Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (raw, json)
Hash identifier:          IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=
Subject key identifier:   8C:49:41:4F:56:6A:89:83:E7:0B:E3:DE:DF:2E:97:4A:60:60:30:B6
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       1A4B6C84BBF7F926D76BD6D8371668EB886CF19D
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     268312
IP address blocks:        45.238.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4b:6c:84:bb:f7:f9:26:d7:6b:d6:d8:37:16:68:eb:88:6c:f1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=8C49414F566A8983E70BE3DEDF2E974A606030B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:f8:ec:27:22:29:62:93:d5:95:39:8c:f8:
                    e0:c3:b0:79:c7:a0:0c:ba:b9:8e:d4:c6:1f:f2:3e:
                    b7:15:e4:97:c9:08:72:0c:94:a7:ac:b3:00:0c:94:
                    7b:9a:01:4b:a3:cf:7d:3b:ee:4f:2e:6c:e5:ed:dc:
                    15:75:a8:26:25:3c:a8:02:07:12:de:17:42:c0:f1:
                    e5:2b:a8:6a:c9:52:cf:ee:56:09:df:7b:66:a8:a3:
                    7e:96:6a:f3:d9:e6:05:18:55:5a:74:16:b5:16:45:
                    0c:d5:62:bb:ea:82:3b:6c:9d:e8:8f:a0:42:5d:44:
                    ef:40:aa:20:1b:d5:b4:f1:3a:26:27:a0:bf:26:02:
                    ed:5e:c9:83:be:89:fd:84:0e:06:a6:64:8d:14:48:
                    f5:69:b2:69:b0:7e:39:c6:a5:57:26:e6:8f:f3:a5:
                    ea:4f:4c:7c:74:84:79:9c:92:50:c2:3d:be:2e:72:
                    f7:c6:90:18:dc:be:d3:1e:8b:20:1b:47:dc:65:24:
                    bf:69:16:0d:2b:b4:e1:85:99:20:fa:c8:73:70:ba:
                    c2:8a:67:d5:b2:04:bf:0e:ef:89:4f:62:67:91:2f:
                    1c:57:f0:76:ee:96:25:23:af:32:18:f4:34:5a:de:
                    5f:ba:b9:ca:ce:b1:a4:2c:b3:d9:fe:03:37:70:e0:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:41:4F:56:6A:89:83:E7:0B:E3:DE:DF:2E:97:4A:60:60:30:B6
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:4c:f3:bc:24:aa:33:a7:75:3e:4a:10:63:6f:f5:bf:55:
         85:b9:4e:c1:7a:1b:d2:b9:68:0a:bf:d2:dd:af:e0:93:f7:c6:
         59:55:94:bb:bd:90:23:86:01:f5:8b:4d:94:6e:bb:89:d0:3e:
         38:4c:7c:ad:7d:4f:14:92:45:1b:41:d2:93:31:5e:33:e3:48:
         d6:b1:cf:14:27:d2:56:2e:a3:b2:f3:99:6c:44:27:f5:f1:7a:
         c7:32:25:fd:00:d0:2d:40:41:c4:93:6b:41:dc:7f:91:b5:1b:
         77:eb:c7:c0:b1:ab:40:66:83:e9:d2:47:b2:af:1e:0a:13:59:
         51:70:ea:34:f5:f0:fc:71:3f:31:3c:be:ce:d4:ef:d1:2b:61:
         14:09:e5:46:c9:29:fd:e6:fd:0a:62:bf:32:90:fe:0c:44:45:
         7b:f9:8e:30:21:9c:52:69:0d:a6:e5:21:5e:0f:9f:50:af:c8:
         e4:de:e0:25:f2:12:8d:d8:d7:ac:71:9d:7b:61:06:b5:3b:cd:
         56:b3:89:50:7c:c8:bf:35:f2:25:15:5b:72:27:54:fc:01:86:
         26:eb:91:72:23:f2:ef:56:ef:11:6d:62:1d:56:d6:a9:b3:ed:
         1a:7d:d9:ef:f3:7f:d7:4f:a9:8f:e4:6b:95:cf:5f:74:25:f6:
         2f:75:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:32 2026 by rpki-client