Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          PA0GjQVKNRua163GyZaesutIWRqqg/zSkRFHGj7fvYw=
Subject key identifier:   29:B4:89:F5:F8:E9:30:87:6D:1C:81:65:FC:DD:CD:92:65:61:60:4A
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       4658F284948391442F078A6FE91306520440BDC9
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:50 +0000
ROA not before:           Thu 05 Feb 2026 09:38:50 +0000
ROA not after:            Thu 04 Feb 2027 09:43:50 +0000
asID:                     264996
IP address blocks:        45.179.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:58:f2:84:94:83:91:44:2f:07:8a:6f:e9:13:06:52:04:40:bd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:50 2026 GMT
            Not After : Feb  4 09:43:50 2027 GMT
        Subject: CN=29B489F5F8E930876D1C8165FCDDCD926561604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:b6:be:c6:21:0a:65:49:d5:73:8e:e2:87:
                    8f:f7:93:e2:4c:35:fe:0b:5f:c8:9e:37:74:7c:09:
                    07:c4:4e:cd:88:7d:c1:32:9b:b9:af:f9:4c:95:82:
                    8f:c8:90:a2:8d:c6:07:5c:68:85:6b:38:85:8e:cd:
                    ec:aa:3a:18:66:f4:99:9e:53:64:d9:c0:de:52:eb:
                    a0:49:2f:61:cb:1c:12:ad:e9:17:c6:83:a5:50:c9:
                    d9:e1:89:21:6a:9b:fe:49:18:08:01:31:b1:12:4e:
                    2d:88:ac:f1:c8:2d:17:1e:4f:ca:6f:31:f6:af:2c:
                    34:f4:da:0d:e2:82:a7:fc:82:d7:47:95:d7:b0:cf:
                    7d:c3:87:30:77:b5:ca:e6:26:e5:1b:e6:2b:f0:3c:
                    fd:58:9d:45:7b:e7:e0:d1:bc:3f:e2:b2:7c:f7:3e:
                    ba:8c:8a:e8:3a:97:06:ff:57:b0:0f:d3:a5:70:04:
                    cc:85:1a:06:ac:71:23:74:3d:b9:49:59:e1:fb:22:
                    f5:38:5d:98:88:9b:eb:03:4c:a8:b3:9f:ce:4f:7a:
                    cb:b5:7d:d2:e5:40:9d:44:4b:fc:e4:95:1e:8f:d6:
                    b5:0b:7b:24:4c:e8:c0:f1:76:ba:3c:c6:85:28:af:
                    9c:52:31:ce:f4:63:74:b6:00:61:96:1b:32:cd:51:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B4:89:F5:F8:E9:30:87:6D:1C:81:65:FC:DD:CD:92:65:61:60:4A
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:8e:a7:7f:ca:52:c6:7d:89:53:3b:1f:e5:97:80:84:36:
         54:50:5f:a0:59:ec:e0:36:c5:4e:ff:3c:f3:81:1d:a4:8c:53:
         4b:cc:09:7f:ec:29:b2:b0:22:04:f6:d1:e6:57:f2:f7:8f:e0:
         df:cd:ab:75:15:dd:4a:8e:8a:d1:ec:c4:67:0c:ff:7e:1c:90:
         da:fc:27:b2:14:27:df:95:71:b5:64:7e:eb:88:6e:98:c0:58:
         8f:c1:0b:14:6a:d7:d4:e6:7a:61:65:52:25:1d:b0:b5:58:0a:
         6f:04:15:3a:56:27:5b:af:ed:1b:57:cf:f3:4d:65:9a:ef:84:
         9b:b9:62:81:cf:12:39:30:4a:52:e2:99:cb:54:80:39:0e:7b:
         52:5b:25:4e:c0:94:63:eb:50:64:8b:e3:f8:9a:3e:f5:ed:8b:
         14:c8:16:29:c0:8b:d9:c8:50:0c:81:2a:df:96:7f:fb:ae:ed:
         de:07:54:4e:80:57:44:c6:1a:3f:63:6f:76:8e:44:46:eb:b7:
         d5:cd:7d:9e:7f:07:a8:9e:8b:d6:10:1a:8d:e7:07:52:c3:34:
         25:56:b6:27:83:c2:c7:92:6c:49:d4:52:56:bf:d4:6d:98:a3:
         4c:f9:88:ef:95:7c:65:bf:3d:22:6f:50:04:f2:d7:6a:ef:21:
         c7:73:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:57:15 2026 by rpki-client