Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
File:                     34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (raw, json)
Hash identifier:          boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=
Subject key identifier:   67:CD:6D:60:8D:99:34:1E:25:7D:EF:62:2B:7A:88:07:DE:26:C6:00
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       43C6905D085436486AAEE6628B2550F49CF682B3
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
Signing time:             Thu 05 Feb 2026 09:41:58 +0000
ROA not before:           Thu 05 Feb 2026 09:36:58 +0000
ROA not after:            Thu 04 Feb 2027 09:41:58 +0000
asID:                     269145
IP address blocks:        45.180.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c6:90:5d:08:54:36:48:6a:ae:e6:62:8b:25:50:f4:9c:f6:82:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Feb  5 09:36:58 2026 GMT
            Not After : Feb  4 09:41:58 2027 GMT
        Subject: CN=67CD6D608D99341E257DEF622B7A8807DE26C600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:0e:d9:1f:87:2f:f2:23:63:52:50:50:2e:
                    14:91:f7:eb:a8:17:6b:2a:ad:5f:03:6e:7e:af:34:
                    ee:46:2e:a6:42:41:2b:8a:ac:83:02:fe:43:f7:fd:
                    cc:2a:e1:d7:cf:d7:aa:39:f3:3b:47:97:ba:e5:2b:
                    b6:f4:fc:29:04:a8:2b:f1:c0:d8:98:f9:92:95:f5:
                    dd:97:a7:a1:27:33:71:4d:e3:82:fb:47:17:ce:c2:
                    ee:a1:77:5b:34:5c:55:f1:75:58:c7:c8:20:80:ce:
                    e3:e4:0c:44:1b:f5:17:65:ad:d1:e1:b9:3a:f6:14:
                    59:65:ba:4f:25:ad:4f:a0:8c:1c:fd:fd:57:a1:d7:
                    5d:c3:80:ae:96:51:90:f1:c7:fd:1e:4b:18:0a:9b:
                    80:e4:b4:6d:2b:40:6b:19:74:0e:46:05:3e:db:78:
                    7a:85:de:98:25:e4:c3:c9:68:36:59:b3:56:85:3c:
                    a0:f5:60:c0:d0:a8:5b:03:d5:42:b8:ec:ca:14:95:
                    b2:7f:1d:59:d9:87:b9:fe:76:d5:b0:f9:9d:94:e4:
                    40:cc:da:43:13:c4:76:9c:1e:f4:55:8c:1b:22:0d:
                    a0:9e:c8:34:2f:58:a1:4e:94:c8:06:53:3f:20:68:
                    13:cd:96:c5:d9:14:09:2d:d5:99:02:f9:fe:49:6e:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:6D:60:8D:99:34:1E:25:7D:EF:62:2B:7A:88:07:DE:26:C6:00
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:5f:dc:7c:ed:b6:93:25:40:5b:82:2d:f7:e0:7a:bd:75:
         6f:ab:e6:fb:cd:01:58:53:9e:33:e8:e7:79:68:34:91:1b:d4:
         5d:ee:90:c8:05:44:12:0b:f8:1b:79:a8:4d:6b:65:55:8a:85:
         52:e4:48:49:d6:a7:bd:fb:66:da:d1:6e:76:e5:0b:87:9f:83:
         89:80:a7:be:20:f9:f8:03:b6:68:af:1a:9f:fd:a5:bf:bd:06:
         d0:da:41:f4:b3:8c:13:6b:01:c9:6f:9f:48:16:f2:06:b6:99:
         ae:42:38:23:93:61:38:30:17:97:9f:39:bb:5d:fc:3f:c1:2b:
         5a:9e:84:19:46:76:4f:9f:7a:09:99:a1:65:4c:a3:42:0f:46:
         31:8a:8f:f2:02:c3:4f:57:8f:7e:dd:ae:c1:01:e5:93:4d:ed:
         5a:22:68:ba:9e:9f:64:e4:45:53:59:df:23:d1:fc:7a:90:68:
         fd:86:2b:ff:48:2d:0d:7f:9d:58:eb:fc:26:0f:65:9c:37:18:
         3e:4d:23:d4:be:93:9a:64:d5:ee:d3:4e:ab:af:da:57:e7:90:
         61:6f:fc:24:96:39:f2:f2:db:da:f6:96:aa:0c:a6:c0:e3:2a:
         d8:98:62:c2:68:48:0d:b0:45:42:0e:30:f9:78:d4:64:90:d0:
         90:60:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:12:55 2026 by rpki-client