Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa
File:                     34352e3137312e39312e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier:          +u1m5M62NIUuLOJSUzC+f3b60OU4fqVufPw+LD8rRKc=
Subject key identifier:   83:2B:A8:31:D6:9C:21:71:CF:53:8E:FB:5D:2E:AB:7B:56:75:35:E7
Certificate issuer:       /CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
Certificate serial:       240C5B75989A0CA35C4775F386028B9C4303F9F2
Authority key identifier: EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa
Signing time:             Wed 02 Sep 2026 00:07:49 +0000
ROA not before:           Wed 02 Sep 2026 00:02:49 +0000
ROA not after:            Wed 01 Sep 2027 00:07:49 +0000
asID:                     268704
IP address blocks:        45.171.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl
                          rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:5b:75:98:9a:0c:a3:5c:47:75:f3:86:02:8b:9c:43:03:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE23919A0166A64D2EE99A000DF1E41A2B58345
        Validity
            Not Before: Sep  2 00:02:49 2026 GMT
            Not After : Sep  1 00:07:49 2027 GMT
        Subject: CN=832BA831D69C2171CF538EFB5D2EAB7B567535E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:a2:89:38:62:a7:aa:46:5d:cb:70:75:a4:
                    4f:96:66:69:09:35:1d:8b:19:31:0f:7d:52:ab:c4:
                    67:7f:07:ee:5d:5b:91:a0:5e:89:e0:64:3c:fd:ba:
                    0e:b7:0d:ff:ec:3e:3f:97:89:62:67:c9:22:c6:f3:
                    5e:66:dc:72:0c:f4:d4:44:0e:90:e4:b5:9d:03:09:
                    e5:4b:56:a0:8c:33:23:44:6f:f5:70:34:30:87:a3:
                    34:aa:d0:36:24:4f:b4:20:d9:36:0b:08:f3:6b:12:
                    ac:84:1d:f6:c9:2d:f6:c9:1f:fc:52:51:53:d9:fd:
                    62:7c:7d:b2:98:7a:c4:ad:7d:c3:a1:53:ba:5a:78:
                    1a:3f:c8:d5:fb:72:b0:7e:ba:99:64:9b:e8:8d:4e:
                    5a:88:20:c1:76:85:e0:9e:3f:2b:c3:ae:ef:5b:92:
                    ba:52:35:d7:48:9c:d2:f1:7a:4e:8c:dd:17:6d:48:
                    4c:1f:de:9a:e7:5f:50:cf:db:cf:a2:97:45:2d:53:
                    14:03:04:af:92:c4:07:f2:c2:26:31:f3:96:fa:36:
                    c4:fd:12:57:8a:7f:d9:26:39:e8:f0:5e:60:62:a3:
                    ef:42:e5:c5:17:51:58:fa:34:f8:ad:c8:4b:36:fb:
                    4b:30:a3:ab:c5:bb:c3:89:2f:06:28:c3:95:ce:85:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:A8:31:D6:9C:21:71:CF:53:8E:FB:5D:2E:AB:7B:56:75:35:E7
            X509v3 Authority Key Identifier:
                keyid:EA:E2:39:19:A0:16:6A:64:D2:EE:99:A0:00:DF:1E:41:A2:B5:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/EAE23919A0166A64D2EE99A000DF1E41A2B58345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAE23919A0166A64D2EE99A000DF1E41A2B58345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:66:d8:1a:77:16:be:4c:45:c6:76:2d:e4:d9:1e:ab:e4:
