Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa
File:                     34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (raw, json)
Hash identifier:          fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=
Subject key identifier:   FD:FF:E3:B6:5F:31:89:1B:B8:50:94:83:B0:82:0C:46:24:ED:76:F0
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       5034668D3B564C9A77140D0E4E0DFA6EC63E0DE5
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa
Signing time:             Thu 05 Feb 2026 16:03:14 +0000
ROA not before:           Thu 05 Feb 2026 15:58:14 +0000
ROA not after:            Thu 04 Feb 2027 16:03:14 +0000
asID:                     268913
IP address blocks:        45.175.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:34:66:8d:3b:56:4c:9a:77:14:0d:0e:4e:0d:fa:6e:c6:3e:0d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Feb  5 15:58:14 2026 GMT
            Not After : Feb  4 16:03:14 2027 GMT
        Subject: CN=FDFFE3B65F31891BB8509483B0820C4624ED76F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:54:81:e4:a1:b1:c2:d8:09:a1:9b:22:5b:
                    ce:45:1b:0f:10:72:20:d4:81:28:07:2d:78:f2:4b:
                    72:9c:9a:b1:a5:a5:40:f2:e0:ab:bc:05:0e:94:a6:
                    b5:b4:ad:49:1f:16:64:56:7e:59:a4:a5:c6:37:99:
                    a5:45:df:b4:e4:7a:79:b4:f8:af:1f:44:24:6c:69:
                    69:d5:ea:ba:d8:7b:6c:92:ec:76:97:db:2c:bd:c3:
                    19:ad:e9:ec:40:07:a0:74:e8:50:70:09:60:77:56:
                    f8:aa:40:95:64:94:80:3f:97:ae:b8:6f:69:22:0e:
                    78:78:a6:c7:13:cd:a6:c3:7a:5c:78:64:7a:eb:0a:
                    eb:e9:b2:cc:72:3f:d5:c4:e7:72:66:b5:59:2f:8d:
                    0a:37:8e:0b:32:6f:28:1b:b7:63:88:ba:79:b2:cf:
                    57:48:14:ef:0a:a5:14:02:fd:8c:09:8e:36:e1:84:
                    fd:94:73:50:10:05:e6:02:49:9f:62:e8:d1:fd:52:
                    f4:d5:02:ed:aa:2b:aa:d0:48:31:a4:32:bd:71:9d:
                    09:c2:38:90:44:bf:1a:df:92:7c:b5:93:21:34:bc:
                    4f:66:e2:e6:85:00:e6:38:0f:1e:f8:3e:9d:ce:d4:
                    d4:d4:dc:aa:8c:b4:bb:3f:f8:69:1e:0a:7b:67:49:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:E3:B6:5F:31:89:1B:B8:50:94:83:B0:82:0C:46:24:ED:76:F0
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:57:ec:b6:cd:58:89:f1:06:65:22:13:0a:53:5e:52:b9:3a:
         26:a0:9d:05:bf:5d:e5:38:bb:db:0d:d8:48:99:03:6f:8a:3e:
         b1:b7:07:5c:8f:6c:28:b8:4f:cb:e2:d0:60:ef:d2:b1:a4:2c:
         93:17:5b:6b:a9:87:c9:1f:48:18:83:19:76:45:b8:89:3f:59:
         6c:6e:f1:4c:dd:5f:d5:35:23:4c:77:dd:b9:e2:9a:0a:8c:6b:
         0e:77:f9:7b:97:02:04:0f:6f:17:51:a8:58:db:ea:4a:fd:93:
         7f:5a:6f:c7:d9:02:b2:ab:73:0a:69:c2:91:97:4b:55:31:43:
         62:3e:21:8e:64:8b:7f:4f:4b:9b:07:49:55:15:69:52:c5:af:
         69:18:63:d1:fd:56:89:3e:21:18:c4:58:c6:cd:1c:83:e0:00:
         fa:df:08:ff:01:cf:c3:ab:c7:20:e6:27:75:08:6d:08:7a:93:
         2b:eb:84:8a:d0:04:1d:58:7b:92:5b:8f:fa:43:c0:b7:7b:2e:
         68:03:30:d8:da:4e:6b:1a:86:c7:41:6b:f7:43:b1:55:17:88:
         85:36:4e:25:09:9f:e9:4c:fd:98:6f:79:2b:91:25:03:43:00:
         6f:aa:2f:39:6a:48:44:f3:d1:69:02:94:01:57:a6:36:33:bb:
         da:33:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:41 2026 by rpki-client