Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa
File:                     34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (raw, json)
Hash identifier:          SPpdLSNtEv9usVoSgjPUyf6e0e4wAl8RG3A7fsobArY=
Subject key identifier:   0C:21:66:30:49:0F:16:F0:9F:67:01:3D:25:45:45:41:82:A3:55:AD
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       2C023B528AA14339F860A7E5CF66B1B4F833410C
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa
Signing time:             Thu 05 Feb 2026 08:56:25 +0000
ROA not before:           Thu 05 Feb 2026 08:51:25 +0000
ROA not after:            Thu 04 Feb 2027 08:56:25 +0000
asID:                     268648
IP address blocks:        45.164.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
                          rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:02:3b:52:8a:a1:43:39:f8:60:a7:e5:cf:66:b1:b4:f8:33:41:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Feb  5 08:51:25 2026 GMT
            Not After : Feb  4 08:56:25 2027 GMT
        Subject: CN=0C216630490F16F09F67013D2545454182A355AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:46:1c:48:14:15:ee:97:a3:76:c3:ad:1b:
                    08:49:ee:b8:20:76:b0:c5:27:22:87:7e:d9:2e:97:
                    e9:e9:3c:2d:a0:a6:39:d6:91:99:78:2c:4a:98:65:
                    5f:56:30:78:76:c6:4e:a3:80:e9:78:25:e8:a0:da:
                    90:6b:d8:4c:c9:58:c7:65:f4:86:fd:10:46:14:b8:
                    56:32:27:64:75:d0:a0:de:c7:bb:01:25:cf:c8:4e:
                    f7:eb:d8:3f:02:8a:05:e4:f7:88:59:bf:91:c7:af:
                    34:1f:be:a3:a6:6d:84:99:9c:5b:07:d5:f4:ad:1a:
                    1b:df:22:0c:ed:09:b0:9c:2d:f4:48:f9:4b:6a:28:
                    07:a6:2f:d6:27:37:74:8d:53:32:6c:30:0a:29:bc:
                    a0:2f:95:fd:27:d3:69:94:5f:6b:0f:e1:84:3c:70:
                    b3:06:61:c2:45:e6:7a:8e:e5:72:13:b3:7b:1e:d0:
                    f2:d3:f1:e6:29:db:90:57:7f:a0:06:fc:dc:23:20:
                    d6:84:45:dc:bc:69:f6:b3:9e:38:cb:ba:76:a3:6a:
                    fd:a5:e4:32:3a:1e:34:14:2f:3e:1a:cd:c4:bb:66:
                    4d:59:ee:5b:11:40:ea:4b:c3:17:34:92:59:92:8e:
                    db:35:f7:35:d6:8b:55:78:d6:df:2e:d2:9f:6c:aa:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:21:66:30:49:0F:16:F0:9F:67:01:3D:25:45:45:41:82:A3:55:AD
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:af:5f:e8:1e:e1:9a:58:8d:a6:cb:14:15:cf:42:14:49:f2:
         7c:1c:d9:c2:0a:f1:4d:b7:74:8a:44:0f:71:83:29:b3:d8:d4:
         86:ed:25:8e:e7:19:45:5f:f4:af:c2:cd:08:3e:e0:46:11:13:
         b1:66:30:60:c4:45:d4:c2:a0:fb:e9:b6:36:8c:82:0b:39:d6:
         c0:f0:4d:54:27:f0:76:64:83:b2:bf:ff:4e:2b:2b:18:9f:52:
         e4:90:49:1b:ad:42:56:d9:09:98:25:b2:61:a1:27:15:c5:8a:
         31:77:2f:17:9d:06:2e:b8:57:03:3a:9f:3a:20:bb:7c:4d:96:
         e6:2f:d7:82:c2:b6:f8:48:cd:93:6b:7c:d5:54:0e:86:b8:ce:
         42:c0:cb:2a:ec:40:a4:8e:dc:86:c4:6c:9f:63:a1:5e:6c:be:
         75:0f:a0:7a:00:a1:cc:eb:32:a9:3c:17:9d:29:f1:82:da:8b:
         ef:71:79:80:59:c0:20:f2:36:51:84:a9:33:15:ab:58:80:42:
         c9:07:dd:ec:c4:df:c8:74:a0:f7:1b:5b:30:bf:e2:97:6e:e4:
         57:6f:9d:aa:c6:9b:b5:ba:63:4a:11:ec:3c:45:da:2f:06:6a:
         b7:1f:f5:16:a4:2a:0d:d0:93:77:23:4a:04:c1:de:74:30:19:
         fe:09:13:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULAI7UoqhQzn4YKflz2axtPgzQQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMjRENEU5RDRERTE3OUE5MzIzOUU1OTcyQTBBNDhD
QkUyNDExNzAeFw0yNjAyMDUwODUxMjVaFw0yNzAyMDQwODU2MjVaMDMxMTAvBgNV
BAMTKDBDMjE2NjMwNDkwRjE2RjA5RjY3MDEzRDI1NDU0NTQxODJBMzU1QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqEYcSBQV7pejdsOtGwhJ7rgg
drDFJyKHftkul+npPC2gpjnWkZl4LEqYZV9WMHh2xk6jgOl4Jeig2pBr2EzJWMdl
9Ib9EEYUuFYyJ2R10KDex7sBJc/ITvfr2D8CigXk94hZv5HHrzQfvqOmbYSZnFsH
1fStGhvfIgztCbCcLfRI+UtqKAemL9YnN3SNUzJsMAopvKAvlf0n02mUX2sP4YQ8
cLMGYcJF5nqO5XITs3se0PLT8eYp25BXf6AG/NwjINaERdy8afaznjjLunajav2l
5DI6HjQULz4azcS7Zk1Z7lsRQOpLwxc0klmSjts19zXWi1V41t8u0p9sqjU7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDCFmMEkPFvCfZwE9JUVFQYKjVa0wHwYDVR0j
BBgwFoAU3OJNTp1N4XmpMjnllyoKSMviQRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFDZzVxeTZpMVk5S2EzZjRGUVFreEFWZ2Rpczk0d1JzV0hqd21FM1N0
akIvMS9EQ0UyNEQ0RTlENERFMTc5QTkzMjM5RTU5NzJBMEE0OENCRTI0MTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTI0RDRFOUQ0REUxNzlB
OTMyMzlFNTk3MkEwQTQ4Q0JFMjQxMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRQ2c1cXk2aTFZOUthM2Y0RlFRa3hBVmdkaXM5NHdSc1dIandtRTNTdGpCLzEv
MzQzNTJlMzEzNjM0MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpPQwDQYJKoZIhvcNAQELBQADggEBAJOvX+ge
4ZpYjabLFBXPQhRJ8nwc2cIK8U23dIpED3GDKbPY1IbtJY7nGUVf9K/CzQg+4EYR
E7FmMGDERdTCoPvptjaMggs51sDwTVQn8HZkg7K//04rKxifUuSQSRutQlbZCZgl
smGhJxXFijF3LxedBi64VwM6nzogu3xNluYv14LCtvhIzZNrfNVUDoa4zkLAyyrs
QKSO3IbEbJ9joV5svnUPoHoAoczrMqk8F50p8YLai+9xeYBZwCDyNlGEqTMVq1iA
QskH3ezE38h0oPcbWzC/4pdu5FdvnarGm7W6Y0oR7DxF2i8Garcf9RakKg3Qk3cj
SgTB3nQwGf4JE7I=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:15 2026 by rpki-client