Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=
Subject key identifier:   9A:DB:9E:D8:31:B6:8D:96:ED:6B:CB:9F:82:95:99:27:C8:FD:F3:86
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       32CB07CD66065FA080A7FFB8F785D7AE8E7AB7C0
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     268312
IP address blocks:        45.238.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:07:cd:66:06:5f:a0:80:a7:ff:b8:f7:85:d7:ae:8e:7a:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=9ADB9ED831B68D96ED6BCB9F82959927C8FDF386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:4b:8d:e6:47:96:08:6c:8b:ee:2b:59:fd:
                    96:20:7d:f7:9c:5b:2e:76:a7:6a:3f:a3:13:30:5e:
                    e7:d8:e0:7c:a0:75:da:5a:ec:e9:50:88:88:20:5d:
                    d5:df:71:3e:05:32:2a:e2:e8:91:04:81:49:07:b6:
                    27:68:bd:a5:d4:b2:bd:dd:06:c8:a4:5d:54:b9:85:
                    1e:be:73:e9:89:cd:d6:b9:5d:22:a6:39:f9:76:d8:
                    7f:20:0a:62:8f:1f:4b:26:ff:da:41:00:1a:c3:cd:
                    ec:cb:d0:ce:04:0b:e4:53:4f:62:7d:97:ab:96:dc:
                    ba:68:71:7e:40:ec:75:a4:44:a9:f0:8a:56:b1:cf:
                    62:0d:93:c6:95:de:dd:86:f3:fe:e6:2c:b1:93:88:
                    bf:1b:ec:9e:0e:da:3b:f5:7b:9e:1e:33:10:ba:53:
                    d7:95:c0:da:08:7f:09:a8:ea:8a:ca:6b:4f:b1:38:
                    8b:25:0d:91:c8:19:c7:88:18:3c:97:91:65:f6:a1:
                    c2:13:9b:b3:e7:e7:9d:e6:ab:74:bf:43:b6:4d:e3:
                    0d:4d:76:26:cc:0a:ea:8c:3f:7b:6c:2c:dd:dd:e3:
                    62:18:5d:d4:e2:7d:92:24:4d:66:2f:1d:32:a3:d1:
                    36:f2:97:05:e4:e9:9c:c6:56:8e:86:ca:e6:a7:3c:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DB:9E:D8:31:B6:8D:96:ED:6B:CB:9F:82:95:99:27:C8:FD:F3:86
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:a5:a1:79:4b:1d:87:c9:8d:bf:99:78:fc:18:14:eb:ef:
         aa:79:c7:65:b5:e1:b6:61:2b:df:41:b0:a8:29:d7:f5:04:1c:
         ac:db:28:f9:84:f8:ae:52:7e:2f:83:ec:78:ca:b6:b9:2a:1d:
         e2:8c:73:3c:b4:39:18:f9:56:c8:b4:b1:8a:52:d8:db:05:3e:
         f9:33:f0:db:08:da:df:54:40:35:70:40:9a:08:af:88:09:fe:
         cf:91:41:9e:1a:86:be:12:56:81:b3:c3:62:df:59:6c:45:e0:
         1e:94:a1:c8:be:b5:a8:dd:97:08:69:4b:ee:61:4e:0e:8a:91:
         0b:03:da:7f:d4:c4:70:47:a9:e4:a3:17:a2:3e:83:0e:2b:97:
         a3:6b:bb:8e:27:97:de:2f:3f:f8:22:4e:04:5f:6b:a8:cf:9e:
         ce:e1:f8:a3:0d:84:3d:f2:82:fb:c4:10:72:ba:57:28:fd:68:
         39:f7:f7:5e:b4:e3:fc:d6:35:5b:2e:e5:f2:5a:df:5f:63:93:
         72:da:fd:9a:9d:2f:f3:62:88:84:b7:2f:6a:98:63:13:77:18:
         b3:fd:57:02:fe:08:8f:84:fa:c4:7a:1a:56:1f:89:cb:d5:27:
         2f:cb:c8:df:e2:ce:4b:07:6e:5a:7c:69:a9:40:23:bb:10:d3:
         06:0c:03:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMssHzWYGX6CAp/+494XXro56t8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKDlBREI5RUQ4MzFCNjhEOTZFRDZCQ0I5RjgyOTU5OTI3QzhGREYzODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwp0uN5keWCGyL7itZ/ZYgffec
Wy52p2o/oxMwXufY4Hygddpa7OlQiIggXdXfcT4FMiri6JEEgUkHtidovaXUsr3d
BsikXVS5hR6+c+mJzda5XSKmOfl22H8gCmKPH0sm/9pBABrDzezL0M4EC+RTT2J9
l6uW3LpocX5A7HWkRKnwilaxz2INk8aV3t2G8/7mLLGTiL8b7J4O2jv1e54eMxC6
U9eVwNoIfwmo6orKa0+xOIslDZHIGceIGDyXkWX2ocITm7Pn553mq3S/Q7ZN4w1N
dibMCuqMP3tsLN3d42IYXdTifZIkTWYvHTKj0TbylwXk6ZzGVo6GyuanPP+nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmtue2DG2jZbta8ufgpWZJ8j984YwHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv
MzQzNTJlMzIzMzM4MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe4uMA0GCSqGSIb3DQEBCwUAA4IBAQBsCaWheUsd
h8mNv5l4/BgU6++qecdlteG2YSvfQbCoKdf1BBys2yj5hPiuUn4vg+x4yra5Kh3i
jHM8tDkY+VbItLGKUtjbBT75M/DbCNrfVEA1cECaCK+ICf7PkUGeGoa+ElaBs8Ni
31lsReAelKHIvrWo3ZcIaUvuYU4OipELA9p/1MRwR6nkoxeiPoMOK5eja7uOJ5fe
Lz/4Ik4EX2uoz57O4fijDYQ98oL7xBByulco/Wg59/detOP81jVbLuXyWt9fY5Ny
2v2anS/zYoiEty9qmGMTdxiz/VcC/giPhPrEehpWH4nL1Scvy8jf4s5LB25afGmp
QCO7ENMGDAOS
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:34 2026 by rpki-client