Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39342e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          qyavqEguo84jLMu00BOXZLO4fwIuj/EK9FkuVbdUj68=
Subject key identifier:   5C:91:6E:27:B7:FD:6E:05:DB:C5:6D:2A:DB:8A:95:86:60:C9:95:04
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       7A7906E271DA4C0BEE35726B157F01124C73B528
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
Signing time:             Wed 04 Feb 2026 20:00:12 +0000
ROA not before:           Wed 04 Feb 2026 19:55:12 +0000
ROA not after:            Wed 03 Feb 2027 20:00:12 +0000
asID:                     266129
IP address blocks:        45.6.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:79:06:e2:71:da:4c:0b:ee:35:72:6b:15:7f:01:12:4c:73:b5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Feb  4 19:55:12 2026 GMT
            Not After : Feb  3 20:00:12 2027 GMT
        Subject: CN=5C916E27B7FD6E05DBC56D2ADB8A958660C99504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:a0:81:d8:e5:31:63:5b:86:e6:b5:11:46:
                    b0:2c:ea:22:4c:9e:2e:37:a5:a0:01:b5:02:c7:ff:
                    d3:aa:4e:a1:5e:05:4b:1e:ee:5e:7a:45:44:22:24:
                    1a:6f:d6:2b:e9:88:82:8f:ae:6d:88:ad:2d:c1:27:
                    79:a9:d1:81:12:cf:86:1b:d3:03:e4:d3:5d:65:58:
                    f5:ba:81:df:f1:a1:04:2f:4c:64:94:38:d0:ef:d6:
                    b2:cf:05:f7:72:95:f5:eb:57:af:e6:bd:c6:72:7e:
                    80:a7:b9:71:db:c7:9e:9f:65:6a:33:06:a6:f1:74:
                    2d:2c:b5:cc:3c:3d:f4:c0:e3:21:05:02:c7:35:a0:
                    d5:cf:02:e1:81:66:79:29:82:d8:88:48:72:27:6d:
                    32:9b:cc:37:d7:32:93:1d:e0:05:3e:11:c5:0c:7b:
                    0c:fb:2b:f6:05:bf:50:80:f7:8d:27:99:d9:7c:19:
                    92:a7:c1:1b:6d:c2:a3:d1:5e:d1:5a:a6:0b:78:d2:
                    c2:03:0c:2d:3e:28:48:8f:1b:4f:80:c6:fe:74:9a:
                    15:c3:0f:b1:f9:52:45:92:b9:c3:8c:ce:59:31:d9:
                    eb:3c:38:32:b5:fc:21:11:33:1f:31:76:d8:48:e7:
                    9d:ed:cb:89:b6:af:35:3f:64:09:49:86:32:0e:81:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:91:6E:27:B7:FD:6E:05:DB:C5:6D:2A:DB:8A:95:86:60:C9:95:04
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:ba:6e:fc:cb:53:ca:ed:0d:a8:6d:cb:50:3f:6c:3f:b5:9d:
         9d:3a:16:86:51:06:c4:64:24:35:d1:40:08:95:a3:b6:21:63:
         23:bd:5d:f7:08:3e:b4:5b:8a:48:48:6f:6e:52:45:ee:9e:3d:
         4c:6c:b8:9c:80:44:15:93:42:0c:9e:c1:8b:31:34:17:43:16:
         59:35:c0:17:fa:f1:f5:7f:d0:eb:73:65:5b:b6:21:e2:1c:e6:
         bf:a9:a9:7f:4a:a7:5f:df:cc:b0:5d:cc:e4:06:97:3d:25:cc:
         8b:1e:ff:7f:c6:f2:6e:41:d4:4d:3a:76:19:31:89:06:cd:59:
         2a:e5:a6:6e:9c:d8:29:f2:20:e8:82:fe:93:51:f5:0d:68:f4:
         0b:03:4b:fa:08:4a:cd:25:2f:de:ae:36:d0:29:a0:90:01:4d:
         12:90:46:cb:aa:27:6b:f9:b2:1c:b9:9b:ad:64:fe:23:cc:ec:
         87:ee:01:88:9a:be:d4:fa:63:68:e0:b7:a5:c0:58:1b:3e:cb:
         30:b0:2a:a3:3d:40:d3:9b:5a:e5:2b:60:8e:5e:14:f9:9c:52:
         89:4e:0f:b8:92:10:21:98:59:5f:90:27:bd:1b:11:84:a6:37:
         86:10:2a:f0:cb:c7:e4:a5:32:72:7b:e4:b3:b1:15:71:f8:3e:
         37:d3:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:30 2026 by rpki-client