Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35352e302f32342d3234203d3e20323636313239.roa
File:                     34352e3136352e35352e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          0QwWEpP33UKkJDB6SNAcCllfy1KLU0pFjL03e1tOTmU=
Subject key identifier:   DD:CA:8D:2F:5F:B4:54:4A:5E:DD:8E:40:9D:55:07:01:E9:EC:94:00
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       6D24990DC8858CE7C3A12F0C377B6D651F65F0A5
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35352e302f32342d3234203d3e20323636313239.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     266129
IP address blocks:        45.165.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:99:0d:c8:85:8c:e7:c3:a1:2f:0c:37:7b:6d:65:1f:65:f0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject: CN=DDCA8D2F5FB4544A5EDD8E409D550701E9EC9400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:8e:5a:7e:92:01:08:99:07:dd:0c:ad:cf:
                    53:0e:96:2b:91:86:36:e6:86:ad:26:56:4f:b8:ab:
                    c0:39:79:6c:35:79:d9:78:71:83:e5:80:b8:52:a6:
                    0e:a7:c0:38:1a:90:b0:6f:82:e8:02:61:fa:19:d6:
                    2c:23:6c:56:dc:9a:3a:15:12:ac:25:88:9f:44:3c:
                    20:53:77:9e:81:3e:d9:ea:2b:60:a2:ad:39:b4:a0:
                    25:c5:55:f4:c4:18:56:8c:8e:5e:82:c5:df:b0:f2:
                    19:fa:47:39:36:ee:27:a4:f7:66:e7:c7:dd:49:9e:
                    4e:66:5c:17:26:26:fe:5d:82:da:64:ab:f7:4e:26:
                    1d:d7:89:7a:61:6a:7b:df:e5:8a:32:ea:fc:0b:9c:
                    e6:4a:49:79:97:da:fd:f9:af:d5:4f:d5:7e:b4:f8:
                    f4:d3:57:b5:b0:d4:c8:e5:4a:fb:ca:58:42:40:7b:
                    cc:e6:2f:ed:98:be:6c:32:d7:58:59:04:c1:02:e7:
                    88:73:83:07:04:cb:c7:87:d0:a6:59:e9:7d:5f:1c:
                    ee:03:41:89:24:db:6f:44:bc:10:55:8e:8a:4b:14:
                    3b:a9:da:2e:48:fc:d8:e1:ef:8e:17:db:51:5e:9e:
                    04:51:3f:e9:6c:8f:35:62:45:65:b6:29:0c:a9:a1:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CA:8D:2F:5F:B4:54:4A:5E:DD:8E:40:9D:55:07:01:E9:EC:94:00
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35352e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:19:e4:9b:39:7f:81:16:04:8c:87:7a:a7:6e:cd:0b:ea:b6:
         89:71:e9:71:16:72:c1:cf:dc:c2:a3:b3:ab:1d:88:c9:42:aa:
         dd:40:9b:9d:b3:7c:46:ce:e1:14:7b:13:32:6a:96:e7:29:e6:
         c0:5b:7a:f0:a7:9f:e8:87:e8:a5:3c:48:93:0f:6a:17:d6:81:
         9a:c0:d4:ac:f9:72:90:d9:9e:7f:3f:c2:7e:ad:84:47:8f:31:
         4e:94:a9:08:ec:cb:f5:08:58:88:ea:d3:aa:93:0b:e8:44:9f:
         90:1a:b3:af:9b:b3:f5:2f:9e:e4:74:08:c3:2d:6b:d0:54:29:
         25:41:67:1c:e6:e6:26:17:96:d6:f8:32:7a:f5:49:a6:0e:b9:
         98:79:56:07:8d:0b:d9:ae:9b:aa:08:35:3c:f3:a8:9c:2b:79:
         be:75:f7:9b:3b:6c:3e:ac:f8:07:7f:28:d9:75:31:ff:81:d9:
         6c:1e:a9:bd:b1:26:01:75:66:7f:ac:87:01:c5:a3:f3:8c:52:
         97:dd:ce:ad:2b:61:4d:01:20:29:20:1e:51:44:5e:fc:05:b6:
         9c:e3:f3:ec:50:68:c7:8b:e1:6b:28:62:fa:3e:fb:f6:19:94:
         9d:07:5c:26:ff:d2:59:3c:c4:f8:2f:e0:0f:88:ef:15:0c:9b:
         74:52:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:19 2026 by rpki-client