Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa
File:                     34352e3139302e382e302f32322d3332203d3e20323639363137.roa (raw, json)
Hash identifier:          QdNwApnn/JHhP7JW1BvXzNWanqCkBdD4+I63roUamSU=
Subject key identifier:   75:04:F2:85:8B:0B:8F:00:02:23:F5:C6:6C:47:C2:D5:50:52:DD:18
Certificate issuer:       /CN=E992EEA094B451F3FCAD1AE2FA182209C8463D8B
Certificate serial:       5EFBB5999833D1D9986B19A04DA77984CD6B92D9
Authority key identifier: E9:92:EE:A0:94:B4:51:F3:FC:AD:1A:E2:FA:18:22:09:C8:46:3D:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa
Signing time:             Thu 19 Feb 2026 03:39:38 +0000
ROA not before:           Thu 19 Feb 2026 03:34:38 +0000
ROA not after:            Thu 18 Feb 2027 03:39:38 +0000
asID:                     269617
IP address blocks:        45.190.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.crl
                          rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fb:b5:99:98:33:d1:d9:98:6b:19:a0:4d:a7:79:84:cd:6b:92:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E992EEA094B451F3FCAD1AE2FA182209C8463D8B
        Validity
            Not Before: Feb 19 03:34:38 2026 GMT
            Not After : Feb 18 03:39:38 2027 GMT
        Subject: CN=7504F2858B0B8F000223F5C66C47C2D55052DD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:24:69:93:37:f8:13:74:56:5c:7e:a9:ab:
                    68:7b:0d:54:9e:0b:95:53:ca:3d:14:ce:f4:51:c7:
                    8d:c4:b4:0f:57:55:b0:11:33:f6:2d:1e:48:76:86:
                    30:f4:ee:ca:dd:e8:79:09:bf:12:c4:e3:53:ee:d9:
                    bd:e4:d4:22:90:94:3a:9d:7f:55:f3:e4:68:f5:09:
                    68:60:6a:67:dd:6a:d6:58:4e:03:57:a6:e9:f7:dd:
                    b7:6c:76:ac:05:89:14:db:7d:c5:c5:b9:f0:9a:40:
                    0b:ca:0b:e6:a9:b7:ea:af:c8:59:8e:85:c0:41:24:
                    f3:f2:5e:18:cf:09:19:80:6e:e4:1d:22:eb:3d:6c:
                    3d:4f:54:ef:2c:16:65:3f:27:55:5d:70:f8:e9:f9:
                    6f:0d:c5:54:93:36:53:51:c4:41:e7:76:3e:ef:5b:
                    96:b9:f5:b1:67:a1:60:d7:a1:5f:10:98:c8:b9:fb:
                    1a:b4:77:dd:dc:02:d7:58:2c:19:0c:af:c9:fb:1d:
                    b1:cb:ac:64:00:d8:d0:5b:a5:9e:a1:a3:42:66:f2:
                    52:08:8a:af:94:35:55:23:ea:d7:9f:3a:87:68:38:
                    63:e6:44:6b:cc:3f:23:af:c6:ff:ef:9d:83:f9:ee:
                    3a:c0:43:dd:40:2f:d4:4e:89:81:3d:54:c9:41:d3:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:04:F2:85:8B:0B:8F:00:02:23:F5:C6:6C:47:C2:D5:50:52:DD:18
            X509v3 Authority Key Identifier:
                keyid:E9:92:EE:A0:94:B4:51:F3:FC:AD:1A:E2:FA:18:22:09:C8:46:3D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E992EEA094B451F3FCAD1AE2FA182209C8463D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:22:a7:ff:ff:05:25:92:c5:75:7f:c4:0d:77:90:7c:d5:
         ea:de:d3:30:35:06:6e:9d:8d:56:8e:10:0e:4d:14:87:4f:58:
         2f:c7:d0:11:ad:9b:20:f0:08:3d:05:9b:86:a2:0d:47:d9:90:
         84:00:04:8b:21:5c:84:f3:c4:0a:73:77:7f:1d:c5:72:26:c4:
         63:37:25:95:a9:47:b6:ef:2f:ff:3a:64:fd:c2:10:64:07:37:
         fc:b1:d6:f0:ab:e8:8e:97:dd:d8:bd:da:d3:df:d2:0d:01:7a:
         33:5e:37:0a:9d:54:06:94:8a:c4:3f:0e:f3:ac:57:a0:cc:d8:
         f7:d0:08:46:5d:fd:05:c3:78:d5:2b:cc:3f:bb:23:cf:0e:92:
         7d:1c:09:90:fa:b3:f0:2c:ad:a2:fc:f5:c2:4e:1f:99:e7:d7:
         d8:ca:14:61:c1:17:00:dd:2b:d6:38:ce:1b:c8:64:d6:e7:d9:
         6b:ba:e0:e0:12:7a:e3:97:7f:87:c2:21:4b:c3:e4:da:e5:7a:
         aa:f4:7b:e1:1f:74:87:b6:a0:1e:b5:50:74:0d:1b:4f:3d:92:
         54:20:ff:25:f7:4e:ab:85:f4:31:70:80:1d:c9:32:cb:b0:cd:
         6a:af:ad:3a:34:a5:5f:d4:85:34:85:95:95:1a:aa:51:77:b1:
         c0:31:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:52 2026 by rpki-client