Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa
File:                     34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (raw, json)
Hash identifier:          7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=
Subject key identifier:   D2:AF:F7:EC:10:B8:1D:F5:5F:BD:B2:17:63:27:3E:23:AD:3B:BB:A1
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       23C9A1257C3C7764674DAC92CFB091E31D5A0A75
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa
Signing time:             Thu 05 Feb 2026 16:03:13 +0000
ROA not before:           Thu 05 Feb 2026 15:58:13 +0000
ROA not after:            Thu 04 Feb 2027 16:03:13 +0000
asID:                     268913
IP address blocks:        45.175.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:a1:25:7c:3c:77:64:67:4d:ac:92:cf:b0:91:e3:1d:5a:0a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Feb  5 15:58:13 2026 GMT
            Not After : Feb  4 16:03:13 2027 GMT
        Subject: CN=D2AFF7EC10B81DF55FBDB21763273E23AD3BBBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:12:34:da:13:50:2d:1e:d8:c5:9c:ab:aa:
                    29:57:a7:31:3b:66:a6:68:99:56:7f:0f:b6:15:42:
                    4a:15:1f:77:6d:9b:60:28:e9:e8:c0:d6:21:ed:b1:
                    a9:d0:10:8a:fb:23:22:ca:ad:d9:2c:26:db:17:f1:
                    b4:46:0f:0f:3e:2a:fa:61:55:1c:25:cb:26:13:93:
                    c9:cc:22:6c:c6:65:89:47:ac:e4:72:e7:61:9d:6c:
                    72:c7:88:e6:33:5c:0f:00:12:aa:ff:cb:e4:c5:68:
                    82:6f:ea:59:3a:5d:dd:7b:37:a4:56:1b:ab:65:0a:
                    47:42:e6:1c:d8:e0:ee:bd:d8:3a:d7:75:b2:50:05:
                    99:6f:e4:70:66:cf:85:8c:68:85:0f:58:e8:07:15:
                    a3:b2:86:6e:b3:63:45:63:dd:34:84:e3:8e:94:68:
                    af:67:b0:bb:03:dd:2b:1a:cf:d1:d1:00:cb:2a:3e:
                    9c:db:c7:ae:b9:36:43:26:be:03:06:99:ab:08:23:
                    a5:a7:3e:a7:00:fe:b4:34:5d:97:f8:76:b0:b0:40:
                    9a:7c:15:8d:a8:51:98:31:b2:69:c7:65:53:53:97:
                    cf:a8:87:2f:b1:1e:7d:0a:fd:28:a9:f1:33:76:8a:
                    93:83:fd:2b:4f:7d:d4:9b:73:0c:19:5d:73:54:99:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:F7:EC:10:B8:1D:F5:5F:BD:B2:17:63:27:3E:23:AD:3B:BB:A1
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:d1:11:c4:4d:09:73:45:9a:e6:c8:89:44:d7:6d:88:a5:
         c5:a1:cf:39:82:1e:10:ca:fa:b2:b3:27:70:08:5f:0e:fb:89:
         4c:ac:92:57:89:44:6c:30:b1:d4:7d:26:74:0f:96:70:35:e0:
         a9:d6:85:38:1f:5f:8a:95:87:37:03:dc:4c:54:10:c4:32:b8:
         d4:70:13:5d:43:d5:7f:cd:3b:90:33:1d:ca:65:ed:31:2b:d3:
         18:21:ca:5c:94:38:7b:2d:01:47:bd:d7:99:df:70:43:e9:16:
         54:ed:17:87:b3:e4:43:9c:4d:a7:0d:0f:46:e9:60:8d:98:fa:
         65:9a:9f:b1:fc:f5:06:02:8f:5a:31:27:5a:74:78:9b:b4:14:
         c2:e6:ae:22:69:50:2a:40:ef:e0:91:31:e5:cc:c8:2e:da:f3:
         7b:8c:13:1a:2e:64:30:2b:e7:f5:06:44:83:79:0d:a0:2a:c8:
         9f:65:c1:ed:b7:8d:80:09:61:7c:bb:0f:23:b8:11:b3:d9:02:
         b6:6e:99:bc:ee:96:ec:e9:dd:9f:32:e5:f4:2e:4e:03:d6:e9:
         30:94:50:1c:ba:df:26:bb:5a:8a:e8:63:d3:8a:18:24:16:ed:
         e6:11:fc:8e:4e:b5:37:03:23:6b:a0:5f:b2:58:85:ef:af:ff:
         b0:80:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:44 2026 by rpki-client