Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32332d3233203d3e20323633333332.roa
File:                     34352e3137382e3231302e302f32332d3233203d3e20323633333332.roa (raw, json)
Hash identifier:          EV3nqC2eDmzKX2qs+cstzPZ4wVeJPcK5EYdyS/9+eoo=
Subject key identifier:   A8:FA:56:03:94:8A:39:79:BF:6D:32:CD:41:BA:45:F9:E5:FF:48:5E
Certificate issuer:       /CN=382BF632C249A54C0BE22F06785027D9D07AC720
Certificate serial:       3A74A74B687D455C462A6A5DDBD4F4440F642CF9
Authority key identifier: 38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32332d3233203d3e20323633333332.roa
Signing time:             Thu 19 Feb 2026 13:06:02 +0000
ROA not before:           Thu 19 Feb 2026 13:01:02 +0000
ROA not after:            Thu 18 Feb 2027 13:06:02 +0000
asID:                     263332
IP address blocks:        45.178.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:a7:4b:68:7d:45:5c:46:2a:6a:5d:db:d4:f4:44:0f:64:2c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382BF632C249A54C0BE22F06785027D9D07AC720
        Validity
            Not Before: Feb 19 13:01:02 2026 GMT
            Not After : Feb 18 13:06:02 2027 GMT
        Subject: CN=A8FA5603948A3979BF6D32CD41BA45F9E5FF485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:af:ad:69:79:72:fd:30:7c:37:79:93:57:
                    5a:d4:f3:0d:1c:99:72:0b:d2:be:f0:82:ad:0b:5c:
                    0d:a5:36:02:e9:65:07:27:57:07:3d:ec:38:9a:3b:
                    12:a7:28:73:0a:16:35:10:c9:38:32:d8:21:73:e6:
                    b0:5f:fa:b6:58:58:80:cf:70:c6:c6:79:ff:92:87:
                    2a:72:f8:74:f1:e5:65:10:e0:f5:7a:65:09:23:ab:
                    ac:29:b0:d7:5b:54:f1:b0:1c:dc:52:b5:cb:9c:b4:
                    68:0c:9b:9a:a7:2a:ca:2f:b0:a0:ad:b8:74:73:e7:
                    e0:84:94:f4:f5:5c:3a:c0:e6:b3:80:6c:37:25:8a:
                    46:8f:34:ed:8f:6f:07:6e:aa:fa:29:57:d4:b3:86:
                    2e:8e:3f:2e:4e:e4:88:d0:3f:ae:64:6a:2f:87:c9:
                    1b:11:09:37:53:be:75:bf:63:6a:7b:3e:98:d9:52:
                    57:00:79:df:df:b0:2e:8b:bd:18:c4:7e:c9:69:e1:
                    26:20:02:9c:44:1a:a4:54:35:4d:c0:25:2d:12:a3:
                    35:5b:69:c4:f2:71:31:04:f0:31:8a:10:2c:70:e0:
                    9a:21:0d:15:31:de:5e:d5:f7:0d:49:7d:4a:9a:1f:
                    68:df:b6:e5:06:e1:42:7f:64:5d:54:d1:d2:cf:31:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FA:56:03:94:8A:39:79:BF:6D:32:CD:41:BA:45:F9:E5:FF:48:5E
            X509v3 Authority Key Identifier:
                keyid:38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32332d3233203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:68:1c:df:a5:ae:90:38:ca:5a:21:0b:f3:be:10:09:50:
