Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3332203d3e20323639323838.roa
File:                     34352e3138332e3136342e302f32322d3332203d3e20323639323838.roa (raw, json)
Hash identifier:          uvBy00o2harlLMsMqXWl1/cYNTb2P/le+nLI78dI2ic=
Subject key identifier:   C2:0B:42:10:AE:EC:4F:18:B8:DF:B8:19:63:D9:35:30:0B:88:AB:BC
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       207268AE83BDCCB405BE6433CAA5A404984FE14B
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3332203d3e20323639323838.roa
Signing time:             Mon 09 Feb 2026 15:57:10 +0000
ROA not before:           Mon 09 Feb 2026 15:52:10 +0000
ROA not after:            Mon 08 Feb 2027 15:57:10 +0000
asID:                     269288
IP address blocks:        45.183.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:68:ae:83:bd:cc:b4:05:be:64:33:ca:a5:a4:04:98:4f:e1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Feb  9 15:52:10 2026 GMT
            Not After : Feb  8 15:57:10 2027 GMT
        Subject: CN=C20B4210AEEC4F18B8DFB81963D935300B88ABBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:c6:4b:f7:ed:e2:6f:1c:25:25:e6:96:5a:
                    62:3a:22:72:ae:1d:2f:c2:9b:24:8c:87:06:49:18:
                    ab:04:a4:74:ad:f2:fc:00:00:26:97:2f:36:3f:3e:
                    3b:01:b9:f5:3f:4b:04:b2:7c:1a:bf:09:de:b3:08:
                    8d:49:98:62:9b:ff:f5:d0:6e:3d:aa:b7:b7:bc:c6:
                    8a:8f:ea:45:70:9a:f8:72:7f:a1:39:61:8c:e2:40:
                    ad:ac:33:c4:96:57:1b:f0:86:0b:85:9d:45:7a:cd:
                    d3:85:1c:76:73:94:dd:9a:b0:61:b2:14:77:b8:66:
                    9f:89:fb:9b:0f:e6:48:1e:45:56:20:ee:62:ad:4c:
                    c9:35:43:25:d2:1f:34:38:49:4f:31:34:f2:83:e3:
                    53:cf:33:69:e3:c1:a0:d1:71:c8:e4:89:14:f1:1e:
                    3d:4a:67:c8:0f:eb:81:c5:2d:c5:a7:1e:44:c0:32:
                    b0:97:3d:79:cb:04:e9:49:6b:ab:4e:79:a0:76:fd:
                    c4:28:a4:5f:db:b4:1c:9b:85:c0:7c:81:a0:cb:91:
                    d3:7f:7c:80:f6:53:5f:a0:a6:b5:63:23:b9:0d:6d:
                    70:5a:d0:8d:16:25:1b:66:0c:40:2f:3b:4f:18:fc:
                    0b:76:98:03:a7:42:60:d9:82:02:b2:5b:70:5a:ef:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:42:10:AE:EC:4F:18:B8:DF:B8:19:63:D9:35:30:0B:88:AB:BC
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3332203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:8a:96:c8:38:6f:af:a3:5e:ee:38:a3:e9:91:0a:cf:43:
         06:a9:65:4c:0a:88:8f:e8:38:71:de:7a:e7:ed:99:c1:9c:dc:
         28:20:ea:c7:8d:e6:b6:08:5f:1e:38:70:09:93:4a:1a:7e:24:
         00:a7:06:e8:c0:bb:2a:3e:58:b3:f0:dd:92:d0:a0:a7:7c:f0:
         98:96:5a:d3:7f:45:c0:54:f6:4c:38:e3:f9:86:95:2f:5c:a7:
         6a:e2:11:68:9d:e2:1f:a6:3b:39:56:b9:6e:59:de:0d:5d:08:
         fd:ee:84:c0:6c:3a:07:e5:62:49:92:f2:ff:27:83:fe:56:ad:
         63:36:98:17:ff:ab:31:7a:ab:c3:b1:1e:52:b5:e7:5a:e4:e2:
         2b:a3:81:2f:b5:61:6e:92:22:35:5e:5b:74:d4:c9:35:7d:ef:
         84:3c:e2:47:31:e1:fd:f5:fc:7a:a0:61:2e:82:a6:5c:71:3d:
         11:e3:3d:f5:19:31:e0:dd:69:4c:09:ff:be:74:1c:8b:d3:4d:
         d3:bb:69:cd:b8:d1:da:9e:41:2d:1f:23:86:38:2f:ea:b3:42:
         a4:a5:3a:7d:e8:72:43:43:64:e6:97:5c:65:1b:24:05:71:7b:
         b8:ec:63:50:7b:06:79:42:a2:d0:15:37:17:23:12:27:71:ea:
         66:ea:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:14 2026 by rpki-client