Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa
File:                     34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa (raw, json)
Hash identifier:          Jw6lYiAKNDsrZj8WVK8rSk5OVNmYy2e53INwUg/1x9Y=
Subject key identifier:   B0:10:AD:FF:72:F4:11:A9:61:AE:6F:24:71:B9:36:CF:B2:A1:51:66
Certificate issuer:       /CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
Certificate serial:       33CE6203EF29DD0DF6F8F3B03A95B1B68143A3AB
Authority key identifier: 68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa
Signing time:             Sat 31 Jan 2026 13:12:23 +0000
ROA not before:           Sat 31 Jan 2026 13:07:23 +0000
ROA not after:            Sat 30 Jan 2027 13:12:23 +0000
asID:                     269084
IP address blocks:        45.179.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl
                          rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ce:62:03:ef:29:dd:0d:f6:f8:f3:b0:3a:95:b1:b6:81:43:a3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
        Validity
            Not Before: Jan 31 13:07:23 2026 GMT
            Not After : Jan 30 13:12:23 2027 GMT
        Subject: CN=B010ADFF72F411A961AE6F2471B936CFB2A15166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:cf:57:3a:c0:e3:a3:19:77:36:74:81:60:
                    ea:65:f6:ae:3d:e0:52:b5:98:c1:65:ed:13:a1:28:
                    4c:d4:91:ee:bf:6d:5d:20:04:16:83:98:f3:52:ae:
                    b1:76:94:b3:60:c3:18:16:93:01:23:ca:5c:b3:a1:
                    03:71:11:b1:0b:16:fe:b7:a8:15:9c:73:bd:3c:52:
                    64:34:6e:9d:93:3d:dc:72:d6:5b:cf:e8:4f:b1:77:
                    7b:30:8e:7c:43:2b:e2:ee:fc:5d:9b:c5:1a:74:cc:
                    65:36:32:0b:38:d7:c2:3f:c7:d5:d6:66:61:65:6d:
                    82:0f:10:c2:ef:fd:5e:23:4d:af:93:e0:c4:b3:78:
                    df:d9:64:f5:6e:1a:cb:a7:e9:c9:fa:88:9e:26:5d:
                    b1:9f:38:07:46:6b:3e:6f:ce:49:34:09:cb:15:23:
                    77:8a:58:ab:b7:c7:23:24:f4:e8:22:d4:c0:de:07:
                    30:b6:c1:1e:87:99:9e:a8:bd:17:5f:75:91:d4:1f:
                    f8:03:4a:89:4e:18:12:39:dd:a5:48:2b:c0:4d:4c:
                    bc:d6:73:89:b7:de:bb:aa:53:b2:27:57:71:4e:07:
                    02:8c:a3:03:84:24:ff:55:42:22:35:75:ed:13:86:
                    6a:09:87:2a:c6:4c:c3:6f:e5:2a:0b:ff:44:cb:0f:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:AD:FF:72:F4:11:A9:61:AE:6F:24:71:B9:36:CF:B2:A1:51:66
            X509v3 Authority Key Identifier:
                keyid:68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:e0:ed:d7:8b:a3:a0:25:a8:5a:2f:0a:42:09:e0:2a:18:
         76:2e:84:77:0d:5b:e7:f7:83:7f:08:76:d3:24:5e:1c:e6:79:
         f0:98:b0:b4:d3:15:76:e3:f7:63:fd:59:62:fb:b8:ef:14:ea:
         fa:55:6d:3f:ae:84:8e:59:4d:a5:b2:c3:43:a6:2b:ee:8e:c5:
         ba:a1:fc:e8:5c:71:47:cb:d9:47:5e:64:eb:1d:30:40:b6:33:
         cc:7a:88:cd:f4:f9:13:84:b9:7a:01:8a:34:c2:09:ff:08:56:
         a8:12:e1:25:c0:a0:15:82:46:4d:a9:86:97:1a:c3:4d:e8:8e:
         9b:c4:50:e4:ca:06:a0:03:b7:c7:c8:d6:83:06:d2:19:88:94:
         f6:18:d0:b9:de:e3:01:91:f5:11:7f:4b:c1:02:3d:10:c2:d5:
         f3:c7:fa:bf:db:74:3d:78:42:5e:3b:25:06:94:75:6b:08:32:
         43:e0:c4:aa:8f:b8:65:c2:af:67:f6:0b:60:2c:fe:eb:87:76:
         10:f3:22:be:ca:c8:13:76:ed:41:5c:61:4d:dc:db:6f:14:05:
         8f:25:a8:be:c8:d0:88:76:29:be:89:3d:7f:49:c8:5e:dd:b2:
         a2:fe:c1:eb:aa:e9:c8:2b:b2:a2:8c:d1:a2:4b:31:f4:5f:16:
         f3:3e:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:01 2026 by rpki-client