Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
File:                     34352e362e3133362e302f32322d3234203d3e20323636313336.roa (raw, json)
Hash identifier:          EeP0fiX2MlA3acvRpZ4JX3PFuRgv9tdEN3Bg8P+Dysk=
Subject key identifier:   C1:38:88:D3:71:84:56:A0:CA:89:F7:4D:65:98:41:D5:CE:75:A7:E2
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       79EBF9C47E8E418BAFBAE83CB02960B152393688
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     266136
IP address blocks:        45.6.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:f9:c4:7e:8e:41:8b:af:ba:e8:3c:b0:29:60:b1:52:39:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:2f:12:c3:c0:06:cd:55:64:f8:94:74:06:
                    1f:11:70:92:67:dd:87:ab:c7:0a:de:93:05:fc:41:
                    b4:60:f1:e6:3a:22:54:83:a8:15:a8:2a:2d:77:9d:
                    96:ca:d9:9c:89:02:c3:97:9a:05:31:ee:0e:f5:9f:
                    17:c6:70:f4:25:09:8c:51:ec:c0:62:cb:a9:33:3c:
                    2a:d3:e7:41:65:d7:ff:73:a0:7c:ec:96:05:d8:f7:
                    7b:07:6e:20:f7:ef:10:b9:f8:88:43:44:fc:8d:18:
                    6d:f9:8d:48:99:37:2c:3b:9e:2e:c8:14:43:2b:41:
                    f0:40:72:a0:c5:35:26:58:ac:0e:6b:b3:20:65:09:
                    64:4b:af:c5:fc:8b:2c:dd:cc:e5:00:33:87:a4:a5:
                    05:a5:24:24:45:ab:95:9f:a1:fa:1b:ec:5a:f4:49:
                    95:c7:93:84:56:9f:f4:79:86:b8:43:7e:c8:94:13:
                    c0:81:47:f4:32:53:5f:b8:56:b9:d9:05:a4:c2:db:
                    2a:3a:b8:f3:dc:cd:ac:1f:3a:74:6c:e9:af:4a:77:
                    f0:84:73:b3:fe:34:75:9c:2d:ad:8d:1f:0e:d1:67:
                    12:78:d5:aa:2d:9d:77:25:b2:72:12:f1:5a:81:c9:
                    2a:2b:b3:8c:3f:fc:fe:8a:d4:89:e2:da:88:55:0d:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:88:D3:71:84:56:A0:CA:89:F7:4D:65:98:41:D5:CE:75:A7:E2
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:2c:dd:33:c2:45:5a:65:4a:fd:3c:6d:51:52:7a:ea:44:
         18:df:1d:3f:8d:d9:6e:ea:24:ec:2e:9a:ee:7a:62:a0:57:06:
         59:72:de:c3:e8:26:90:0c:99:78:79:69:9d:22:32:87:5a:5a:
         97:d0:50:70:d3:72:b5:9e:44:a6:95:23:97:8b:46:a9:a9:9e:
         18:d3:9d:1a:51:29:07:52:29:b7:84:5e:0d:7f:ea:50:e3:32:
         cd:83:58:77:91:27:ac:7e:99:16:97:c4:f4:c3:a4:50:f4:a2:
         2c:a7:f0:49:a3:4a:9b:34:a6:0e:3c:7f:5f:6c:71:77:11:2d:
         62:b2:91:0d:ff:26:ab:05:e4:26:db:a4:2b:c7:e6:d8:91:20:
         cc:24:cd:f9:d6:d8:5f:07:1a:66:31:9e:43:d7:c6:12:6a:0d:
         db:16:24:ee:7e:b2:8e:33:4d:83:33:0c:48:ef:41:39:2b:7c:
         5b:45:ad:58:f0:51:5a:8a:6e:21:8c:55:f3:25:0b:b3:c2:52:
         fc:df:04:d6:95:ef:9d:b7:18:26:5c:3e:7f:10:77:cc:1c:0c:
