Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
File:                     34352e362e3136342e302f32322d3332203d3e20323636313430.roa (raw, json)
Hash identifier:          pIf1r0PU3hPVhAM77hExGbyirK3tKC7Mxa4FtN68Qzs=
Subject key identifier:   55:82:E8:F2:A0:E0:3C:16:5A:17:E2:F8:CD:C6:49:40:08:0F:45:EC
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       1EEC6613CDB7AFD69AE6DF59F092A07CC52DF81A
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
Signing time:             Thu 05 Feb 2026 23:41:32 +0000
ROA not before:           Thu 05 Feb 2026 23:36:32 +0000
ROA not after:            Thu 04 Feb 2027 23:41:32 +0000
asID:                     266140
IP address blocks:        45.6.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ec:66:13:cd:b7:af:d6:9a:e6:df:59:f0:92:a0:7c:c5:2d:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Feb  5 23:36:32 2026 GMT
            Not After : Feb  4 23:41:32 2027 GMT
        Subject: CN=5582E8F2A0E03C165A17E2F8CDC64940080F45EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:37:a3:66:87:96:d1:d5:78:f0:67:29:0a:
                    07:28:0d:12:0e:6c:57:6c:b9:6b:7d:ff:71:f0:60:
                    37:0a:27:b9:ee:9f:cb:a8:aa:68:33:b4:21:20:c8:
                    1a:89:f1:9e:e4:8d:19:5d:b9:ff:3c:51:64:b0:3d:
                    cf:df:b2:a6:fe:d8:cc:2d:cc:04:bb:90:8d:cc:b2:
                    a6:53:29:71:87:0a:19:99:cc:5f:4f:fd:00:c1:c1:
                    a3:f7:81:84:dd:2b:cf:23:35:47:cb:ad:83:5a:00:
                    98:ba:bf:87:6a:70:42:b2:bf:96:35:96:04:2c:78:
                    40:fe:bb:b6:9d:ec:9c:4a:94:83:eb:3e:4e:e7:1a:
                    28:79:70:ec:4f:b9:09:71:42:15:ea:2a:99:9d:60:
                    7e:5a:f1:0c:fa:61:82:d0:07:83:f3:1b:26:6c:82:
                    ab:46:6e:ff:66:5e:bb:29:91:0d:52:45:c8:b9:c5:
                    09:2c:44:cb:b0:ec:d8:57:82:1c:06:f4:c4:c7:57:
                    4a:21:32:88:5e:82:58:98:37:98:f7:b2:37:80:14:
                    ae:82:2d:ca:01:8e:cb:b0:c5:cb:a4:f3:25:c9:8f:
                    b1:f7:b6:5e:c6:55:ac:d9:72:85:0a:2e:cd:de:87:
                    76:2e:a1:29:a3:85:47:e4:40:6f:c7:1d:8e:6e:df:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:E8:F2:A0:E0:3C:16:5A:17:E2:F8:CD:C6:49:40:08:0F:45:EC
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:c2:66:e7:37:2a:4a:7c:a7:e9:dd:83:82:cb:62:21:a2:
         37:40:34:d1:d0:67:39:f4:d0:d6:e1:14:ff:75:65:d9:7e:5e:
         c7:d8:38:f8:8d:df:2b:36:ca:46:90:54:69:c2:fd:8d:68:0c:
         05:42:77:ef:7a:f8:ab:5d:9a:ef:ad:a8:7b:5c:c1:4b:9d:d2:
         d4:e0:be:8a:0b:3d:2c:b6:c0:59:2d:80:2b:d6:12:4d:7c:30:
         e0:23:d5:0d:ee:97:5e:90:8a:da:ee:cb:28:30:25:95:f8:5b:
         d0:cc:77:26:5a:0c:d6:e3:f3:ff:d3:e0:51:f4:71:33:a6:e4:
         03:b3:67:2f:76:a6:ca:8b:94:7d:d1:d1:4c:6f:05:ec:0e:dc:
         0e:29:f0:ff:29:5e:4a:8c:fe:8b:f5:be:dc:27:9c:01:8e:7a:
         78:2d:be:18:86:24:f0:20:fd:c0:79:7f:df:fd:b0:e9:7c:22:
         0d:7f:4c:1e:b2:02:81:a0:1d:a2:fb:aa:1e:9b:6d:df:fc:ea:
         98:3d:97:29:82:76:28:d7:73:45:56:a2:15:59:1f:ac:e0:3d:
         a2:07:e6:91:54:37:50:38:db:55:d8:cf:ab:ad:36:7c:2a:bb:
         90:07:47:61:bb:db:15:d9:e5:8c:b5:a0:7f:12:23:f2:6a:0e:
         bc:16:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:48 2026 by rpki-client