Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/34352e3137352e3230342e302f32322d3234203d3e20323635343531.roa
File:                     34352e3137352e3230342e302f32322d3234203d3e20323635343531.roa (raw, json)
Hash identifier:          L75xmSd0UK9Vb1+efc5ayPHbGSSXEpP8MiJDWhMhhh8=
Subject key identifier:   98:A7:D7:A5:36:BB:E3:55:31:AD:88:65:9B:38:D5:29:13:5F:65:21
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       0114381A4FDE9FB2FEAF9DD2F67DABA3C99BA3CB
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/34352e3137352e3230342e302f32322d3234203d3e20323635343531.roa
Signing time:             Mon 09 Feb 2026 19:04:05 +0000
ROA not before:           Mon 09 Feb 2026 18:59:05 +0000
ROA not after:            Mon 08 Feb 2027 19:04:05 +0000
asID:                     265451
IP address blocks:        45.175.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:14:38:1a:4f:de:9f:b2:fe:af:9d:d2:f6:7d:ab:a3:c9:9b:a3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Feb  9 18:59:05 2026 GMT
            Not After : Feb  8 19:04:05 2027 GMT
        Subject: CN=98A7D7A536BBE35531AD88659B38D529135F6521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:c5:4b:85:f1:ab:07:44:25:58:90:45:0d:
                    c3:54:f0:b5:38:d8:1e:ad:86:de:43:89:f9:45:e6:
                    88:d1:18:da:72:98:9b:1b:47:64:75:39:6b:e9:a4:
                    9e:61:86:f0:3e:c3:e8:2b:53:58:0f:c6:d3:56:33:
                    02:bf:73:b0:53:1a:67:4e:6a:2e:5e:ec:41:aa:63:
                    20:f3:80:95:d2:01:d9:93:24:cd:f5:1b:4d:0e:14:
                    f9:70:c7:3f:8d:02:e2:93:58:75:68:fc:bc:41:5a:
                    c6:9d:77:10:de:31:39:1f:32:49:94:4a:70:45:2d:
                    5b:6b:0b:93:6c:58:84:87:f5:93:c7:5d:bc:44:bb:
                    61:37:b4:c4:bf:9b:dd:cd:cc:59:79:9d:f5:46:aa:
                    ee:60:a9:6f:f9:44:58:7d:b8:b3:aa:5a:97:f2:9b:
                    42:0a:3e:55:6c:95:49:4a:10:7d:bc:42:d1:dd:99:
                    f5:83:87:a7:4d:dd:db:bf:03:f2:4a:43:71:86:f9:
                    63:14:b4:71:37:27:18:09:c8:3a:ad:8d:9d:f7:03:
                    29:54:e2:c9:62:52:62:a5:f3:26:3d:ad:52:23:ad:
                    62:89:d5:06:91:61:9b:f8:20:0e:39:4a:19:91:5b:
                    07:fa:19:ba:0a:49:2d:19:51:93:b3:b1:09:7d:16:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:D7:A5:36:BB:E3:55:31:AD:88:65:9B:38:D5:29:13:5F:65:21
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/34352e3137352e3230342e302f32322d3234203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:62:81:10:74:d1:c9:cb:21:fe:24:8a:56:6b:97:23:6f:
         87:b5:d1:90:21:eb:4c:29:e8:f7:8f:d2:b4:7a:57:6f:93:00:
         30:26:25:de:25:07:2d:cc:e9:57:31:95:0e:7c:10:79:35:45:
         57:a1:45:b4:40:17:50:ba:3c:ef:39:0b:e8:93:c3:78:6e:3d:
         99:be:07:91:0c:e5:a6:4d:5b:8e:bb:20:88:6c:94:bf:7b:ae:
         e9:f9:c3:b1:41:16:2b:5b:b1:47:df:90:d3:81:82:6e:45:2e:
         9c:32:52:05:52:c7:28:d0:65:99:32:f8:94:86:18:0d:ff:01:
         6c:f3:f0:82:62:da:44:e6:9c:ea:fb:84:c2:9d:c8:29:dc:3d:
         d0:35:07:77:f8:c2:d7:ae:f5:24:7c:84:24:9b:8f:39:92:c3:
         13:b1:3b:22:27:89:e6:66:0d:5d:4d:a9:bb:b1:3f:21:b5:22:
         b9:3d:57:09:ec:ab:f8:67:f6:f0:f5:41:8d:b9:be:a2:ef:75:
         9b:5d:1a:aa:70:4a:68:f0:fb:f6:bf:99:28:73:4b:7a:1c:83:
         1e:34:f7:69:7f:5e:f0:81:ec:ce:d9:45:06:9f:20:50:f6:5e:
         dc:9b:18:dc:77:c3:74:2d:d8:67:c0:4d:2e:a1:86:c8:9a:6a:
         3c:ae:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:25 2026 by rpki-client