Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa
File:                     34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa (raw, json)
Hash identifier:          WGcQX6mQ9sZyzuM2Wo7zck9+FBL+AsEv87XjRGpfS6c=
Subject key identifier:   A3:5F:05:B1:41:79:3E:0A:E2:59:53:C2:A2:DF:24:ED:0B:DF:3F:24
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       4149198D4D16A283F04B02CD4A05F4802718CCFE
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa
Signing time:             Wed 04 Feb 2026 17:38:44 +0000
ROA not before:           Wed 04 Feb 2026 17:33:44 +0000
ROA not after:            Wed 03 Feb 2027 17:38:44 +0000
asID:                     269392
IP address blocks:        45.184.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:19:8d:4d:16:a2:83:f0:4b:02:cd:4a:05:f4:80:27:18:cc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Feb  4 17:33:44 2026 GMT
            Not After : Feb  3 17:38:44 2027 GMT
        Subject: CN=A35F05B141793E0AE25953C2A2DF24ED0BDF3F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:2e:58:a1:b7:8f:30:c3:e1:94:77:74:04:
                    75:ae:8e:53:23:24:94:57:15:47:4d:03:a0:48:62:
                    96:26:e4:f0:b8:2e:cc:b4:f6:43:0d:c3:f5:7a:5c:
                    17:81:77:23:fa:58:c1:a3:08:4b:ed:e4:32:5c:0f:
                    4f:4e:3f:72:78:04:ea:a1:43:d9:4c:c8:68:1a:e3:
                    10:49:e6:7d:b3:05:e8:f4:eb:38:01:39:66:f9:72:
                    ab:57:f4:86:ec:7a:ee:d3:e4:ac:83:4e:10:90:a0:
                    25:1d:c1:d8:ab:2e:bb:35:be:b9:f0:46:6e:2e:f8:
                    0a:b5:c8:79:56:3e:93:0d:34:02:52:5a:c3:a3:59:
                    1c:4c:ad:c2:a3:93:55:71:0f:d5:44:f1:aa:86:0d:
                    11:08:04:68:d4:07:34:68:be:8d:a8:6c:5a:a6:5a:
                    9f:bc:5c:e1:73:20:bc:d3:4f:51:c4:ed:96:2e:4b:
                    2e:2d:e5:52:65:72:44:da:f5:a4:c4:1b:74:b9:c1:
                    16:59:2f:2a:55:f5:a6:ab:04:55:b7:db:92:63:17:
                    f0:03:74:07:61:ef:86:7d:c6:47:af:ff:cf:b2:f8:
                    17:db:a7:d1:cc:e2:02:f1:d7:09:d5:bf:a5:51:c8:
                    21:85:65:49:43:51:4e:1e:01:3f:8b:3a:74:ff:5d:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:05:B1:41:79:3E:0A:E2:59:53:C2:A2:DF:24:ED:0B:DF:3F:24
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:8f:7b:1c:b5:ea:83:78:97:95:6e:ce:2d:6d:93:ba:56:
         1e:e2:18:05:bb:24:b7:ed:8d:b6:0c:c2:af:0b:8a:71:66:3d:
         90:1b:55:ac:41:dd:ea:16:9f:92:2a:99:c9:a6:59:a9:f0:db:
         ea:2a:a2:98:a1:19:08:6b:e7:4d:57:81:e5:42:21:c2:fe:4a:
         79:6e:d9:f7:25:3e:7c:fd:83:25:65:ad:7d:ef:78:c8:b3:84:
         8a:90:8c:11:55:a1:c3:7e:09:a7:7b:be:db:58:b2:62:5a:e5:
         c7:f8:70:85:fc:04:4c:72:09:41:9b:02:0b:e0:4d:ee:95:ee:
         e9:2f:84:0b:eb:55:7c:37:8e:82:ae:e8:e8:3d:52:e7:76:85:
         65:63:d2:07:07:f4:38:9b:17:38:d3:7e:ae:1a:12:10:3b:f3:
         38:12:f9:e0:36:d4:1b:70:b0:43:03:77:2c:08:8d:03:f2:0b:
         3c:86:05:78:f0:4d:1e:97:71:6d:fd:b3:69:72:20:d0:92:8d:
         b5:c1:df:01:70:c9:bd:30:88:b4:95:79:74:14:b7:c8:b4:0b:
         9a:9e:85:92:3c:46:a9:35:96:13:d4:48:19:ac:a6:c8:e2:b8:
         e8:53:b1:59:28:d4:72:83:f5:86:13:72:c1:ec:87:e8:e7:ce:
         92:88:f9:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQUkZjU0WooPwSwLNSgX0gCcYzP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ1QjM3RkRFMUEzMDNDM0E0QkQ1QTFDMjZFMDA4QUFD
OTExMzU0MTAeFw0yNjAyMDQxNzMzNDRaFw0yNzAyMDMxNzM4NDRaMDMxMTAvBgNV
BAMTKEEzNUYwNUIxNDE3OTNFMEFFMjU5NTNDMkEyREYyNEVEMEJERjNGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wy5YobePMMPhlHd0BHWujlMj
JJRXFUdNA6BIYpYm5PC4Lsy09kMNw/V6XBeBdyP6WMGjCEvt5DJcD09OP3J4BOqh
Q9lMyGga4xBJ5n2zBej06zgBOWb5cqtX9Ibseu7T5KyDThCQoCUdwdirLrs1vrnw
Rm4u+Aq1yHlWPpMNNAJSWsOjWRxMrcKjk1VxD9VE8aqGDREIBGjUBzRovo2obFqm
Wp+8XOFzILzTT1HE7ZYuSy4t5VJlckTa9aTEG3S5wRZZLypV9aarBFW325JjF/AD
dAdh74Z9xkev/8+y+Bfbp9HM4gLx1wnVv6VRyCGFZUlDUU4eAT+LOnT/XcglAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo18FsUF5PgriWVPCot8k7QvfPyQwHwYDVR0j
BBgwFoAU7Vs3/eGjA8OkvVocJuAIqskRNUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY2Rm5INTlvWVc1YWVMS29LNUQ1aEtvdWttVlV4OEtQZjh5dHFKTGVx
dXQvMS9FRDVCMzdGREUxQTMwM0MzQTRCRDVBMUMyNkUwMDhBQUM5MTEzNTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VENUIzN0ZERTFBMzAzQzNB
NEJENUExQzI2RTAwOEFBQzkxMTM1NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNkZuSDU5b1lXNWFlTEtvSzVENWhLb3VrbVZVeDhLUGY4eXRxSkxlcXV0LzEv
MzQzNTJlMzEzODM0MmUzMTM3MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuLMwDQYJKoZIhvcNAQELBQADggEBAEBej3sc
teqDeJeVbs4tbZO6Vh7iGAW7JLftjbYMwq8LinFmPZAbVaxB3eoWn5IqmcmmWanw
2+oqopihGQhr501XgeVCIcL+Snlu2fclPnz9gyVlrX3veMizhIqQjBFVocN+Cad7
vttYsmJa5cf4cIX8BExyCUGbAgvgTe6V7ukvhAvrVXw3joKu6Og9Uud2hWVj0gcH
9DibFzjTfq4aEhA78zgS+eA21BtwsEMDdywIjQPyCzyGBXjwTR6XcW39s2lyINCS
jbXB3wFwyb0wiLSVeXQUt8i0C5qehZI8Rqk1lhPUSBmspsjiuOhTsVko1HKD9YYT
csHsh+jnzpKI+Uw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:27 2026 by rpki-client