Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          9T3BL9AI+8/DpIo4km4+tfGfSSR3eJ6DOw2McSonC4I=
Subject key identifier:   7C:E3:A7:9F:08:D3:38:36:70:7D:93:76:36:F2:89:D6:DC:4E:06:60
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       39BBB3913C5C2A62C74FC76B9AF76241DC6D54A8
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:50 +0000
ROA not before:           Thu 05 Feb 2026 09:38:50 +0000
ROA not after:            Thu 04 Feb 2027 09:43:50 +0000
asID:                     264996
IP address blocks:        45.179.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bb:b3:91:3c:5c:2a:62:c7:4f:c7:6b:9a:f7:62:41:dc:6d:54:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:50 2026 GMT
            Not After : Feb  4 09:43:50 2027 GMT
        Subject: CN=7CE3A79F08D33836707D937636F289D6DC4E0660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:9d:0d:ec:e0:53:9c:fd:87:4d:6e:64:90:
                    3d:16:dc:29:c2:52:5b:79:86:95:14:e2:74:6a:b3:
                    7d:83:bd:59:0f:cf:5f:24:94:34:06:1a:c8:a1:30:
                    c5:0b:00:c3:5f:c3:26:37:31:e0:63:69:fe:50:b5:
                    a0:5f:9e:08:ae:c7:92:2f:45:cb:d8:75:b6:11:3e:
                    91:c7:1c:ee:c6:ad:31:b6:26:15:3e:5b:dc:2f:68:
                    27:77:7b:bd:54:fb:ec:d7:9c:2a:17:ca:27:2f:ba:
                    58:df:98:40:59:3d:dd:7b:a2:00:ad:15:80:70:ba:
                    da:88:8f:17:c2:e8:86:83:08:f8:19:d4:cc:79:fe:
                    ca:13:02:2a:a9:bf:7c:43:39:dd:ef:ae:8a:3e:bd:
                    eb:a4:a2:bd:b9:73:de:89:95:03:72:55:ef:d7:f9:
                    3e:07:39:f2:02:56:fa:27:08:bd:76:7a:48:6e:a5:
                    18:98:6a:a1:06:b0:ac:75:c5:8d:65:d3:ab:4e:a6:
                    6a:f1:7d:32:c0:32:95:8f:a1:c8:7c:73:3d:da:1c:
                    fa:6d:02:ba:af:8c:73:cd:b1:f6:5b:e3:13:24:7c:
                    62:4d:f7:4f:ed:96:6c:c7:ad:ed:50:cc:6e:32:ee:
                    0c:a9:c2:8c:36:e5:48:e9:4a:a3:5a:aa:90:c6:1f:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:A7:9F:08:D3:38:36:70:7D:93:76:36:F2:89:D6:DC:4E:06:60
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:e1:cc:e3:84:d0:28:0b:0f:3c:95:7e:23:cb:84:dc:eb:84:
         a9:81:85:3f:1f:60:6d:a6:ee:ac:f1:29:c6:a4:81:49:5d:bd:
         c5:29:82:12:fb:17:b3:a6:4c:0e:82:f9:a3:f8:43:c2:e3:34:
         b6:c5:e4:0a:b1:c6:09:b5:fa:a5:1e:7e:37:1c:40:4e:75:f4:
         97:10:66:79:8d:64:ba:f8:5e:e8:21:91:ad:97:4d:1d:02:60:
         be:4e:34:b2:22:1b:0e:55:dc:c7:23:2f:98:9d:bc:6f:2e:2f:
         1d:75:1b:43:2e:ec:22:4f:8a:25:49:a8:bb:ae:20:56:a0:93:
         e0:a7:ff:33:22:7f:cb:3a:65:4c:0e:e2:f4:8f:06:15:db:94:
         1f:db:d8:2d:2c:e2:c7:5b:95:6b:7d:ac:52:71:5b:17:f6:ec:
         58:0a:56:3f:84:c3:e4:23:3e:ca:0f:86:49:f1:03:1a:e4:e5:
         2b:8c:4a:71:da:ad:ca:b8:91:f9:0b:8a:bb:f1:09:01:d8:e0:
         3a:3a:75:c9:6c:c4:33:de:d8:f2:23:96:a1:a3:03:1a:16:9c:
         9d:d5:a6:1e:25:2b:d6:e7:b6:49:af:27:b5:be:ca:f5:bb:12:
         fd:71:d5:4a:53:63:7c:17:90:da:68:95:33:a4:76:21:84:e5:
         ac:f3:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:44 2026 by rpki-client