         08:7e:19:c0:a2:59:83:07:68:f9:4e:f8:e0:be:06:d3:f0:b0:
         60:cb:39:17:8a:31:82:bc:6e:9b:7d:d5:66:23:8c:7e:dd:db:
         7e:9d:6f:d4
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUeev5xH6OQYuvuug8sClgsVI5NogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBN0M3QzJCMzEwRDY3REU2ODhGMTlCMTU5NDMzNTk3
NTI1RkUzMTAeFw0yNjAyMDYxOTU1MDBaFw0yNzAyMDYyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA5MjJGMTJDM0MwMDZDRDU1
NjRGODk0NzQwNjFGMTE3MDkyNjdERDg3QUJDNzBBREU5MzA1RkM0MUI0NjBGMUU2
M0EyMjU0ODNBODE1QTgyQTJENzc5RDk2Q0FEOTlDODkwMkMzOTc5QTA1MzFFRTBF
RjU5RjE3QzY3MEY0MjUwOThDNTFFQ0MwNjJDQkE5MzMzQzJBRDNFNzQxNjVEN0ZG
NzNBMDdDRUM5NjA1RDhGNzdCMDc2RTIwRjdFRjEwQjlGODg4NDM0NEZDOEQxODZE
Rjk4RDQ4OTkzNzJDM0I5RTJFQzgxNDQzMkI0MUYwNDA3MkEwQzUzNTI2NThBQzBF
NkJCMzIwNjUwOTY0NEJBRkM1RkM4QjJDRERDQ0U1MDAzMzg3QTRBNTA1QTUyNDI0
NDVBQjk1OUZBMUZBMUJFQzVBRjQ0OTk1Qzc5Mzg0NTY5RkY0Nzk4NkI4NDM3RUM4
OTQxM0MwODE0N0Y0MzI1MzVGQjg1NkI5RDkwNUE0QzJEQjJBM0FCOEYzRENDREFD
MUYzQTc0NkNFOUFGNEE3N0YwODQ3M0IzRkUzNDc1OUMyREFEOEQxRjBFRDE2NzEy
NzhENUFBMkQ5RDc3MjVCMjcyMTJGMTVBODFDOTJBMkJCMzhDM0ZGQ0ZFOEFENDg5
RTJEQTg4NTUwRDk5NEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwJIvEsPABs1VZPiUdAYfEXCSZ92Hq8cK3pMF/EG0YPHmOiJUg6gV
qCotd52WytmciQLDl5oFMe4O9Z8XxnD0JQmMUezAYsupMzwq0+dBZdf/c6B87JYF
2Pd7B24g9+8QufiIQ0T8jRht+Y1ImTcsO54uyBRDK0HwQHKgxTUmWKwOa7MgZQlk
S6/F/Iss3czlADOHpKUFpSQkRauVn6H6G+xa9EmVx5OEVp/0eYa4Q37IlBPAgUf0
MlNfuFa52QWkwtsqOrjz3M2sHzp0bOmvSnfwhHOz/jR1nC2tjR8O0WcSeNWqLZ13
JbJyEvFagckqK7OMP/z+itSJ4tqIVQ2ZSwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FME4iNNxhFagyon3TWWYQdXOdafiMB8GA1UdIwQYMBaAFEOnx8KzENZ95ojxmxWU
M1l1Jf4xMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2VnRHSG9aQnlaTHRT
WG01eVRQRkQ5Q0VOeFB2UXlndVlrYkpLOVQzYmltLzEvNDNBN0M3QzJCMzEwRDY3
REU2ODhGMTlCMTU5NDMzNTk3NTI1RkUzMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80M0E3QzdDMkIzMTBENjdERTY4OEYxOUIxNTk0MzM1OTc1MjVG
RTMxLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81NlZ0R0hvWkJ5Wkx0U1htNXlU
UEZEOUNFTnhQdlF5Z3VZa2JKSzlUM2JpbS8xLzM0MzUyZTM2MmUzMTMzMzYyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMzMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBogw
DQYJKoZIhvcNAQELBQADggEBAFtYLN0zwkVaZUr9PG1RUnrqRBjfHT+N2W7qJOwu
mu56YqBXBlly3sPoJpAMmXh5aZ0iModaWpfQUHDTcrWeRKaVI5eLRqmpnhjTnRpR
KQdSKbeEXg1/6lDjMs2DWHeRJ6x+mRaXxPTDpFD0oiyn8EmjSps0pg48f19scXcR
LWKykQ3/JqsF5CbbpCvH5tiRIMwkzfnW2F8HGmYxnkPXxhJqDdsWJO5+so4zTYMz
DEjvQTkrfFtFrVjwUVqKbiGMVfMlC7PCUvzfBNaV7523GCZcPn8Qd8wcDAh+GcCi
WYMHaPlO+OC+BtPwsGDLOReKMYK8bpt91WYjjH7d236db9Q=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:45 2026 by rpki-client