         df:d6:f9:81:7c:c2:4d:c7:52:9f:f1:b0:f4:66:72:ca:b4:bd:
         18:c8:39:ca:d5:bb:85:cb:73:85:18:11:78:c7:ce:66:27:ec:
         b7:ce:a9:4e:49:28:86:58:93:a0:5b:ff:4d:f6:f8:ff:a5:e9:
         0d:ad:74:5c:5e:a2:75:b2:88:47:b4:cc:07:8f:d0:18:2a:8c:
         b1:53:c2:7a:f4:52:0e:b3:d4:00:5e:aa:f4:4f:50:ab:f6:60:
         19:6c:79:9b:a7:5d:c6:d1:51:50:bb:d4:e5:ea:b4:ea:8b:db:
         17:10:88:4f:6a:40:61:1d:51:29:08:8d:ac:be:8f:61:4a:b3:
         3e:4c:c4:5f:69:4b:a1:d1:0f:18:7e:3c:d2:51:b6:75:de:58:
         1e:1b:be:6d:33:fc:10:ac:96:e2:3d:f7:35:7e:31:b0:94:07:
         1a:d4:a5:d4:f7:be:50:b2:44:8e:f2:ad:7b:71:0b:d8:6d:b0:
         0d:0e:c8:cd:7a:bc:e9:dd:39:46:d3:a8:80:2a:20:6a:43:91:
         45:ae:1a:64:50:34:61:3e:7a:33:51:86:5a:0d:00:95:31:a1:
         56:06:1f:a2:cb:82:5c:e4:07:c7:d3:e9:7d:f8:82:6c:70:b9:
         8a:b0:95:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOnSnS2h9RVxGKmpd29T0RA9kLPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgyQkY2MzJDMjQ5QTU0QzBCRTIyRjA2Nzg1MDI3RDlE
MDdBQzcyMDAeFw0yNjAyMTkxMzAxMDJaFw0yNzAyMTgxMzA2MDJaMDMxMTAvBgNV
BAMTKEE4RkE1NjAzOTQ4QTM5NzlCRjZEMzJDRDQxQkE0NUY5RTVGRjQ4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC536+taXly/TB8N3mTV1rU8w0c
mXIL0r7wgq0LXA2lNgLpZQcnVwc97DiaOxKnKHMKFjUQyTgy2CFz5rBf+rZYWIDP
cMbGef+Shypy+HTx5WUQ4PV6ZQkjq6wpsNdbVPGwHNxStcuctGgMm5qnKsovsKCt
uHRz5+CElPT1XDrA5rOAbDclikaPNO2PbwduqvopV9Szhi6OPy5O5IjQP65kai+H
yRsRCTdTvnW/Y2p7PpjZUlcAed/fsC6LvRjEfslp4SYgApxEGqRUNU3AJS0SozVb
acTycTEE8DGKECxw4JohDRUx3l7V9w1JfUqaH2jftuUG4UJ/ZF1U0dLPMfPJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqPpWA5SKOXm/bTLNQbpF+eX/SF4wHwYDVR0j
BBgwFoAUOCv2MsJJpUwL4i8GeFAn2dB6xyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm40NFZKU2F5RzJDZmcxdGNxMVdEZWNKYjliVlZ6aXZ3QnBFNUdQa042
ZWovMC8zODJCRjYzMkMyNDlBNTRDMEJFMjJGMDY3ODUwMjdEOUQwN0FDNzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4MkJGNjMyQzI0OUE1NEMw
QkUyMkYwNjc4NTAyN0Q5RDA3QUM3MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuNDRWSlNheUcyQ2ZnMXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAv
MzQzNTJlMzEzNzM4MmUzMjMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtstIwDQYJKoZIhvcNAQELBQADggEBAEvxaBzf
pa6QOMpaIQvzvhAJUN/W+YF8wk3HUp/xsPRmcsq0vRjIOcrVu4XLc4UYEXjHzmYn
7LfOqU5JKIZYk6Bb/032+P+l6Q2tdFxeonWyiEe0zAeP0BgqjLFTwnr0Ug6z1ABe
qvRPUKv2YBlseZunXcbRUVC71OXqtOqL2xcQiE9qQGEdUSkIjay+j2FKsz5MxF9p
S6HRDxh+PNJRtnXeWB4bvm0z/BCsluI99zV+MbCUBxrUpdT3vlCyRI7yrXtxC9ht
sA0OyM16vOndOUbTqIAqIGpDkUWuGmRQNGE+ejNRhloNAJUxoVYGH6LLglzkB8fT
6X34gmxwuYqwlb8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:32 2026 by rpki-client