Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
File:                     34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          4+uarm8zlJq8odpWGzI6TYv4zHEbA+ghAt9fcegntFM=
Subject key identifier:   AC:05:A6:E6:87:E1:F2:A8:5A:DD:E7:DD:3D:29:1F:CA:42:35:D4:B4
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       106EAE9C3A5CF5CE42198FA37F0DC3CF5375155E
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
Signing time:             Thu 05 Feb 2026 04:29:15 +0000
ROA not before:           Thu 05 Feb 2026 04:24:15 +0000
ROA not after:            Thu 04 Feb 2027 04:29:15 +0000
asID:                     267301
IP address blocks:        45.232.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6e:ae:9c:3a:5c:f5:ce:42:19:8f:a3:7f:0d:c3:cf:53:75:15:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Feb  5 04:24:15 2026 GMT
            Not After : Feb  4 04:29:15 2027 GMT
        Subject: CN=AC05A6E687E1F2A85ADDE7DD3D291FCA4235D4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:f6:a1:99:c4:a9:2b:48:78:46:5a:57:2a:
                    34:a6:e4:37:bc:32:1a:95:d0:bf:96:47:ce:72:8a:
                    9a:b7:48:07:01:78:8a:a9:fb:a8:55:40:58:b1:39:
                    b0:97:77:79:fa:85:82:44:23:d8:73:9c:f1:0d:49:
                    98:23:9e:dc:27:ce:1a:31:3d:a9:61:5f:c7:23:36:
                    17:d9:6a:12:b8:d3:73:b9:d3:d2:62:19:1e:9f:48:
                    3c:64:07:8f:3d:93:0e:45:8c:91:9f:73:20:70:47:
                    12:9b:48:76:2b:a7:18:26:c8:db:36:24:0b:96:b6:
                    7f:a4:89:08:4f:b0:f0:b8:1c:be:85:93:4d:f1:81:
                    ef:40:44:02:b6:07:b8:bf:d8:7f:4a:97:74:01:45:
                    fa:55:11:a5:1f:90:e6:62:4d:c4:32:24:66:f4:c7:
                    6a:08:00:e7:53:09:e5:df:34:87:5d:8a:d7:26:5b:
                    dc:84:4c:eb:bb:3f:13:3c:5f:1f:03:bf:41:57:01:
                    8b:3b:12:2b:ac:2d:39:06:54:85:d8:4f:74:6b:e1:
                    ab:23:7e:6a:90:f7:de:6f:14:ad:2f:01:60:8b:b8:
                    e7:0d:54:6d:16:42:1c:62:30:86:95:f2:61:3c:79:
                    c9:e2:9e:07:78:04:c7:c4:3e:87:bb:bb:e8:6f:ef:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:A6:E6:87:E1:F2:A8:5A:DD:E7:DD:3D:29:1F:CA:42:35:D4:B4
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:c2:39:cc:f9:99:1b:d6:61:d7:e0:27:21:ff:cd:4c:03:
         1b:3a:9d:b3:7c:e6:7d:80:2c:87:6d:9d:92:cf:50:65:fe:cb:
         75:5f:6d:9f:1e:d8:30:eb:a9:5a:21:62:30:90:dc:98:2a:dd:
         5e:f7:bc:cc:92:c5:6f:30:95:9b:e8:68:5d:5b:03:ca:85:a2:
         b8:66:6c:65:08:4b:f6:ed:84:05:f3:f5:0a:83:73:74:bf:a1:
         6c:23:cd:1c:4f:b1:5b:60:a1:8b:12:d2:7e:92:a8:75:ea:85:
         c1:d5:37:76:99:6b:0e:26:98:61:2a:a0:95:7b:f6:a6:b7:74:
         1d:f2:e6:e2:28:37:fa:6e:25:36:05:87:87:5d:cd:bf:65:16:
         af:f5:03:9b:84:d1:0b:72:a1:1a:e2:06:5a:5c:b3:f5:fb:ae:
         29:d3:07:8f:e7:90:34:91:1c:6d:82:5e:20:03:86:db:7c:40:
         18:39:73:9d:94:3c:db:1b:64:72:fa:a4:c0:46:9d:20:00:46:
         4a:a1:1d:44:ee:72:69:b7:d9:18:f8:a6:19:08:45:f3:58:aa:
         19:d6:ed:ed:6d:1e:fe:14:05:dc:7a:d0:c7:42:6d:cf:fd:12:
         26:47:e5:c5:8b:aa:59:11:5a:db:ee:4b:dd:80:6d:d9:31:4e:
         b1:23:10:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEG6unDpc9c5CGY+jfw3Dz1N1FV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0RUY1MkEzRDY3RUEyNzUwRjM0MzlCNjI0NTI2MDZD
MTdDNDFBMTAeFw0yNjAyMDUwNDI0MTVaFw0yNzAyMDQwNDI5MTVaMDMxMTAvBgNV
BAMTKEFDMDVBNkU2ODdFMUYyQTg1QURERTdERDNEMjkxRkNBNDIzNUQ0QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1PahmcSpK0h4RlpXKjSm5De8
MhqV0L+WR85yipq3SAcBeIqp+6hVQFixObCXd3n6hYJEI9hznPENSZgjntwnzhox
PalhX8cjNhfZahK403O509JiGR6fSDxkB489kw5FjJGfcyBwRxKbSHYrpxgmyNs2
JAuWtn+kiQhPsPC4HL6Fk03xge9ARAK2B7i/2H9Kl3QBRfpVEaUfkOZiTcQyJGb0
x2oIAOdTCeXfNIdditcmW9yETOu7PxM8Xx8Dv0FXAYs7EiusLTkGVIXYT3Rr4asj
fmqQ995vFK0vAWCLuOcNVG0WQhxiMIaV8mE8ecningd4BMfEPoe7u+hv7zVhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrAWm5ofh8qha3efdPSkfykI11LQwHwYDVR0j
BBgwFoAUzE71Kj1n6idQ80ObYkUmBsF8QaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMS9DQzRFRjUyQTNENjdFQTI3NTBGMzQzOUI2MjQ1MjYwNkMxN0M0MUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNEVGNTJBM0Q2N0VBMjc1
MEYzNDM5QjYyNDUyNjA2QzE3QzQxQTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzEv
MzQzNTJlMzIzMzMyMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLegYMA0GCSqGSIb3DQEBCwUAA4IBAQAp5sI5zPmZ
G9Zh1+AnIf/NTAMbOp2zfOZ9gCyHbZ2Sz1Bl/st1X22fHtgw66laIWIwkNyYKt1e
97zMksVvMJWb6GhdWwPKhaK4ZmxlCEv27YQF8/UKg3N0v6FsI80cT7FbYKGLEtJ+
kqh16oXB1Td2mWsOJphhKqCVe/amt3Qd8ubiKDf6biU2BYeHXc2/ZRav9QObhNEL
cqEa4gZaXLP1+64p0weP55A0kRxtgl4gA4bbfEAYOXOdlDzbG2Ry+qTARp0gAEZK
oR1E7nJpt9kY+KYZCEXzWKoZ1u3tbR7+FAXcetDHQm3P/RImR+XFi6pZEVrb7kvd
gG3ZMU6xIxCU
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:06 2026 by rpki-client