Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa
File:                     34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa (raw, json)
Hash identifier:          LsMXl7txTOAUchDa0Vk1W4iQcaPYM9YpcSAd2R01ARo=
Subject key identifier:   F7:0D:A2:29:B1:DC:8A:CE:6C:B6:48:73:55:D2:D6:A8:3E:9D:7B:8B
Certificate issuer:       /CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
Certificate serial:       16F65DB2CA693C5070161BE7D14F4B4F6455D77E
Authority key identifier: 68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa
Signing time:             Sat 31 Jan 2026 13:12:23 +0000
ROA not before:           Sat 31 Jan 2026 13:07:23 +0000
ROA not after:            Sat 30 Jan 2027 13:12:23 +0000
asID:                     269084
IP address blocks:        45.179.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl
                          rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f6:5d:b2:ca:69:3c:50:70:16:1b:e7:d1:4f:4b:4f:64:55:d7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
        Validity
            Not Before: Jan 31 13:07:23 2026 GMT
            Not After : Jan 30 13:12:23 2027 GMT
        Subject: CN=F70DA229B1DC8ACE6CB6487355D2D6A83E9D7B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:3b:4e:4e:29:ee:05:b2:08:0a:fd:22:0d:
                    6c:c9:c7:9a:bf:80:4a:65:f7:ff:a4:36:de:0d:dc:
                    bd:30:d3:46:3f:a9:80:90:07:9f:70:30:9e:07:1d:
                    68:a8:e5:91:e4:f6:59:2f:f4:5e:53:32:c3:5a:42:
                    0e:86:af:7e:81:67:85:b8:fb:48:b3:1a:dd:89:09:
                    57:96:5c:de:db:07:bd:29:82:e8:17:06:5f:12:30:
                    63:70:fc:f5:cf:b4:39:43:c6:8b:60:7d:3a:5c:82:
                    6a:d7:e8:d6:ca:ba:02:f4:c9:db:ef:e3:4f:d2:b7:
                    9c:2a:49:51:bb:15:0a:30:25:19:af:cb:d0:98:61:
                    8d:42:9c:a6:d3:ea:14:84:70:1c:60:ec:8e:78:b6:
                    e9:91:ed:90:f5:d6:1e:3d:77:48:c9:19:f0:47:70:
                    00:a5:3e:5d:4d:2f:ab:c9:0a:d8:0c:08:ea:27:fa:
                    c0:72:11:c3:36:d2:62:43:d6:9d:b4:a9:c0:13:93:
                    4d:4d:8a:60:3c:06:52:29:4b:4b:2b:b0:a9:5d:09:
                    4a:f9:a3:c9:74:4a:06:4e:b7:82:e3:cf:91:46:a7:
                    92:5c:52:f2:54:37:9e:e7:a7:89:a0:6d:d8:40:e8:
                    6f:85:19:04:bb:15:7f:4d:ea:b4:c3:d2:db:e2:d3:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:A2:29:B1:DC:8A:CE:6C:B6:48:73:55:D2:D6:A8:3E:9D:7B:8B
            X509v3 Authority Key Identifier:
                keyid:68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:37:27:67:70:60:0d:00:c4:ce:33:a5:05:f4:2a:f4:e6:8e:
         41:b6:50:99:f5:00:cc:6c:cd:97:4d:7f:5e:46:61:57:aa:56:
         73:c9:32:ae:f1:27:e4:3a:e8:80:ff:bd:df:a5:1d:29:b6:aa:
         a3:df:1f:23:3d:0c:49:21:41:c4:08:75:74:6f:b1:61:a1:1c:
         10:7d:64:e9:bc:e3:da:ab:69:ca:4a:47:95:46:ea:3c:8d:1b:
         07:0c:98:c9:2e:1d:d3:10:9d:f5:ce:95:8a:dd:28:a2:8a:a8:
         e9:5e:3d:63:6a:f5:e5:42:fe:9c:86:bd:a5:d8:18:5d:db:9e:
         e7:c0:7f:ed:16:fb:f3:bb:1f:7f:f6:37:4a:b4:38:d6:89:7d:
         36:fa:68:6c:5f:eb:55:40:44:43:2c:b6:14:b2:f6:63:77:2c:
         8a:e8:11:89:fa:23:9c:1b:82:72:50:d8:2a:44:62:b0:c7:e9:
         da:9d:47:b7:50:49:f6:a1:41:8f:ab:a7:3a:3b:b6:53:dd:0a:
         40:d5:0d:49:88:89:1f:5f:64:f4:16:cb:71:19:52:84:0b:d2:
         75:0a:96:df:b0:a3:69:bf:38:61:08:59:62:67:bf:b9:be:f2:
         16:69:5c:20:a0:7b:79:98:90:16:15:a2:c5:da:b2:70:1c:ba:
         3f:75:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:21 2026 by rpki-client