Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
File:                     34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (raw, json)
Hash identifier:          E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=
Subject key identifier:   49:5E:89:3A:50:9F:62:98:3E:B8:A4:C1:89:5D:78:86:52:44:3A:09
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       0101784D25CE70F7B8C607305C82E0B470CB3BAF
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
Signing time:             Thu 05 Feb 2026 16:03:14 +0000
ROA not before:           Thu 05 Feb 2026 15:58:14 +0000
ROA not after:            Thu 04 Feb 2027 16:03:14 +0000
asID:                     268913
IP address blocks:        45.175.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:01:78:4d:25:ce:70:f7:b8:c6:07:30:5c:82:e0:b4:70:cb:3b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Feb  5 15:58:14 2026 GMT
            Not After : Feb  4 16:03:14 2027 GMT
        Subject: CN=495E893A509F62983EB8A4C1895D788652443A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:b9:a6:e6:63:6f:4a:78:76:25:3f:57:70:
                    0c:41:ff:54:72:13:1e:3f:ca:ed:71:fe:cb:86:bf:
                    82:26:59:95:fc:b6:85:fd:20:8a:a0:de:eb:29:20:
                    9e:10:83:cc:7f:d4:a6:c8:fe:5a:48:fd:66:1d:99:
                    36:bd:bd:68:02:d6:98:d7:20:50:b0:e9:04:ce:c8:
                    38:41:d8:f6:b7:6a:a5:23:38:04:7e:45:4a:76:91:
                    7a:bc:eb:4a:79:c0:cb:8d:1e:97:89:c7:22:f2:c2:
                    15:6e:5f:9e:aa:49:b8:43:06:62:5f:61:82:17:71:
                    4f:59:3b:88:b3:1d:12:10:23:f0:e5:e2:3a:6e:3e:
                    a5:da:bb:26:f6:70:2d:4d:2a:71:ec:6d:75:a9:ca:
                    dc:5a:f2:05:71:ae:07:1a:8d:c3:77:ce:58:9e:42:
                    e3:5d:c7:fe:cd:62:63:7d:cc:19:12:83:07:32:71:
                    96:c3:50:92:5e:5b:08:22:9c:5b:1c:b8:50:a5:6a:
                    e2:1c:b8:f5:58:c2:ad:0b:b7:1c:d2:39:e9:51:e8:
                    b5:fa:0e:12:5d:2c:1c:2d:ab:72:6e:19:15:a8:5e:
                    fa:1f:e1:e3:0f:b5:0b:07:d5:14:55:ff:6b:21:57:
                    eb:5a:1e:09:3f:f2:94:47:1e:02:16:4f:ce:79:b7:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:89:3A:50:9F:62:98:3E:B8:A4:C1:89:5D:78:86:52:44:3A:09
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:3f:98:3a:6e:22:ff:d7:72:a7:8a:de:f8:a1:24:94:00:
         57:4f:31:92:36:61:9b:d2:cf:47:7d:46:aa:39:2d:b8:86:4e:
         92:f8:53:0e:b7:ae:a1:56:52:ce:4a:ff:8e:85:df:d1:38:e4:
         d2:3f:68:76:b7:c4:64:4d:f5:46:03:2d:a4:75:b0:98:38:d8:
         fe:fb:3c:a3:9f:b0:ba:bd:b4:e7:4d:c6:cc:8c:ab:56:4d:7d:
         2d:48:5c:f5:fa:2a:4c:84:38:74:01:68:46:c9:07:c2:46:72:
         bc:cb:49:72:ac:60:60:f5:ed:0c:23:b8:82:72:29:65:04:14:
         5b:87:ea:3c:84:b5:5b:7c:15:fb:88:f3:a1:f3:ab:b6:5a:41:
         20:4b:af:1d:6b:57:61:e3:16:a8:02:39:10:f8:51:44:ea:d2:
         1f:b6:d9:e0:c5:54:eb:22:89:93:5e:45:1c:af:07:d6:61:cd:
         b6:5e:fa:da:01:e7:fe:49:85:ed:62:5b:6d:6d:02:ce:c6:bc:
         a4:4f:36:1e:6c:63:1d:29:33:a0:fd:54:b7:70:ce:01:c8:96:
         bb:b8:22:10:83:eb:59:88:5a:b9:c6:6b:63:a4:b3:5c:4c:b1:
         0b:12:37:78:14:bf:46:36:a1:96:a2:56:0f:84:ef:0e:0a:dc:
         a8:27:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:57:16 2026 by rpki-client