         3e:fa:23:fd:68:e6:97:7c:7e:32:f4:7e:d8:c8:b4:d3:b8:80:
         10:ba:80:b5:b0:72:ae:0e:81:cd:4f:f2:6f:5a:93:b0:5b:e3:
         88:41:d6:a1:3b:4d:ce:ba:42:3b:cd:c7:d2:c9:5f:cf:08:d0:
         fd:60:5b:80:31:c4:ec:aa:21:20:5a:c4:38:ee:79:07:34:e4:
         46:4a:eb:90:d1:c3:95:00:2b:28:c1:27:6f:e5:8c:ea:b5:63:
         cc:51:07:cf:22:5a:10:6b:8a:ca:2d:6b:82:d7:7d:93:72:19:
         5c:2e:8d:f5:b3:ec:e6:56:7d:69:5b:ed:09:f2:de:a2:b4:02:
         c7:fd:d5:de:0f:79:0c:47:9a:fc:a3:fc:59:ca:41:01:c7:f0:
         9d:54:bc:6b:bf:30:f4:53:59:a7:4b:7b:18:1e:f8:5a:d5:a6:
         3f:e7:57:0f:72:c8:c5:c5:c7:46:38:69:b8:c4:63:25:4e:af:
         5e:eb:94:9b:7d:78:bc:5c:f4:4a:2d:8a:1f:40:47:a8:78:35:
         66:b5:20:38:99:1d:dd:7e:ea:4f:a8:c8:7c:d4:93:2f:36:a9:
         41:2b:8d:32:55:6e:04:03:0a:47:56:f5:4b:82:0b:a2:a4:e4:
         48:11:92:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJAxbdZiaDKNcR3XzhgKLnEMD+fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMjM5MTlBMDE2NkE2NEQyRUU5OUEwMDBERjFFNDFB
MkI1ODM0NTAeFw0yNjA5MDIwMDAyNDlaFw0yNzA5MDEwMDA3NDlaMDMxMTAvBgNV
BAMTKDgzMkJBODMxRDY5QzIxNzFDRjUzOEVGQjVEMkVBQjdCNTY3NTM1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNqKJOGKnqkZdy3B1pE+WZmkJ
NR2LGTEPfVKrxGd/B+5dW5GgXongZDz9ug63Df/sPj+XiWJnySLG815m3HIM9NRE
DpDktZ0DCeVLVqCMMyNEb/VwNDCHozSq0DYkT7Qg2TYLCPNrEqyEHfbJLfbJH/xS
UVPZ/WJ8fbKYesStfcOhU7paeBo/yNX7crB+uplkm+iNTlqIIMF2heCePyvDru9b
krpSNddInNLxek6M3RdtSEwf3prnX1DP28+il0UtUxQDBK+SxAfywiYx85b6NsT9
EleKf9kmOejwXmBio+9C5cUXUVj6NPityEs2+0swo6vFu8OJLwYow5XOhXGhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgyuoMdacIXHPU477XS6re1Z1NecwHwYDVR0j
BBgwFoAU6uI5GaAWamTS7pmgAN8eQaK1g0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWVrYlhMcUZpWlZxcmdHTVlnS3ZCSEVMMk1vejZLbzdBdzNlQmV4Nk1F
cFYvMC9FQUUyMzkxOUEwMTY2QTY0RDJFRTk5QTAwMERGMUU0MUEyQjU4MzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBRTIzOTE5QTAxNjZBNjRE
MkVFOTlBMDAwREYxRTQxQTJCNTgzNDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vla2JYTHFGaVpWcXJnR01ZZ0t2QkhFTDJNb3o2S283QXczZUJleDZNRXBWLzAv
MzQzNTJlMzEzNzMxMmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALatbMA0GCSqGSIb3DQEBCwUAA4IBAQANnGbYGncW
vkxFxnYt5Nkeq+Q++iP9aOaXfH4y9H7YyLTTuIAQuoC1sHKuDoHNT/JvWpOwW+OI
QdahO03OukI7zcfSyV/PCND9YFuAMcTsqiEgWsQ47nkHNORGSuuQ0cOVACsowSdv
5YzqtWPMUQfPIloQa4rKLWuC132TchlcLo31s+zmVn1pW+0J8t6itALH/dXeD3kM
R5r8o/xZykEBx/CdVLxrvzD0U1mnS3sYHvha1aY/51cPcsjFxcdGOGm4xGMlTq9e
65SbfXi8XPRKLYofQEeoeDVmtSA4mR3dfupPqMh81JMvNqlBK40yVW4EAwpHVvVL
gguipORIEZJ/
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:42:22 2026 by rpki-client