Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
File:                     34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          Gr61bIojfm0jhwKq3KKpboNVR8t+czSPfPn+sKOe4bU=
Subject key identifier:   99:06:91:2B:AD:5A:41:AC:23:91:02:6C:29:FA:5F:1D:50:F4:E3:85
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       12AE22D372D7FD5B3C61F0069B92668D26A52C2A
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
Signing time:             Thu 05 Feb 2026 06:46:16 +0000
ROA not before:           Thu 05 Feb 2026 06:41:16 +0000
ROA not after:            Thu 04 Feb 2027 06:46:16 +0000
asID:                     268874
IP address blocks:        45.175.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ae:22:d3:72:d7:fd:5b:3c:61:f0:06:9b:92:66:8d:26:a5:2c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Feb  5 06:41:16 2026 GMT
            Not After : Feb  4 06:46:16 2027 GMT
        Subject: CN=9906912BAD5A41AC2391026C29FA5F1D50F4E385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:c8:51:bb:98:b3:6d:a8:02:83:d1:8d:88:
                    40:15:b9:d3:94:7a:a0:f5:19:d6:ad:6d:09:86:dc:
                    c7:c7:ee:f2:a1:e6:57:c1:cf:e3:63:b0:b7:79:a7:
                    08:47:62:3d:71:79:40:68:1f:68:9f:fc:48:0f:2d:
                    df:61:e0:bb:ea:2b:85:cc:9c:fb:e9:5b:d1:83:a4:
                    6b:7e:0d:0c:bc:38:fe:c4:30:ae:f4:14:5b:12:0c:
                    75:fe:30:5c:66:1d:71:51:ab:a7:1e:9a:6b:dc:2d:
                    fd:ca:1f:1b:f2:58:4d:d3:d8:c8:72:d8:07:42:df:
                    d0:f6:7d:ff:a9:91:17:63:a6:e2:6e:7b:57:77:40:
                    60:5a:aa:10:a8:03:42:41:c2:ff:08:df:cd:90:eb:
                    c9:63:46:47:27:66:b7:c8:a6:b3:2c:dc:39:cf:30:
                    cd:8f:ab:9a:a7:5c:51:51:2a:75:22:e8:4f:32:df:
                    51:85:2a:33:cb:7f:81:e2:52:f7:67:b2:79:2d:59:
                    e7:99:a9:82:88:36:62:e7:67:31:f2:dd:a0:95:80:
                    a5:e5:2a:29:49:3a:13:f5:3b:e8:dc:6f:0e:57:aa:
                    e1:88:10:37:75:aa:30:21:49:bf:2a:cb:02:6b:44:
                    f7:01:56:f4:d2:64:c6:34:2f:6f:ff:f1:0c:ba:f5:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:91:2B:AD:5A:41:AC:23:91:02:6C:29:FA:5F:1D:50:F4:E3:85
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:a4:da:c1:90:2c:27:94:78:bc:a6:d4:7f:6d:b8:77:7e:
         4d:90:6b:ee:49:67:f2:e7:ea:59:31:f1:5a:c7:3e:ba:4f:e2:
         26:2b:e3:44:a8:5d:98:d3:85:ff:3b:5d:fa:5c:0f:be:f5:00:
         fd:e2:23:ce:42:9b:37:ec:7d:82:81:1a:96:f5:70:32:88:59:
         16:3c:b6:e9:97:d3:7e:12:6b:70:69:16:ad:9a:46:b2:f9:30:
         e7:00:c5:fb:ed:3f:74:6c:9c:29:d9:db:87:59:d4:be:9c:9c:
         8c:70:99:29:8c:24:14:fc:2a:b4:38:15:23:3e:e8:48:d4:17:
         33:4a:69:6d:3c:ab:60:e2:9c:dc:de:23:3f:6e:fb:da:28:62:
         bd:0a:18:91:64:5c:94:92:c9:46:75:c8:bd:9e:43:31:16:28:
         38:a4:65:64:ba:e6:9c:c1:48:20:0c:62:b8:ce:2c:bd:c0:c1:
         32:4a:19:87:d2:58:5c:bf:0c:d8:df:49:f3:d8:28:a2:a3:d7:
         84:06:06:f1:06:18:ee:32:c6:a8:34:bf:d3:c0:43:d6:13:a6:
         1b:ca:33:fb:76:f4:66:54:de:a3:21:13:53:16:cd:3d:e7:90:
         26:c8:2e:51:28:05:fd:c3:36:b4:01:08:97:87:22:ef:76:66:
         78:81:19:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEq4i03LX/Vs8YfAGm5JmjSalLCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwN0RGNEQ2MUMyQTgwQjlFMEE2QkU0RjVEN0E4MDkz
MEM3MzVDQjAeFw0yNjAyMDUwNjQxMTZaFw0yNzAyMDQwNjQ2MTZaMDMxMTAvBgNV
BAMTKDk5MDY5MTJCQUQ1QTQxQUMyMzkxMDI2QzI5RkE1RjFENTBGNEUzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43MhRu5izbagCg9GNiEAVudOU
eqD1GdatbQmG3MfH7vKh5lfBz+NjsLd5pwhHYj1xeUBoH2if/EgPLd9h4LvqK4XM
nPvpW9GDpGt+DQy8OP7EMK70FFsSDHX+MFxmHXFRq6cemmvcLf3KHxvyWE3T2Mhy
2AdC39D2ff+pkRdjpuJue1d3QGBaqhCoA0JBwv8I382Q68ljRkcnZrfIprMs3DnP
MM2Pq5qnXFFRKnUi6E8y31GFKjPLf4HiUvdnsnktWeeZqYKINmLnZzHy3aCVgKXl
KilJOhP1O+jcbw5XquGIEDd1qjAhSb8qywJrRPcBVvTSZMY0L2//8Qy69YVdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmQaRK61aQawjkQJsKfpfHVD044UwHwYDVR0j
BBgwFoAUKgffTWHCqAueCmvk9deoCTDHNcswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2V2VNVjIyWVhj
aTQvMS8yQTA3REY0RDYxQzJBODBCOUUwQTZCRTRGNUQ3QTgwOTMwQzczNUNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDdERjRENjFDMkE4MEI5
RTBBNkJFNEY1RDdBODA5MzBDNzM1Q0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRqa1BjUm14SE1vb205NmdtYU5XWVFKdjFMaDJQUWhZdldlTVYyMllYY2k0LzEv
MzQzNTJlMzEzNzM1MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa8MMA0GCSqGSIb3DQEBCwUAA4IBAQBCf6TawZAs
J5R4vKbUf224d35NkGvuSWfy5+pZMfFaxz66T+ImK+NEqF2Y04X/O136XA++9QD9
4iPOQps37H2CgRqW9XAyiFkWPLbpl9N+EmtwaRatmkay+TDnAMX77T90bJwp2duH
WdS+nJyMcJkpjCQU/Cq0OBUjPuhI1BczSmltPKtg4pzc3iM/bvvaKGK9ChiRZFyU
kslGdci9nkMxFig4pGVkuuacwUggDGK4ziy9wMEyShmH0lhcvwzY30nz2Ciio9eE
BgbxBhjuMsaoNL/TwEPWE6YbyjP7dvRmVN6jIRNTFs0955AmyC5RKAX9wza0AQiX
hyLvdmZ4gRmf
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:57:19 2026 by rpki-client