Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa
File:                     34352e3137312e39302e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier:          JWrU3EVE3vZCV+ZDiD64vJ0zaikvYt9otYgWLEMoX6M=
Subject key identifier:   0D:51:3C:7C:AC:9B:13:11:F8:78:AB:CC:B4:02:C5:0F:8E:6C:C7:CD
Certificate issuer:       /CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
Certificate serial:       4BCB2D5377B6843D2B3268C164F0F94DF3C51458
Authority key identifier: EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa
Signing time:             Wed 02 Sep 2026 00:07:48 +0000
ROA not before:           Wed 02 Sep 2026 00:02:48 +0000
ROA not after:            Wed 01 Sep 2027 00:07:48 +0000
asID:                     268704
IP address blocks:        45.171.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl
                          rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 09:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cb:2d:53:77:b6:84:3d:2b:32:68:c1:64:f0:f9:4d:f3:c5:14:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
        Validity
            Not Before: Sep  2 00:02:48 2026 GMT
            Not After : Sep  1 00:07:48 2027 GMT
        Subject: CN=0D513C7CAC9B1311F878ABCCB402C50F8E6CC7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:11:e8:66:87:32:11:d2:90:9b:b0:70:09:
                    d6:cf:9c:37:b2:16:56:c1:56:92:8e:52:69:31:4a:
                    e9:6c:49:84:cc:29:0e:8c:10:a7:7a:0e:68:d0:87:
                    f3:f2:d8:f8:73:86:13:0e:0b:64:3b:6b:51:c3:a2:
                    f6:a4:d6:d9:1b:62:2f:04:92:7b:a4:73:c7:7b:81:
                    6d:5a:ac:92:00:c2:dc:2d:e2:35:f5:bf:3e:75:a1:
                    f0:02:ee:ce:16:09:96:33:c7:3a:08:3b:ff:91:7f:
                    0e:81:6a:a6:9e:31:f1:e1:bb:7a:93:6f:cd:22:0a:
                    c4:bf:76:03:a4:8c:48:8d:a3:7f:77:09:27:95:d9:
                    bc:a9:1a:9a:83:55:65:7a:f8:60:f0:87:fd:72:f5:
                    02:3c:c8:b7:d6:b5:93:af:f3:63:cd:2d:e0:33:42:
                    f1:11:8c:88:af:57:5f:21:25:d0:76:e5:02:de:82:
                    c3:fe:85:19:b7:d5:87:6a:d5:17:97:4c:ab:d1:4c:
                    19:2e:86:9b:b1:bf:aa:29:1f:fc:24:7d:c4:b1:07:
                    3c:aa:67:68:1e:f1:2f:ab:89:5d:0e:63:e6:9b:f6:
                    4f:a4:66:72:1f:1e:ef:93:87:34:75:1f:28:aa:9f:
                    69:36:de:54:7e:13:99:72:cc:10:97:19:f6:fc:02:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:3C:7C:AC:9B:13:11:F8:78:AB:CC:B4:02:C5:0F:8E:6C:C7:CD
            X509v3 Authority Key Identifier:
                keyid:EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:f2:4f:8d:c2:69:cb:21:ec:f6:f7:db:fd:69:ef:d2:98:
         4d:a0:a2:c0:1b:20:1c:fd:7b:2c:e9:d8:63:31:2d:1d:b6:ae:
         5c:15:77:59:d3:96:2f:e6:43:96:fd:98:a5:52:c6:6a:62:49:
         20:6c:26:69:50:d3:17:3d:02:6a:ea:41:4d:79:6f:0f:5f:5b:
         f8:a8:dc:9e:da:77:5c:37:05:26:a5:ba:19:f5:e9:51:fb:b6:
         88:c3:86:92:f7:c1:25:13:78:c5:bd:a0:da:0d:52:1a:ee:52:
         c9:d7:4b:46:15:ac:31:e3:f6:67:67:a4:4b:62:0c:bf:91:db:
         0f:61:39:5d:24:d0:f8:72:2d:4a:52:28:fa:79:6d:fe:84:ea:
         fb:4d:e0:66:06:1a:bc:34:97:11:94:9c:bb:9f:45:c3:84:38:
         bf:fa:fd:09:06:89:75:82:b3:66:f8:ba:0f:e6:91:ed:b2:ca:
         00:cb:e2:31:06:20:a9:9d:c7:e2:59:e9:cd:37:39:36:1b:32:
         cf:97:8e:6e:30:0f:c9:a2:f3:3f:8d:7a:86:69:a3:6d:d2:51:
         b9:f2:f3:43:fe:f4:89:1d:41:ca:e5:69:73:e9:05:ae:49:02:
         a1:c9:9f:d3:f6:d7:ac:31:1a:35:1e:b5:11:4e:05:92:73:ee:
         5b:a1:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:21:23 2026 by rpki-client