Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
File:                     34352e3136362e342e302f32322d3332203d3e20323637393432.roa (raw, json)
Hash identifier:          zsVnUNLW+pBJ8fgeOpogF4hVpAxQWLUnSNAogNq2ACk=
Subject key identifier:   C5:D9:FA:AC:B0:C7:8C:89:B8:80:74:71:C8:25:C2:C9:FA:3C:CD:8B
Certificate issuer:       /CN=62F1B6F70A5D10990194BA03031EAA8F782AF0E3
Certificate serial:       476CF79884CDD538ABB914BF7F93EAB1A97EC469
Authority key identifier: 62:F1:B6:F7:0A:5D:10:99:01:94:BA:03:03:1E:AA:8F:78:2A:F0:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
Signing time:             Mon 09 Feb 2026 21:03:11 +0000
ROA not before:           Mon 09 Feb 2026 20:58:11 +0000
ROA not after:            Mon 08 Feb 2027 21:03:11 +0000
asID:                     267942
IP address blocks:        45.166.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.crl
                          rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6c:f7:98:84:cd:d5:38:ab:b9:14:bf:7f:93:ea:b1:a9:7e:c4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F1B6F70A5D10990194BA03031EAA8F782AF0E3
        Validity
            Not Before: Feb  9 20:58:11 2026 GMT
            Not After : Feb  8 21:03:11 2027 GMT
        Subject: CN=C5D9FAACB0C78C89B8807471C825C2C9FA3CCD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:24:5c:51:dc:56:6e:0c:b2:50:a9:c5:f0:
                    50:77:e6:7c:1d:f8:32:ea:87:cb:06:6e:1f:46:5b:
                    4a:5b:f0:12:f5:23:a8:15:b1:de:f2:5d:69:ba:dc:
                    4c:fe:0c:d6:2d:d1:c1:28:2d:f9:42:bd:9e:d8:f4:
                    af:8b:40:34:85:27:0b:19:89:10:64:03:50:32:bb:
                    ab:d6:89:29:cc:74:c2:c1:11:5e:f4:52:fa:7e:ca:
                    bc:5d:65:9b:5b:27:e5:6f:6e:a2:2f:2b:1e:42:55:
                    73:91:00:3a:a6:57:77:8d:e1:17:4f:4f:dc:d5:54:
                    d2:41:d2:1c:33:26:06:10:bc:42:60:d3:70:f1:c4:
                    3a:b4:29:b4:d9:65:1d:bb:1b:ad:f4:f2:3b:9c:5e:
                    10:cb:8d:08:94:65:47:36:c8:f5:0e:d4:e1:4b:78:
                    f0:91:21:cb:1c:65:4d:13:a9:f4:12:df:29:2d:6a:
                    51:88:04:18:1a:08:e7:cf:a5:1c:1a:f8:8d:98:11:
                    02:3f:7d:e4:58:c2:6c:f2:e1:25:6f:8e:72:02:c0:
                    a6:d1:a1:2c:e1:91:4e:be:27:cc:73:e9:be:3d:2b:
                    55:1b:2e:a1:7a:13:32:a3:2b:db:04:51:64:63:36:
                    a2:3b:1c:1a:a2:58:40:66:d7:82:c3:a7:c6:e8:4e:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:FA:AC:B0:C7:8C:89:B8:80:74:71:C8:25:C2:C9:FA:3C:CD:8B
            X509v3 Authority Key Identifier:
                keyid:62:F1:B6:F7:0A:5D:10:99:01:94:BA:03:03:1E:AA:8F:78:2A:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62F1B6F70A5D10990194BA03031EAA8F782AF0E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:2d:09:75:5f:2d:01:dc:58:8f:f7:5a:40:0f:42:9e:18:
         5e:c2:0e:97:83:70:20:9f:cb:13:47:76:21:a8:03:ae:cf:4b:
         65:4c:bc:5e:71:65:18:5a:bc:a2:63:c7:02:2d:9f:dc:38:19:
         c6:96:38:62:12:e2:3d:9a:fc:19:16:c3:af:3a:98:3f:f0:fd:
         11:0b:51:a2:54:53:53:6b:64:1b:aa:71:df:43:cc:4e:9e:27:
         e3:bd:8c:99:47:20:d1:e7:34:33:a2:5f:b3:91:47:1e:0f:26:
         4c:52:40:c0:74:65:37:73:a7:6d:1c:95:83:f7:f3:5e:3c:5e:
         0d:f8:b8:69:52:7b:47:71:10:84:22:f0:43:ec:a3:26:ea:95:
         91:79:f1:ce:95:69:86:90:9a:4a:ab:0a:a7:d1:53:8c:fc:d1:
         73:d8:06:d7:d3:d2:37:78:25:7e:08:40:b2:98:34:8f:5f:4f:
         c5:d9:f1:dc:21:31:65:5f:d0:d9:5d:48:de:95:4e:b5:4e:fc:
         75:ae:0b:48:e5:7a:fa:7b:d1:f7:11:79:64:77:f6:63:16:aa:
         24:62:f9:04:11:b6:8e:63:52:8f:5c:6a:d8:c9:80:1a:b3:a4:
         bb:fe:77:aa:78:b1:e5:71:d9:2e:2a:26:f5:86:e2:2e:35:57:
         7b:d5:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:53 2026 by rpki-client