Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e352e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          pHRaBhwvF85XsWrMU5LPRa/3ZPfc8AVaB5MS6bLuHyQ=
Subject key identifier:   C1:11:8A:A4:7B:B5:34:FC:2E:01:61:7F:6E:3B:3C:3B:22:C8:2D:01
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       75F22747A4CF15E41000465B4A19EF68A2AB2165
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa
Signing time:             Fri 06 Feb 2026 01:54:27 +0000
ROA not before:           Fri 06 Feb 2026 01:49:27 +0000
ROA not after:            Fri 05 Feb 2027 01:54:27 +0000
asID:                     269355
IP address blocks:        45.185.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f2:27:47:a4:cf:15:e4:10:00:46:5b:4a:19:ef:68:a2:ab:21:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Feb  6 01:49:27 2026 GMT
            Not After : Feb  5 01:54:27 2027 GMT
        Subject: CN=C1118AA47BB534FC2E01617F6E3B3C3B22C82D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:bc:3d:bb:1e:b6:8e:e9:fd:b3:dd:18:76:
                    fa:77:64:a5:ea:90:a9:39:2b:3c:98:20:c0:d2:6c:
                    70:19:ba:82:1a:8f:f6:91:eb:ae:be:16:fa:4c:cb:
                    1b:b5:52:33:58:92:1d:8e:f2:44:e3:de:f2:95:a1:
                    87:1e:75:7a:e8:a4:b3:13:bc:01:84:39:01:64:2a:
                    62:4b:b8:c1:7f:1c:29:1a:12:9e:03:63:c1:92:fa:
                    1c:db:6c:32:81:cc:de:e3:ac:60:11:86:32:55:55:
                    17:2a:3b:3a:4d:26:50:cb:78:94:41:a3:b4:25:a7:
                    5a:aa:ea:c3:37:fa:ad:14:c5:3e:a9:cd:02:ab:d5:
                    f9:dd:82:7e:fe:f9:ab:9e:19:3a:97:5f:00:a9:35:
                    0a:09:2d:31:54:a7:fd:a8:38:e0:70:a9:78:65:97:
                    07:e7:fa:32:8d:26:40:3f:4a:4d:2d:47:4a:0d:49:
                    dc:7f:07:4a:67:b5:e7:0b:0e:c4:1e:d1:54:43:c0:
                    9b:1a:5a:e6:9a:63:00:a9:cb:f9:08:e9:02:e1:3f:
                    c9:0d:2d:02:3e:2c:fb:c0:64:b5:d6:ed:ff:a9:f8:
                    56:5e:c2:00:b5:4e:2f:7a:98:5d:0b:52:70:91:13:
                    01:72:42:e1:9c:81:aa:7c:51:6a:5b:26:03:a2:53:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:8A:A4:7B:B5:34:FC:2E:01:61:7F:6E:3B:3C:3B:22:C8:2D:01
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:04:9b:e4:fc:64:4f:f3:a3:64:04:29:79:6b:99:38:3a:
         41:6e:fe:72:4b:82:43:c6:ab:91:91:af:cc:bc:b7:b5:7d:d2:
         2d:54:6c:66:46:8f:2b:f3:e6:f8:c9:df:5d:af:bf:1d:4d:09:
         bf:f6:5d:8d:30:52:e5:5f:7b:39:7e:a5:4e:b6:ff:82:b8:37:
         cb:36:54:5e:33:11:30:3b:c8:13:a2:de:49:69:7c:5b:a7:e2:
         d6:c1:48:cf:d1:2d:2a:ca:54:14:56:04:58:c0:48:91:54:0b:
         ff:33:b7:6f:9f:8c:98:52:19:5c:31:1d:3f:9f:08:23:23:b9:
         b1:2a:05:c4:b4:4a:86:2b:d7:65:11:af:db:f4:f9:d8:25:8b:
         ee:0d:f4:44:55:bd:2a:32:76:9b:f5:99:ed:c8:80:45:a3:95:
         8d:4e:07:7c:68:69:0b:c7:6d:86:51:89:68:9b:ea:68:81:c6:
         01:c8:63:4d:dd:04:5e:f6:28:9f:0f:78:1f:e5:ca:3f:92:17:
         ee:27:fa:e3:72:64:74:d4:3d:d1:0e:77:cf:af:da:72:da:1b:
         40:01:04:86:c6:3d:49:4f:6a:ba:91:be:39:ec:20:d1:7d:6f:
         99:b1:81:5c:41:53:a9:88:15:8c:56:7d:a2:d1:97:ad:6e:b3:
         ca:1d:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:14 2026 by rpki-client