Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32322d3232203d3e20323638373034.roa
File:                     34352e3137312e38382e302f32322d3232203d3e20323638373034.roa (raw, json)
Hash identifier:          UMRwWeokajUjwOJY8Xi5Y61M/F3TV0Yl1Yz8VbopGwM=
Subject key identifier:   FC:AC:7A:3C:FD:DD:A3:CE:9F:E9:8E:37:E8:C1:D7:87:42:54:D2:25
Certificate issuer:       /CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
Certificate serial:       35F57D52776BDF185F7ABC96320A41CD0572227C
Authority key identifier: EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32322d3232203d3e20323638373034.roa
Signing time:             Wed 02 Sep 2026 00:07:49 +0000
ROA not before:           Wed 02 Sep 2026 00:02:49 +0000
ROA not after:            Wed 01 Sep 2027 00:07:49 +0000
asID:                     268704
IP address blocks:        45.171.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl
                          rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f5:7d:52:77:6b:df:18:5f:7a:bc:96:32:0a:41:cd:05:72:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
        Validity
            Not Before: Sep  2 00:02:49 2026 GMT
            Not After : Sep  1 00:07:49 2027 GMT
        Subject: CN=FCAC7A3CFDDDA3CE9FE98E37E8C1D7874254D225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:3d:be:35:a1:a4:29:1c:8c:e4:eb:70:52:
                    50:0c:b2:64:1c:22:c1:c2:1c:20:ab:d7:d4:58:93:
                    5a:45:f6:04:04:3e:a7:6a:ab:3c:e6:51:2c:26:6c:
                    3c:94:80:ca:77:17:51:f4:a3:e0:a1:35:f2:38:05:
                    d8:f6:65:ec:97:7b:8f:6b:51:b5:56:e1:22:06:e3:
                    c2:37:77:97:a3:fb:5b:47:0d:50:62:81:e2:6a:f4:
                    be:9b:5b:e6:b0:1f:90:44:1b:e3:8e:9e:27:41:31:
                    12:f4:7b:20:f9:d7:fe:52:6e:7a:bc:12:d9:46:b5:
                    a9:43:7a:2b:12:25:7a:57:23:e2:e6:34:42:34:61:
                    d8:88:c3:ca:20:b3:d4:a5:2b:1e:94:46:3e:55:25:
                    5c:2c:6f:77:78:0f:30:c0:96:55:65:3f:4a:89:c5:
                    71:b1:c0:ba:01:a6:b3:ad:0f:02:5b:78:ad:fa:c1:
                    3b:8b:c5:ce:c8:d2:75:44:b6:9b:23:51:0f:95:38:
                    67:a5:28:8c:29:99:42:25:ef:01:b4:e1:59:69:26:
                    49:e0:00:43:8a:1b:26:a7:19:c9:18:d9:c6:07:04:
                    ac:cf:c6:9d:49:8e:6f:92:10:78:86:e6:31:65:1a:
                    01:41:0f:61:3d:64:a1:b8:5a:d7:4e:e6:9f:56:f9:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AC:7A:3C:FD:DD:A3:CE:9F:E9:8E:37:E8:C1:D7:87:42:54:D2:25
            X509v3 Authority Key Identifier:
                keyid:EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32322d3232203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:e1:01:2a:10:37:dc:7c:30:7f:eb:3f:37:08:c0:04:5f:
         a5:63:22:b4:fc:06:66:5e:f9:dd:81:05:6a:6c:5e:ea:56:23:
         7b:d7:58:a1:8e:7e:8e:78:51:1c:1c:1a:97:ac:25:0c:6c:c0:
         13:87:26:ec:33:bb:2b:7e:69:22:44:e2:37:07:c7:24:3e:16:
         0b:e8:cb:6d:33:09:6c:d2:08:ef:7a:0a:7a:f0:4b:f7:aa:e8:
         56:3b:4d:b6:fd:0a:07:c6:75:a5:2b:78:eb:78:e3:68:65:8e:
         74:df:8f:2c:e6:86:28:fa:94:11:e6:34:56:f8:94:42:c0:e1:
         20:f1:2f:cb:43:13:b0:e5:7b:ac:90:9b:a2:05:79:63:56:db:
         c1:66:ff:86:cb:ef:5f:8e:b8:56:eb:d6:b3:42:01:35:b6:76:
         85:d6:02:8c:84:db:43:ac:96:e3:3b:ff:62:cc:33:9c:c4:05:
         1f:38:8b:24:32:3c:ed:2c:64:28:f5:7c:da:06:92:dc:ab:bd:
         60:cf:3c:65:3d:c4:c7:4e:e5:0b:32:ca:1a:82:66:b2:3d:f4:
         c3:70:16:d0:40:db:c1:fc:b2:ee:e4:8e:b2:1c:0b:fd:8c:a1:
         73:37:6f:24:5c:2f:c9:0a:f3:0b:65:43:c2:04:af:41:ca:76:
         7b:91:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:50:44 2026 by rpki-client