf:aa:46:71:98:50:bf:2d:36:73:
                    ee:64:99:44:9d:51:97:0f:53:75:d2:34:59:93:86:
                    f8:6e:b2:85:55:6c:e9:f1:46:87:c1:cf:b6:ed:57:
                    31:32:88:1e:db:d0:da:f0:54:34:4b:9f:b7:ab:55:
                    d4:43:f1:b4:bc:a5:f8:7f:5f:9f:43:6d:3a:44:36:
                    b4:2d:da:19:27:62:33:1d:0b:cb:06:1e:c9:3d:06:
                    4e:87:57:5d:53:ad:82:5b:2b:81:be:ce:d6:9f:f6:
                    6e:41:e8:e0:1b:8a:76:84:9f:e9:ab:d9:9e:a6:61:
                    fc:0d:b3:59:54:6f:14:25:c0:42:c6:0a:5f:96:c1:
                    9c:85:a4:fe:12:49:eb:7c:cd:d2:f4:7c:ff:89:3c:
                    e6:82:27:78:e6:83:3e:3c:f1:9d:98:e0:a8:cc:b3:
                    44:24:bd:cf:3f:da:50:6f:2c:a8:59:15:b4:ef:dc:
                    a3:d9:0b:0b:71:62:1d:23:8b:33:42:b1:f9:26:98:
                    0a:44:69:7b:8e:14:3b:ed:03:10:1c:37:e3:1f:55:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:FF:72:94:B8:1F:1C:D1:0E:FB:D3:01:45:E6:1B:C2:AE:5C:88
            X509v3 Authority Key Identifier:
                keyid:EA:FA:CC:4C:C4:65:C6:79:CE:06:E0:6B:61:83:F7:E1:D0:43:DC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFACC4CC465C679CE06E06B6183F7E1D043DCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:b9:22:ea:15:9d:f7:eb:ef:a8:27:47:5d:0b:02:7d:42:
         3e:b9:40:ae:d4:ef:21:5e:cd:9e:36:56:7c:cb:48:23:35:c5:
         7e:3a:7c:0a:c8:fa:d0:17:c7:f7:37:b4:2f:73:4c:fc:2a:05:
         2b:82:4d:9a:ce:d0:6b:16:81:24:a9:f8:31:dc:26:56:ab:97:
         1c:d7:9f:7c:e7:98:ee:6d:c0:85:ac:9b:6b:f3:53:37:9a:98:
         48:1e:84:8a:dd:7b:94:d6:34:9e:60:06:8f:02:29:17:7d:0a:
         a2:ff:19:6a:29:d8:a1:38:8b:74:34:fd:96:af:d5:6e:8d:15:
         ed:4c:85:01:64:d6:de:4a:95:96:0e:40:7a:d3:51:68:8a:0b:
         a5:fd:4e:ca:ad:42:1c:6d:9e:b7:9e:c3:85:d1:7b:45:df:33:
         d2:41:2b:12:b2:d7:ce:94:07:12:8b:1b:48:8b:a1:8a:04:d9:
         b7:f6:76:4e:08:1b:05:96:53:51:e8:03:c0:7e:3c:92:07:f3:
         de:5b:eb:87:cb:0b:a9:57:d0:c5:f6:c8:cb:4c:3a:4e:0d:f3:
         13:5f:cd:23:94:9a:df:50:12:52:37:75:a5:b6:04:f4:40:90:
         df:70:99:3c:d6:92:69:31:f5:84:9e:1f:8e:68:43:5c:fb:7d:
         0a:7c:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:08:52 2026 by rpki-client