Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          0OB/cBih5lwu+ma04lWdjF5MShMFx59uEVd4jn/euHs=
Subject key identifier:   09:49:12:E9:28:5C:86:3B:28:3E:64:21:B0:EC:93:62:C4:34:CA:FA
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       20D7542D6D66F3D7E77614B9A537033EC0459DFF
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 05 Feb 2026 04:44:39 +0000
ROA not before:           Thu 05 Feb 2026 04:39:39 +0000
ROA not after:            Thu 04 Feb 2027 04:44:39 +0000
asID:                     268513
IP address blocks:        45.161.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d7:54:2d:6d:66:f3:d7:e7:76:14:b9:a5:37:03:3e:c0:45:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Feb  5 04:39:39 2026 GMT
            Not After : Feb  4 04:44:39 2027 GMT
        Subject: CN=094912E9285C863B283E6421B0EC9362C434CAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:9b:4b:70:a4:44:2d:3e:a9:ab:64:2f:c8:
                    c6:50:9b:19:00:21:02:05:50:aa:d4:c3:48:be:17:
                    23:20:10:05:21:1f:d9:99:fb:ac:c9:26:61:c0:e2:
                    fa:99:11:61:59:d5:45:f9:89:cf:c1:65:22:fc:bf:
                    0e:ad:1e:d8:1b:35:82:7b:9d:8c:db:91:d3:ec:8b:
                    ed:0c:97:84:c6:ec:a8:0c:19:44:75:54:72:08:16:
                    68:6b:b4:7f:19:87:97:86:31:bf:66:58:c0:c0:3e:
                    55:0b:33:96:5f:bc:d5:04:bf:43:f6:31:99:56:24:
                    db:7d:b0:25:bf:2d:e4:7a:bb:7f:04:15:61:07:f7:
                    14:c3:0f:8f:38:2a:9c:7b:e6:bc:56:be:06:78:f1:
                    41:c6:10:8c:9f:3b:42:1b:a5:d1:4a:1b:b2:29:a1:
                    64:4e:67:e7:1d:d1:3c:77:b2:07:09:74:b9:19:97:
                    06:21:44:7e:ea:57:94:e8:2c:66:e8:34:bc:1e:46:
                    9f:ac:bf:a9:12:4e:e9:68:4f:e7:92:d2:e8:a7:e0:
                    3f:d9:07:ff:8b:96:f6:16:7c:9b:b8:1a:7d:db:03:
                    48:aa:ba:8d:c4:3e:16:7a:d9:95:12:ed:5b:ce:d8:
                    0b:11:46:c9:02:12:81:d0:04:43:32:0e:c2:a3:e0:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:12:E9:28:5C:86:3B:28:3E:64:21:B0:EC:93:62:C4:34:CA:FA
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:25:2c:9a:18:19:4c:ea:a8:3a:3e:f8:b8:dc:2a:8d:c8:c3:
         be:79:4b:af:ad:ad:cf:00:b0:47:dd:b8:c6:6b:23:c6:15:10:
         b4:2d:92:f4:43:dd:6d:7e:c7:e0:e2:bf:28:9c:55:f2:7d:79:
         da:5f:68:13:0e:10:d5:16:3e:02:6b:be:28:35:24:f7:a5:af:
         f9:af:c6:dc:2d:db:0d:f8:50:c4:99:4a:c7:80:41:85:fe:e5:
         7f:5d:8e:96:b2:04:0b:25:57:0f:3c:e7:7f:d2:ae:5d:a4:01:
         c5:95:89:35:2b:68:89:22:60:53:57:a4:de:7d:f3:5e:44:d5:
         3d:c3:23:27:a0:4a:92:52:23:20:7f:16:74:98:86:37:cc:ea:
         0b:4c:00:6f:4a:05:95:31:b2:9f:ac:01:87:ae:e1:98:08:c0:
         d7:1c:61:a8:0e:bb:25:ad:27:dd:e0:1c:65:d6:dd:4c:ac:c7:
         92:54:e7:d3:0f:14:87:a4:19:48:92:4c:e5:68:89:25:cd:7b:
         ff:4d:ca:25:61:b7:51:cf:17:ca:16:df:8b:b2:c6:25:38:dd:
         63:40:8e:60:b5:9c:3d:c8:d6:8f:6a:bf:76:a0:90:83:f8:59:
         f2:65:20:d0:e7:09:af:a4:21:5f:18:a3:c4:93:32:8a:f9:2d:
         55:0f:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:05 2026 by rpki-client