Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36372e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          W4raTFMWu7Xiz0utVwRpO+95j66nFcpZtdEpTXjDq3Q=
Subject key identifier:   14:91:92:B3:95:25:B3:13:1A:1D:B5:32:D9:4F:73:4A:A4:2E:1F:19
Certificate issuer:       /CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
Certificate serial:       288124A29A746DD03B1E58BF15990AD97185B8E3
Authority key identifier: F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa
Signing time:             Wed 04 Feb 2026 21:21:30 +0000
ROA not before:           Wed 04 Feb 2026 21:16:30 +0000
ROA not after:            Wed 03 Feb 2027 21:21:30 +0000
asID:                     269320
IP address blocks:        45.184.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl
                          rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:24:a2:9a:74:6d:d0:3b:1e:58:bf:15:99:0a:d9:71:85:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
        Validity
            Not Before: Feb  4 21:16:30 2026 GMT
            Not After : Feb  3 21:21:30 2027 GMT
        Subject: CN=149192B39525B3131A1DB532D94F734AA42E1F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:a1:92:cd:69:3b:d6:d6:bb:07:1a:05:8f:
                    d0:62:6c:a9:14:8e:6e:1e:ee:aa:8e:55:ad:4f:bd:
                    fd:b7:d5:b0:5f:98:5e:68:06:03:f3:6b:6f:b5:8e:
                    c8:c4:45:9a:cc:54:49:d1:b0:ac:05:e7:50:d1:65:
                    04:41:85:36:c7:8b:61:52:94:f6:5d:a1:1c:36:72:
                    2b:78:0f:d7:5a:20:54:6e:c1:49:3d:cb:bb:74:26:
                    8c:2d:8a:99:75:71:3c:d8:ee:6e:30:8c:e8:9e:fe:
                    5b:27:fb:41:77:ef:4c:42:6e:fb:77:85:8e:b7:22:
                    57:c5:2b:32:f1:f4:b9:e1:71:9f:03:9c:c2:aa:4d:
                    a4:b5:0a:39:7d:f4:db:46:6f:25:72:65:0e:df:36:
                    ad:36:be:08:4b:f9:c8:76:46:f8:71:e5:cc:4c:35:
                    97:c5:8e:1d:7b:54:08:b1:82:38:6b:fc:a2:e7:64:
                    d9:c2:95:cb:fd:8a:34:30:28:8a:6d:ab:8a:44:43:
                    6a:a0:b9:7a:63:c0:3d:c3:d5:3f:90:2b:ea:d0:5b:
                    1b:a0:cc:e0:fd:fa:6d:0b:c2:1c:c4:bc:88:4a:61:
                    5e:21:74:17:bd:02:70:a6:81:90:4d:e1:28:b1:41:
                    38:22:a9:78:d1:d9:7b:b5:06:75:1e:d3:2b:71:51:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:92:B3:95:25:B3:13:1A:1D:B5:32:D9:4F:73:4A:A4:2E:1F:19
            X509v3 Authority Key Identifier:
                keyid:F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:01:2e:5d:9b:11:0d:ac:43:78:eb:51:57:7b:59:32:ae:79:
         85:41:40:fe:e8:35:be:08:1a:f8:4d:27:0c:d6:1d:eb:09:53:
         58:1c:de:59:7e:fe:06:67:73:0a:58:b1:b2:51:76:a6:48:6b:
         40:83:b0:08:88:df:09:27:84:90:7a:79:b3:14:82:f5:66:e2:
         5d:13:ed:84:20:d3:d6:44:91:5d:15:3d:c0:0a:6d:51:7d:c4:
         76:a7:a2:72:24:dc:73:8f:61:cb:ee:85:cb:e1:a4:a3:eb:07:
         0b:ff:ff:5a:8d:c2:e2:2c:5e:6d:a1:7e:a6:29:bf:e9:6d:e4:
         a2:45:1a:68:fb:b2:0e:09:3c:8e:8a:51:b6:5f:24:ac:11:fe:
         b6:09:92:29:23:7a:4a:8f:a2:a7:23:05:84:4b:ff:d4:a6:21:
         f3:4f:f6:3f:c3:97:1e:91:93:1b:6a:60:68:34:6d:95:83:0c:
         c7:3e:69:d6:c8:04:5b:2b:80:f1:ea:e0:08:21:ba:e9:74:fa:
         17:86:f0:b4:28:a4:5a:35:0f:aa:c1:a2:20:9a:64:d3:13:72:
         8f:2e:75:8f:03:e7:0a:f5:1e:81:a7:fd:70:02:44:fb:c8:a8:
         9f:a0:c6:b8:ef:8c:1c:75:cc:b4:b3:93:fd:5e:68:b5:b7:58:
         45:3b:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:41 2026 by rpki-client