Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa
File:                     34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          abQhG1dAzT3jW+P5WDuWLuQlMHWNlM3Uu5P6u/YKUfY=
Subject key identifier:   78:2D:7C:0F:5D:7B:FB:D4:B3:EC:B3:67:74:B2:41:39:47:9A:72:F4
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       6780C8E367885717F747B5BEA44F6534AD1411F7
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa
Signing time:             Mon 02 Mar 2026 21:17:50 +0000
ROA not before:           Mon 02 Mar 2026 21:12:50 +0000
ROA not after:            Mon 01 Mar 2027 21:17:50 +0000
asID:                     263661
IP address blocks:        45.179.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 23:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:80:c8:e3:67:88:57:17:f7:47:b5:be:a4:4f:65:34:ad:14:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Mar  2 21:12:50 2026 GMT
            Not After : Mar  1 21:17:50 2027 GMT
        Subject: CN=782D7C0F5D7BFBD4B3ECB36774B24139479A72F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:89:23:76:e7:38:ca:21:b2:fa:61:89:48:
                    0a:29:cf:7a:9c:cf:44:f8:b1:c8:43:3b:1d:2b:ea:
                    d0:45:3b:a0:34:41:01:fa:76:59:75:8f:0d:13:7d:
                    da:b9:8f:83:14:51:2d:fa:87:9f:b0:94:aa:95:32:
                    2b:3c:72:56:ee:fe:af:36:ed:13:a3:6b:20:9d:5f:
                    2b:b5:27:16:a5:d8:82:e6:0b:6d:63:91:3c:62:53:
                    db:67:d4:30:04:92:65:16:19:6a:7a:6d:36:f7:fb:
                    e6:f6:33:52:a0:d5:1b:08:fb:7b:29:d2:7b:fd:53:
                    cd:90:bd:95:ad:d2:07:75:bd:51:e2:06:23:77:5e:
                    16:fa:30:eb:bd:46:91:b6:5d:72:16:11:30:67:cf:
                    3f:43:9e:85:75:89:14:96:79:03:7b:bf:69:b0:13:
                    95:11:fb:7a:36:be:8c:51:c1:ce:45:1c:b7:fd:a7:
                    ee:12:c1:1c:86:1e:40:b1:73:20:49:9b:eb:ce:40:
                    0a:dc:da:88:28:a8:90:e8:50:bb:e1:c7:f5:49:13:
                    5c:ae:31:12:9b:ba:ce:8f:1b:4b:4b:e2:a0:bc:cc:
                    f2:41:bd:98:99:fa:a2:f3:2c:ff:48:01:61:6e:48:
                    8d:06:2b:9e:17:ab:cf:97:d8:ed:a8:02:f0:f2:72:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:7C:0F:5D:7B:FB:D4:B3:EC:B3:67:74:B2:41:39:47:9A:72:F4
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:9a:fc:99:1f:23:05:b2:65:78:bc:06:cf:fe:61:ca:b7:
         57:38:0c:c9:3e:85:e5:d1:05:4b:3f:7a:8c:0f:c0:76:6c:cb:
         84:9d:75:4a:d1:55:18:19:51:cc:1f:df:e1:2d:6d:ca:43:ca:
         d9:7b:94:52:4c:6f:b6:b1:e0:99:de:b8:89:12:29:2c:d9:6d:
         65:a6:3f:26:30:c7:fc:ac:4b:b9:4e:b5:f9:2d:b0:fa:16:93:
         d0:5e:af:c4:40:32:8e:5f:12:bb:5a:bc:e7:08:c2:42:31:ea:
         b0:39:5a:d2:30:a0:50:be:29:6d:f6:d7:8a:95:9c:d2:3e:95:
         6f:47:01:16:9c:c8:f6:6c:1a:25:d5:7c:2a:c2:81:5a:0c:80:
         48:27:ed:fe:bc:88:b0:49:eb:86:9b:6d:af:2c:2f:7c:59:6a:
         ce:c0:f2:ef:16:1d:41:84:fc:40:05:7e:ef:50:a0:63:4e:d5:
         13:c9:69:ce:7e:50:e6:2a:d7:fa:6e:27:c3:38:1c:53:d1:e6:
         ba:74:7c:f9:56:e1:09:27:c9:3c:5a:9f:5e:7f:a1:65:02:9e:
         c7:d0:26:67:16:14:a3:9f:da:a3:63:e1:ad:46:8a:10:7a:90:
         d6:e9:75:b5:73:0f:74:36:b2:19:48:ac:af:0e:fc:f6:fc:11:
         8d:f2:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:15:13 2026 by rpki-client