Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e312e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          1lx4w9M/csD7T3vTFqHvBGPeRJJLf/LuvzGJaQU1Ex0=
Subject key identifier:   C0:28:0E:C3:39:CE:00:89:A1:79:94:8B:5D:F3:CE:0F:56:05:1B:CB
Certificate issuer:       /CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
Certificate serial:       186E5D2DA9AD05FBF8FFE9CD11A1BD0FB4820DEE
Authority key identifier: B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa
Signing time:             Wed 04 Mar 2026 17:21:03 +0000
ROA not before:           Wed 04 Mar 2026 17:16:03 +0000
ROA not after:            Wed 03 Mar 2027 17:21:03 +0000
asID:                     267556
IP address blocks:        45.70.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:5d:2d:a9:ad:05:fb:f8:ff:e9:cd:11:a1:bd:0f:b4:82:0d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
        Validity
            Not Before: Mar  4 17:16:03 2026 GMT
            Not After : Mar  3 17:21:03 2027 GMT
        Subject: CN=C0280EC339CE0089A179948B5DF3CE0F56051BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:c3:60:b3:61:fc:c3:d9:0a:4a:24:ab:c6:
                    48:f7:dd:6e:6b:78:0c:34:f8:47:53:8e:69:b4:75:
                    5e:36:93:77:e5:7f:f5:1a:65:0a:b5:1f:a9:7f:c5:
                    cc:50:09:83:32:7d:35:29:6b:4a:df:3f:f7:d5:d3:
                    27:c1:5f:53:93:17:52:06:87:75:bc:0e:ca:4e:6d:
                    98:c9:a1:34:50:ee:01:02:a1:b0:ea:f4:a3:82:5f:
                    26:ca:3e:5f:16:f8:aa:ad:08:12:cc:6f:39:9b:42:
                    88:2d:dd:b1:73:35:f5:2f:b3:e8:c2:c2:27:09:1c:
                    ec:e3:65:e8:8c:98:09:f2:76:7d:6b:2e:fe:6c:7e:
                    58:bd:7a:85:03:21:bf:22:3b:fa:84:b1:96:f3:ce:
                    ec:85:9f:b9:20:3a:de:e0:5f:92:4d:a7:94:26:27:
                    63:d5:20:03:e4:9d:f9:28:de:4f:82:25:28:ba:8b:
                    e3:bf:b2:75:56:e4:cb:a2:15:08:06:9a:79:b7:0d:
                    d0:19:38:63:c4:93:1b:a1:19:36:b3:e5:81:8b:d6:
                    43:db:64:f8:26:0e:60:77:55:27:2e:62:37:3e:c4:
                    0d:8d:72:cd:af:d2:37:a7:a5:7c:65:f6:16:ab:70:
                    d5:fe:47:c2:db:d8:1e:57:1d:97:d7:ca:b8:f7:6f:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:28:0E:C3:39:CE:00:89:A1:79:94:8B:5D:F3:CE:0F:56:05:1B:CB
            X509v3 Authority Key Identifier:
                keyid:B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:a7:61:63:fb:7f:c4:82:cc:0f:d8:99:94:be:eb:43:87:
         44:dc:67:6b:d0:57:eb:e5:56:ef:05:90:bc:ff:77:e2:71:c3:
         71:cb:8f:fc:c5:d7:de:5e:8b:01:49:07:24:27:0b:12:05:53:
         29:49:6d:1e:f3:e7:33:e3:2a:fb:81:53:68:57:f1:1b:64:3e:
         94:e3:26:13:2b:95:f5:fc:74:27:3d:1e:62:dc:ba:12:1b:54:
         b4:a4:31:85:56:30:a8:c7:17:e4:c9:41:4c:bf:80:ac:2b:c6:
         c0:d4:6e:2f:8c:9c:92:5f:54:53:15:eb:c5:9e:e7:0f:a3:38:
         46:52:51:7a:32:6f:c1:eb:ee:34:2b:9d:38:f7:53:12:d9:3c:
         5e:0f:0a:04:ac:7e:c3:7c:1f:ec:08:f3:d7:f1:0a:ad:b4:cb:
         22:f4:83:fb:14:59:fc:9e:b5:6f:41:cc:66:6a:66:ab:0c:6f:
         18:c9:e8:2d:71:2d:21:72:b6:03:ce:e2:66:c8:f3:53:e6:64:
         f4:1b:6d:a5:81:97:49:df:b7:1f:43:8d:3b:46:69:89:96:79:
         7e:e7:b6:a6:3a:22:87:d5:2f:96:90:10:c7:96:c4:15:6a:b8:
         77:30:3f:cf:6e:e4:ce:41:71:49:ba:6b:b8:99:7b:f9:0c:e1:
         2f:42:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:47 2026 by rpki-client