Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
File:                     34352e372e3131362e302f32322d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          sCP6thMdAA9gDiOxte8RF05RrI/PM5NftY+8foK2su4=
Subject key identifier:   7C:D1:BC:3F:DC:02:51:0D:C9:8D:38:80:1C:62:4A:70:F0:41:80:EE
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       157A8FDED16D7DF0892ACBD23CB142A208D0BFEF
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
Signing time:             Thu 05 Feb 2026 20:27:42 +0000
ROA not before:           Thu 05 Feb 2026 20:22:42 +0000
ROA not after:            Thu 04 Feb 2027 20:27:42 +0000
asID:                     266584
IP address blocks:        45.7.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl
                          rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:8f:de:d1:6d:7d:f0:89:2a:cb:d2:3c:b1:42:a2:08:d0:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Feb  5 20:22:42 2026 GMT
            Not After : Feb  4 20:27:42 2027 GMT
        Subject: CN=7CD1BC3FDC02510DC98D38801C624A70F04180EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:7f:60:5c:cc:27:1c:a7:11:34:0a:7c:ff:
                    00:7d:47:28:51:9d:f0:57:ea:95:bd:de:39:14:1a:
                    f0:d3:c8:20:e5:ee:a7:08:a5:53:f2:4f:ed:c0:cd:
                    6d:83:03:e3:55:20:4f:fd:06:b6:ee:02:54:e4:4f:
                    59:10:5d:3c:bf:c2:c0:24:47:e0:8a:13:b5:00:e1:
                    fe:99:63:ba:87:d3:e8:7e:de:6e:07:6e:c1:14:67:
                    4c:55:10:f9:6e:ca:eb:03:bf:59:c9:52:f1:6a:71:
                    7e:a5:50:21:f1:50:5f:b8:0e:ae:c0:8d:90:82:e7:
                    56:95:00:e6:03:e6:10:66:ce:cb:67:64:43:3a:b8:
                    4c:cf:71:49:9b:25:ca:0b:79:cc:8d:1e:7b:40:60:
                    25:43:d7:5c:1f:1a:36:69:35:32:63:eb:6c:66:48:
                    47:bf:2d:c1:0d:18:e3:07:79:26:99:bd:c8:be:f4:
                    30:9c:56:bb:21:2f:e5:cb:f5:06:eb:aa:96:20:d2:
                    d8:bc:fd:38:e4:65:4a:e7:b3:98:3d:28:a9:bb:e7:
                    46:eb:e6:41:42:b4:f1:84:3d:c7:86:da:e3:6a:33:
                    54:05:d0:af:37:28:a8:a1:41:45:49:6e:74:14:46:
                    d5:be:cc:5a:d0:0c:19:ca:69:46:ab:03:02:8b:c5:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D1:BC:3F:DC:02:51:0D:C9:8D:38:80:1C:62:4A:70:F0:41:80:EE
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:05:3a:34:7d:06:16:42:83:a5:33:f3:26:f1:8e:b5:1d:a4:
         9b:f2:b3:1a:c7:d8:0d:61:ab:9a:42:88:0c:42:5f:af:4c:74:
         f2:46:f4:8d:3c:fb:6e:5b:5b:85:19:2b:e0:1b:dd:1c:68:b6:
         96:2a:38:fb:7a:6d:71:62:30:fd:e4:b4:5e:e6:be:66:a6:18:
         d2:4d:2f:97:f7:5b:62:9b:7a:ba:42:f9:54:3b:21:17:05:2f:
         44:ee:cb:ad:f1:f1:d8:fc:6b:00:38:62:34:d9:72:70:6b:02:
         13:81:68:be:66:f6:b7:5c:3a:e5:ee:76:03:06:6c:8f:f6:89:
         27:e2:3e:c1:5c:d1:07:88:0a:82:d8:70:ba:8f:c5:30:50:1d:
         fb:48:db:ee:a7:b5:04:44:39:bd:e9:35:76:d9:da:de:1e:93:
         db:d4:df:38:52:db:9f:78:50:04:9e:01:c7:97:87:fd:4a:ad:
         16:84:18:b9:bc:1d:d4:3b:1e:94:b4:57:1a:7c:0d:d3:fe:de:
         3c:d0:db:84:45:a3:b5:d2:0c:d2:b7:0c:90:51:38:f7:b7:05:
         af:30:97:dc:a3:c6:1e:73:8b:3b:7e:21:0a:48:d1:5a:51:8f:
         de:26:28:fc:25:b2:1e:ee:21:b4:61:04:90:d9:94:30:a4:fe:
         32:d8:03:55
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFXqP3tFtffCJKsvSPLFCogjQv+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC
NjE5NTJGMzAeFw0yNjAyMDUyMDIyNDJaFw0yNzAyMDQyMDI3NDJaMDMxMTAvBgNV
BAMTKDdDRDFCQzNGREMwMjUxMERDOThEMzg4MDFDNjI0QTcwRjA0MTgwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1X9gXMwnHKcRNAp8/wB9RyhR
nfBX6pW93jkUGvDTyCDl7qcIpVPyT+3AzW2DA+NVIE/9BrbuAlTkT1kQXTy/wsAk
R+CKE7UA4f6ZY7qH0+h+3m4HbsEUZ0xVEPluyusDv1nJUvFqcX6lUCHxUF+4Dq7A
jZCC51aVAOYD5hBmzstnZEM6uEzPcUmbJcoLecyNHntAYCVD11wfGjZpNTJj62xm
SEe/LcENGOMHeSaZvci+9DCcVrshL+XL9QbrqpYg0ti8/TjkZUrns5g9KKm750br
5kFCtPGEPceG2uNqM1QF0K83KKihQUVJbnQURtW+zFrQDBnKaUarAwKLxfnvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfNG8P9wCUQ3JjTiAHGJKcPBBgO4wHwYDVR0j
BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw
N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzEv
MzQzNTJlMzcyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM1
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0HdDANBgkqhkiG9w0BAQsFAAOCAQEArgU6NH0GFkKD
pTPzJvGOtR2km/KzGsfYDWGrmkKIDEJfr0x08kb0jTz7bltbhRkr4BvdHGi2lio4
+3ptcWIw/eS0Xua+ZqYY0k0vl/dbYpt6ukL5VDshFwUvRO7LrfHx2PxrADhiNNly
cGsCE4Fovmb2t1w65e52AwZsj/aJJ+I+wVzRB4gKgthwuo/FMFAd+0jb7qe1BEQ5
vek1dtna3h6T29TfOFLbn3hQBJ4Bx5eH/UqtFoQYubwd1DselLRXGnwN0/7ePNDb
hEWjtdIM0rcMkFE497cFrzCX3KPGHnOLO34hCkjRWlGP3iYo/CWyHu4htGEEkNmU
MKT+MtgDVQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:27 2026 by rpki-client