Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa
File:                     34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          MDmLyFzpWLVTdVDY4RBkfgVA7eF+nTPvQT73t0UA4eo=
Subject key identifier:   C1:49:7E:6F:AF:68:02:A2:3C:37:4A:BC:30:32:7C:C3:21:E3:2C:BC
Certificate issuer:       /CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
Certificate serial:       5638019FF631924208A1E78DC46CA7C0DA426D81
Authority key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa
Signing time:             Fri 06 Feb 2026 11:55:56 +0000
ROA not before:           Fri 06 Feb 2026 11:50:56 +0000
ROA not after:            Fri 05 Feb 2027 11:55:56 +0000
asID:                     269704
IP address blocks:        45.191.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:38:01:9f:f6:31:92:42:08:a1:e7:8d:c4:6c:a7:c0:da:42:6d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
        Validity
            Not Before: Feb  6 11:50:56 2026 GMT
            Not After : Feb  5 11:55:56 2027 GMT
        Subject: CN=C1497E6FAF6802A23C374ABC30327CC321E32CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:31:ed:1a:fa:e8:44:e2:4d:ec:1b:72:05:
                    c4:92:2c:6d:28:8f:99:a1:5e:f2:7d:61:70:87:40:
                    e6:bd:b6:45:28:4a:df:de:c2:e1:90:18:7a:03:6c:
                    4e:dc:7f:45:ae:c7:49:14:f3:02:97:e4:97:04:21:
                    bd:b6:25:ab:21:45:5a:8e:fc:c7:6d:78:9d:e0:2f:
                    7a:9c:22:49:15:79:be:86:5c:fe:fe:ed:01:b3:a4:
                    3c:76:21:48:5b:8a:72:fc:d4:7b:b1:98:0d:61:26:
                    51:31:fb:af:8e:21:3f:25:b8:55:7b:b4:de:38:cd:
                    58:6b:5e:08:cf:78:2d:2f:60:f9:8c:4e:2f:7c:ff:
                    e6:3e:75:20:64:1c:69:73:d5:c0:e4:87:f0:ec:dd:
                    c0:ec:eb:d4:90:87:75:ba:5d:c5:98:d7:41:61:02:
                    41:07:35:52:00:6f:95:bc:bc:1d:b2:15:6c:a2:03:
                    2c:e6:1b:f4:7f:60:ed:19:7b:f7:2a:73:a8:b3:fa:
                    4d:bf:ff:8d:b0:96:3c:f7:7c:1b:c4:33:f6:3d:37:
                    f7:38:16:b2:f8:f0:f7:3d:de:b7:b7:d5:64:16:5d:
                    e1:7a:3d:10:86:7b:43:03:97:58:dc:67:80:9c:23:
                    02:3c:4d:10:28:dc:38:3c:36:f7:5e:1b:82:51:de:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:7E:6F:AF:68:02:A2:3C:37:4A:BC:30:32:7C:C3:21:E3:2C:BC
            X509v3 Authority Key Identifier:
                keyid:C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:36:45:3b:bc:e1:ac:c0:00:c8:7e:1a:e3:92:67:01:40:
         b3:a2:db:49:2f:da:29:c6:e8:8b:17:27:61:f4:ce:70:11:a7:
         72:25:6e:cf:38:aa:51:75:3e:d4:27:06:d8:4c:3d:06:72:a4:
         1f:e7:b5:49:65:8e:fd:eb:35:a6:2d:d3:0f:7a:15:b6:ad:57:
         8a:65:2c:13:da:13:01:8b:a0:50:ef:8e:6f:db:33:a4:0a:5f:
         66:11:92:2f:7f:34:19:0e:a5:31:9b:3b:a5:57:96:14:c0:7c:
         1d:3a:14:df:c0:91:bf:6f:b1:40:2e:37:53:05:43:7d:0c:b1:
         5c:74:ef:a3:a7:55:cb:32:45:3c:47:0a:50:5b:a6:28:90:6b:
         9e:85:2a:ec:70:34:90:cb:25:c7:77:ae:e7:74:c8:65:d4:ae:
         34:04:fa:a6:0b:05:03:c1:dc:a7:1f:58:c5:51:ed:2b:51:b1:
         2f:67:e0:e8:40:b4:95:6d:ff:45:cf:c4:6a:e3:9d:11:6a:72:
         b6:1e:d0:7c:5f:1d:62:ff:9d:25:82:2d:d5:be:7f:72:31:68:
         bc:1b:a0:e2:37:fe:e0:db:0a:d3:bf:69:1e:78:e9:ed:45:93:
         63:34:8f:ce:e0:aa:01:79:88:81:85:64:db:13:68:5e:5f:25:
         4d:1f:5e:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVjgBn/YxkkIIoeeNxGynwNpCbYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDODZDNDdGQzM5RTgwOEY4Q0Y1QzAwQzYyRDU3RDgw
ODU4QzczODAeFw0yNjAyMDYxMTUwNTZaFw0yNzAyMDUxMTU1NTZaMDMxMTAvBgNV
BAMTKEMxNDk3RTZGQUY2ODAyQTIzQzM3NEFCQzMwMzI3Q0MzMjFFMzJDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3zHtGvroROJN7BtyBcSSLG0o
j5mhXvJ9YXCHQOa9tkUoSt/ewuGQGHoDbE7cf0Wux0kU8wKX5JcEIb22JashRVqO
/MdteJ3gL3qcIkkVeb6GXP7+7QGzpDx2IUhbinL81HuxmA1hJlEx+6+OIT8luFV7
tN44zVhrXgjPeC0vYPmMTi98/+Y+dSBkHGlz1cDkh/Ds3cDs69SQh3W6XcWY10Fh
AkEHNVIAb5W8vB2yFWyiAyzmG/R/YO0Ze/cqc6iz+k2//42wljz3fBvEM/Y9N/c4
FrL48Pc93re31WQWXeF6PRCGe0MDl1jcZ4CcIwI8TRAo3Dg8NvdeG4JR3rT5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwUl+b69oAqI8N0q8MDJ8wyHjLLwwHwYDVR0j
BBgwFoAUwshsR/w56Aj4z1wAxi1X2AhYxzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1pyaWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZ
Y0EvMC9DMkM4NkM0N0ZDMzlFODA4RjhDRjVDMDBDNjJENTdEODA4NThDNzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQzg2QzQ3RkMzOUU4MDhG
OENGNUMwMEM2MkQ1N0Q4MDg1OEM3MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNacmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzAv
MzQzNTJlMzEzOTMxMmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtv2gwDQYJKoZIhvcNAQELBQADggEBAEsWNkU7
vOGswADIfhrjkmcBQLOi20kv2inG6IsXJ2H0znARp3Ilbs84qlF1PtQnBthMPQZy
pB/ntUlljv3rNaYt0w96FbatV4plLBPaEwGLoFDvjm/bM6QKX2YRki9/NBkOpTGb
O6VXlhTAfB06FN/Akb9vsUAuN1MFQ30MsVx076OnVcsyRTxHClBbpiiQa56FKuxw
NJDLJcd3rud0yGXUrjQE+qYLBQPB3KcfWMVR7StRsS9n4OhAtJVt/0XPxGrjnRFq
crYe0HxfHWL/nSWCLdW+f3IxaLwboOI3/uDbCtO/aR546e1Fk2M0j87gqgF5iIGF
ZNsTaF5fJU0fXjs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:20 2026 by rpki-client