Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36322e302f32332d3233203d3e20323639343537.roa
File:                     34352e3138372e36322e302f32332d3233203d3e20323639343537.roa (raw, json)
Hash identifier:          CGBdit7nL0sSCsSiyqFAaqeqQIfD9pAU6stafV1NjjI=
Subject key identifier:   B4:FE:CB:6A:C8:C5:34:50:7A:31:E8:F8:43:C6:D3:DE:EA:1E:E7:E5
Certificate issuer:       /CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
Certificate serial:       4A8E5ADB260DEEE3D1DD675D410EAA81E280AB23
Authority key identifier: 6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36322e302f32332d3233203d3e20323639343537.roa
Signing time:             Fri 02 Jan 2026 15:13:02 +0000
ROA not before:           Fri 02 Jan 2026 15:08:02 +0000
ROA not after:            Fri 01 Jan 2027 15:13:02 +0000
asID:                     269457
IP address blocks:        45.187.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl
                          rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8e:5a:db:26:0d:ee:e3:d1:dd:67:5d:41:0e:aa:81:e2:80:ab:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
        Validity
            Not Before: Jan  2 15:08:02 2026 GMT
            Not After : Jan  1 15:13:02 2027 GMT
        Subject: CN=B4FECB6AC8C534507A31E8F843C6D3DEEA1EE7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:9f:15:a1:2b:3f:09:b4:a0:1e:08:72:6f:
                    21:69:91:81:4a:8f:25:ea:c1:06:c3:b2:bb:13:fb:
                    63:0a:1d:00:3e:e3:2e:82:e1:02:03:26:0b:16:ee:
                    3f:80:82:6b:80:02:34:dd:43:a9:9d:fe:f0:30:55:
                    ad:d3:29:a5:30:93:f3:b6:36:62:51:d0:b0:81:32:
                    8a:3b:89:7e:94:04:a4:5c:06:79:07:93:41:7a:ae:
                    da:26:61:45:0a:64:92:b0:14:eb:8f:05:c3:74:d9:
                    97:4e:66:38:d9:d0:8d:fb:0d:8e:35:5b:6f:ac:60:
                    c0:ca:1f:7b:c9:dd:e7:fb:18:90:66:9f:e3:73:61:
                    b3:8a:ad:2e:3a:71:bd:4d:a8:54:71:2b:46:8b:eb:
                    64:d1:88:52:23:21:7e:80:e4:3e:e1:60:d5:ce:05:
                    aa:24:04:48:69:f2:31:94:88:9e:81:35:8f:c7:d6:
                    a2:aa:c9:dc:94:e5:a4:19:c0:96:9d:79:b1:06:ef:
                    6e:f4:c6:a4:75:7a:c4:ec:28:a3:90:9d:cc:cb:20:
                    af:67:49:16:a8:88:e1:43:a0:6d:3a:c1:f2:51:f5:
                    15:01:ef:71:d4:36:3d:9d:5b:a4:70:0a:91:5a:2a:
                    59:2a:3c:7f:e2:02:b1:45:dc:2c:02:2c:b7:2d:d4:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:CB:6A:C8:C5:34:50:7A:31:E8:F8:43:C6:D3:DE:EA:1E:E7:E5
            X509v3 Authority Key Identifier:
                keyid:6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36322e302f32332d3233203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:82:b1:12:8e:f0:d4:05:51:97:b7:05:40:50:2a:e7:ec:e2:
         4e:15:d5:09:a3:35:df:1d:db:a5:07:e4:76:16:3c:1f:5f:6e:
         8d:67:26:d9:60:2d:4c:03:f5:86:2d:16:d2:57:d0:a9:68:ed:
         21:76:38:1c:84:12:aa:ba:87:c2:62:fb:e5:d7:da:2d:40:28:
         4f:43:7b:ea:f4:58:21:e3:2c:3f:fa:9a:b8:a3:15:71:ab:4b:
         45:07:74:ce:65:70:48:f7:47:61:73:12:3c:aa:85:db:f8:93:
         c7:3b:0c:c4:be:ce:80:fb:4e:55:e7:63:2e:1b:71:6c:0b:17:
         15:81:1c:b4:51:38:e0:78:1b:97:0e:44:87:f8:1b:51:78:bf:
         e6:6d:a9:b4:9c:46:e6:76:ad:84:cd:9b:29:69:39:fd:bc:4a:
         50:2f:f6:ff:6f:d4:2b:87:13:c4:f8:c4:08:ed:35:d6:ac:cb:
         89:d0:7e:fb:3e:29:45:4a:20:c8:5f:8f:38:a6:72:5d:50:03:
         82:f0:ac:50:87:cc:0b:e8:42:db:e2:ca:24:dc:1a:35:f0:6b:
         c2:5a:22:39:48:66:72:52:a5:c4:81:4e:74:b2:d2:bc:bc:c1:
         53:8a:28:97:6e:c2:40:02:94:be:ed:bf:40:68:10:bc:f4:3a:
         27:b9:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:52 2026 by rpki-client