Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=
Subject key identifier:   DE:8C:0C:F9:F5:1A:BA:E7:AD:28:FF:CB:33:D6:E0:60:E1:90:63:C4
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       2153F83BB16E1F8F96F54C8ECA9DE394CFC3511A
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     268312
IP address blocks:        45.238.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:f8:3b:b1:6e:1f:8f:96:f5:4c:8e:ca:9d:e3:94:cf:c3:51:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=DE8C0CF9F51ABAE7AD28FFCB33D6E060E19063C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:47:39:21:40:65:ba:85:9f:74:3c:f8:dd:
                    40:b9:58:7d:2f:95:07:0d:c1:82:58:9e:c6:af:05:
                    c4:77:6f:36:db:71:41:e7:33:35:54:c4:b1:31:4e:
                    62:e9:95:d7:18:d1:c6:5e:65:0a:6c:31:fe:ce:f8:
                    1d:2b:af:9e:12:45:8e:b4:5b:4a:1d:96:43:70:23:
                    75:d8:08:b8:1a:7f:ce:f3:78:3e:60:a8:cb:dc:76:
                    a7:3c:62:08:2b:c3:7e:f1:44:97:89:a6:11:e6:38:
                    4c:50:9e:50:e4:86:cb:af:65:82:37:93:8d:95:96:
                    a5:3a:c9:68:35:bd:2d:9e:e9:3b:12:be:f6:18:c8:
                    9a:95:67:90:34:86:45:31:28:b0:f6:58:24:6c:b6:
                    08:e1:a0:9e:d8:31:30:c8:b3:95:92:6c:9a:f0:c6:
                    49:f9:b5:5e:65:06:60:c9:11:3d:c6:db:91:5e:8b:
                    31:29:8b:fa:1a:f0:ec:0a:94:38:f0:59:6b:f8:00:
                    95:fc:f4:2b:05:6e:29:93:71:06:a8:a3:56:cb:f4:
                    40:77:6a:65:38:f4:3d:6f:9b:06:40:dd:25:7f:ae:
                    ff:84:27:43:fe:39:91:31:fb:a6:6b:1a:10:b7:13:
                    b9:d8:79:26:c9:37:3b:62:01:f6:9e:8e:03:35:88:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:0C:F9:F5:1A:BA:E7:AD:28:FF:CB:33:D6:E0:60:E1:90:63:C4
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:e1:af:b3:84:15:e2:fc:d6:91:6e:92:70:aa:2d:15:22:
         3b:a4:0f:1d:a5:6d:43:4a:54:9f:44:45:54:36:54:82:17:79:
         c0:cb:d7:61:d2:1d:b0:9b:2f:f9:f2:33:9e:dc:bf:4d:05:a8:
         77:ef:a4:07:89:a8:53:e2:d5:79:83:a4:da:09:93:50:c1:a0:
         58:74:c6:11:28:94:bc:9e:fc:56:d5:73:05:3f:33:a8:83:c7:
         04:4c:12:12:01:e2:f6:99:20:cc:b8:01:8c:26:14:c1:25:fc:
         85:f7:fa:07:bb:da:ae:e6:07:1e:fe:87:5c:e1:40:04:20:c8:
         24:dc:5d:28:9f:ae:f4:66:63:99:51:41:e8:73:3a:e7:32:ab:
         92:6f:f4:fe:30:c7:68:13:a3:8b:e1:b2:e9:b4:b8:b8:b3:80:
         9d:a4:8b:7f:0a:aa:89:e7:04:68:a8:2f:e4:32:78:00:73:1f:
         77:cf:b5:1a:a7:00:2d:d4:cc:88:2b:e9:77:b6:84:5f:49:9f:
         7f:c8:8a:4f:29:6f:bd:f4:1d:17:47:29:15:bb:dc:6d:38:55:
         ea:b4:02:cf:57:4d:0a:97:c4:26:3a:57:23:f2:7e:16:4c:fa:
         04:e2:68:2f:51:b7:89:b7:ea:77:9a:3d:16:2c:a0:4c:98:9c:
         4d:bc:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:44 2026 by rpki-client