Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323633333332.roa
File:                     34352e3137382e3230382e302f32322d3232203d3e20323633333332.roa (raw, json)
Hash identifier:          J7OwyIfPjf1qyPWRR4ws8VixkWRuZ/V6Jh+UVlmd9cc=
Subject key identifier:   4E:3B:55:26:B7:33:6A:DF:75:BD:C7:C3:F8:7F:E6:D0:26:1B:74:A3
Certificate issuer:       /CN=382BF632C249A54C0BE22F06785027D9D07AC720
Certificate serial:       0A721C415144E31ABBA71BED9764B1CDE2AE6CE6
Authority key identifier: 38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323633333332.roa
Signing time:             Thu 19 Feb 2026 13:05:54 +0000
ROA not before:           Thu 19 Feb 2026 13:00:54 +0000
ROA not after:            Thu 18 Feb 2027 13:05:54 +0000
asID:                     263332
IP address blocks:        45.178.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:72:1c:41:51:44:e3:1a:bb:a7:1b:ed:97:64:b1:cd:e2:ae:6c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382BF632C249A54C0BE22F06785027D9D07AC720
        Validity
            Not Before: Feb 19 13:00:54 2026 GMT
            Not After : Feb 18 13:05:54 2027 GMT
        Subject: CN=4E3B5526B7336ADF75BDC7C3F87FE6D0261B74A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:c1:73:47:7d:a3:13:09:a7:4c:b4:c5:d5:
                    b8:b3:64:1a:a9:d3:77:59:eb:7c:51:11:4f:4e:5b:
                    d6:fa:29:27:f8:53:b9:14:8e:62:27:a7:1d:79:00:
                    94:aa:39:14:3c:ed:0e:7f:ce:0b:71:0f:0b:54:77:
                    ed:38:26:eb:3d:f1:be:0e:35:f5:37:ae:46:27:5f:
                    87:f1:7b:22:07:04:eb:de:64:64:ad:5a:95:5a:47:
                    55:69:17:9c:6d:42:a6:f8:61:27:04:74:10:5b:0d:
                    26:69:a1:86:97:10:aa:c8:5d:5c:f6:72:e9:b6:18:
                    73:36:b3:1d:6a:2f:18:7e:f3:b7:2e:8f:13:68:08:
                    52:8e:16:e0:df:8d:b9:9f:2b:8f:74:d4:80:33:39:
                    9b:c1:69:78:bd:2b:bf:67:ee:d6:f6:14:78:b5:c1:
                    5f:2e:cd:ec:39:69:eb:18:44:17:2b:6a:b5:c4:1b:
                    94:b0:bb:f4:f4:f5:50:72:24:ed:27:fd:8e:72:9c:
                    2a:4f:ec:f8:5c:6d:0f:49:02:f7:aa:d1:36:ce:b9:
                    a3:3f:58:d0:9f:5d:3a:d1:52:f4:f5:8c:33:b2:f8:
                    82:ef:94:80:c0:65:d8:26:df:b1:51:1a:c9:78:e5:
                    ff:f5:71:d8:da:70:44:b5:4c:11:65:c5:5e:84:bf:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:55:26:B7:33:6A:DF:75:BD:C7:C3:F8:7F:E6:D0:26:1B:74:A3
            X509v3 Authority Key Identifier:
                keyid:38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:9b:e6:55:dc:4a:42:81:8c:d4:d4:7d:61:67:69:5d:72:
         9d:85:e6:59:a4:1b:22:86:bd:fc:cb:3c:16:aa:6b:97:00:4e:
         61:d7:66:2f:e3:59:58:25:0a:1c:84:cd:f3:a4:1c:f0:97:f9:
         59:f1:90:e0:c8:ea:ed:32:0a:26:fd:c9:0c:10:d2:ed:29:8c:
         1d:d5:3b:57:be:57:b2:ad:74:d1:28:69:ea:e7:0d:e5:b6:f6:
         d2:8b:75:a7:1b:76:4c:11:e6:38:64:e0:89:52:62:ad:67:c6:
         d4:dd:52:5f:cc:18:36:f3:13:e1:ee:8e:88:32:15:59:1d:b0:
         4e:3d:1b:54:41:6d:dc:cf:0b:62:bc:99:a4:68:69:a4:c8:3e:
         d8:f3:eb:11:aa:1f:72:37:45:1e:68:db:44:63:e5:38:c9:9c:
         ee:01:3b:b5:30:07:3c:aa:6e:9f:ce:46:ed:06:4f:d3:01:ad:
         ce:eb:c8:9b:c6:ee:5c:ab:0c:09:75:03:2c:5d:0a:b3:8d:24:
         e9:d3:fb:69:15:c4:ca:47:ed:44:08:0b:62:62:1b:f2:2f:5b:
         90:2e:f1:4c:9f:bf:44:c0:ed:7f:ce:87:72:6e:80:7a:f0:49:
         7f:4b:67:8a:c7:c5:32:c7:47:92:f5:35:06:6c:23:e1:f4:46:
         b7:00:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:47 2026 by rpki-client