Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e332e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          MnYc1jtHMTUelA84ty7s0/YGBD4nnC1zoeUp/VHXtes=
Subject key identifier:   69:06:B0:CD:F2:DD:83:59:03:97:DC:62:5F:ED:1E:F5:AD:46:0F:A4
Certificate issuer:       /CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
Certificate serial:       79C0D29B066CE37A08E2A057FA1A01705C32DA0D
Authority key identifier: B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
Signing time:             Wed 04 Mar 2026 17:20:51 +0000
ROA not before:           Wed 04 Mar 2026 17:15:51 +0000
ROA not after:            Wed 03 Mar 2027 17:20:51 +0000
asID:                     267556
IP address blocks:        45.70.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:d2:9b:06:6c:e3:7a:08:e2:a0:57:fa:1a:01:70:5c:32:da:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
        Validity
            Not Before: Mar  4 17:15:51 2026 GMT
            Not After : Mar  3 17:20:51 2027 GMT
        Subject: CN=6906B0CDF2DD83590397DC625FED1EF5AD460FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:f3:ec:ea:18:e3:ab:6e:5d:a1:fc:6d:02:
                    af:61:49:3b:38:1d:27:d5:44:45:49:d5:04:af:04:
                    c7:20:39:1c:bd:9f:de:67:7c:cc:26:d0:f7:21:48:
                    25:b5:c3:cd:c0:ba:23:df:6e:61:9e:b3:31:38:fb:
                    58:b7:79:60:9a:f1:1d:74:4e:69:d5:7e:45:7c:1f:
                    7e:ee:0b:b5:5b:85:98:08:c7:f0:9f:1c:f4:55:06:
                    17:30:8e:75:92:1f:b4:9c:3a:92:82:8d:e0:af:a1:
                    17:c8:f3:8c:63:f3:32:3e:a3:63:2f:0b:82:8d:7f:
                    a8:1f:ac:ef:1a:4c:bb:ce:98:07:11:c9:d4:3a:89:
                    45:5e:23:ea:d2:02:ad:ae:81:82:1f:69:b8:cf:6b:
                    67:fb:cf:10:69:d7:9a:bc:74:71:1f:6b:e3:c1:00:
                    89:28:e2:44:66:3a:a6:4c:c0:b8:57:97:37:5b:35:
                    40:86:04:fb:41:bc:f3:f5:83:d1:21:66:7a:fa:1b:
                    75:ad:87:5e:94:59:12:88:c4:a2:69:52:e7:7b:bc:
                    a1:49:70:b2:3b:1c:3b:c9:a7:69:f8:21:91:4f:27:
                    38:f5:78:d8:07:6a:fb:57:2d:c0:86:a8:ee:30:e0:
                    f0:b9:5c:90:c5:5d:32:f0:55:43:13:22:fc:3d:7d:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:B0:CD:F2:DD:83:59:03:97:DC:62:5F:ED:1E:F5:AD:46:0F:A4
            X509v3 Authority Key Identifier:
                keyid:B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:90:f6:11:7e:13:60:b7:a6:86:c9:ef:53:aa:5b:06:9f:
         f4:06:2d:46:43:a9:d4:5d:cc:1a:8c:55:6a:29:f7:94:aa:1b:
         6c:1f:a7:f9:ca:55:6d:5f:b6:39:d3:f8:4f:a2:57:45:07:19:
         57:48:a0:46:f8:d8:a4:8a:27:ec:82:c2:7b:9d:da:fb:71:b0:
         85:91:15:a1:bd:12:3f:65:c2:17:c1:8f:52:21:ca:10:8b:d5:
         84:26:98:f8:e7:74:38:a0:be:66:58:33:65:87:75:6a:8d:ab:
         df:0e:01:43:63:7e:49:a5:dd:85:88:4b:9d:75:3f:19:9e:37:
         11:f3:06:8c:58:3b:12:fc:68:9a:b9:d4:a2:1d:17:e4:65:af:
         c6:32:19:82:82:54:50:80:23:2f:c8:c6:e8:a6:ed:32:ff:85:
         34:b4:aa:24:d7:90:99:db:ee:57:f4:99:63:9a:25:91:0f:5c:
         06:5e:d0:f6:58:04:11:b4:88:e0:17:a7:ab:0b:7c:01:44:d3:
         77:b0:69:ec:c3:db:05:a9:42:55:97:22:53:e1:ba:a7:23:35:
         a9:08:07:05:ba:53:af:2c:03:d4:9f:be:a7:7a:56:13:12:ca:
         10:71:e2:6d:f8:e5:d2:82:16:05:a7:15:97:e0:89:75:2b:1e:
         be:30:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:25 2026 by rpki-client