Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa
File:                     34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier:          HpYlCglrT80dTYeBc8/VGNASDk175+sUh1F6xvFqLQY=
Subject key identifier:   8A:A1:08:E3:62:29:52:FA:56:BF:B4:5B:EC:83:83:53:F2:36:04:EF
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       50E3CD1656AE963D3602A3A7D35D674489237A1F
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     268101
IP address blocks:        45.168.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:cd:16:56:ae:96:3d:36:02:a3:a7:d3:5d:67:44:89:23:7a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=8AA108E3622952FA56BFB45BEC838353F23604EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:80:8c:17:20:1f:5c:c3:d2:f7:2e:8d:02:0a:
                    91:fe:32:e1:9a:5b:80:3d:e3:5f:5a:ea:fb:4e:9b:
                    a0:e3:b8:56:cb:c7:ed:45:21:af:97:3c:fd:11:a5:
                    21:61:f1:a2:21:3c:3b:54:2e:4f:d8:96:ef:1d:68:
                    18:7c:fd:1e:43:42:a7:94:7e:42:4c:ba:71:37:14:
                    2c:0c:e8:30:88:bc:65:2c:0e:6a:5f:1d:f7:d6:f3:
                    3a:e3:1f:f6:66:27:eb:c4:0f:2c:d7:27:c2:1d:1a:
                    39:5b:a2:2f:be:75:46:4b:94:62:84:8e:69:37:27:
                    cc:eb:c1:2f:7b:24:a9:f5:f0:a2:78:fe:3e:06:55:
                    e5:31:df:3d:7a:bf:c4:2a:16:77:37:07:68:12:b2:
                    0f:5c:03:b8:67:e6:4b:b7:03:4e:1b:cc:00:f5:4f:
                    1a:74:f9:b2:7d:8d:68:d8:a9:c8:2e:26:88:da:95:
                    c2:53:65:bb:6b:9d:fa:95:81:7c:bd:59:50:8a:a1:
                    bb:24:f0:45:89:64:cc:28:4d:31:9c:b1:3a:ed:ac:
                    18:00:5f:e6:38:95:d5:b6:20:75:e1:70:e6:4a:fc:
                    f2:8e:7b:57:da:ce:2d:dc:4d:26:9d:e8:5c:e2:d8:
                    02:a0:e6:a4:09:7a:6f:0f:4a:64:91:e4:cb:ba:5e:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:08:E3:62:29:52:FA:56:BF:B4:5B:EC:83:83:53:F2:36:04:EF
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:13:ac:f0:a2:39:8b:3d:46:cb:cd:96:94:fc:5c:58:72:
         2e:02:47:d7:78:26:0d:0a:cb:11:7a:51:f4:2f:b9:5d:be:92:
         f0:3c:4f:28:e9:8c:3e:47:e5:71:2b:01:29:86:df:1c:46:39:
         e1:ce:9a:f2:5d:a7:36:e3:20:a8:7c:df:8c:db:1a:1d:1d:2c:
         16:39:01:74:4e:ad:e9:9b:be:25:b8:8d:c4:a2:b1:35:89:8d:
         02:22:41:af:ac:3d:c7:e8:b7:9a:57:f5:e4:a6:c3:10:4e:67:
         3e:90:19:0d:f9:3c:d2:3c:81:2a:8a:e9:64:ce:35:82:72:87:
         93:d2:a3:9c:a4:8c:a4:f3:5d:a7:14:79:eb:68:88:a5:90:32:
         e5:d2:b3:67:56:02:69:b6:65:fe:76:9c:66:7b:79:ee:37:bc:
         52:9e:5e:54:f3:6c:8a:42:58:ac:6d:7b:fe:db:bc:4f:24:c8:
         65:8b:db:94:67:3f:c7:24:17:bd:42:cd:63:ee:1d:e5:d8:f9:
         52:03:3e:6a:b4:69:31:d5:9f:0a:5b:a0:eb:c2:af:10:19:16:
         94:bb:78:21:80:bb:c9:78:1b:fa:09:43:a6:e8:c5:7d:65:2f:
         66:a2:d3:6f:65:a7:47:5e:eb:09:44:98:60:3c:2e:58:56:49:
         ae:9b:a2:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUOPNFlaulj02AqOn011nRIkjeh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0
RDc5ODgyQTAeFw0yNjAyMDQxOTU1MDRaFw0yNzAyMDMyMDAwMDRaMDMxMTAvBgNV
BAMTKDhBQTEwOEUzNjIyOTUyRkE1NkJGQjQ1QkVDODM4MzUzRjIzNjA0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgIwXIB9cw9L3Lo0CCpH+MuGa
W4A9419a6vtOm6DjuFbLx+1FIa+XPP0RpSFh8aIhPDtULk/Ylu8daBh8/R5DQqeU
fkJMunE3FCwM6DCIvGUsDmpfHffW8zrjH/ZmJ+vEDyzXJ8IdGjlboi++dUZLlGKE
jmk3J8zrwS97JKn18KJ4/j4GVeUx3z16v8QqFnc3B2gSsg9cA7hn5ku3A04bzAD1
Txp0+bJ9jWjYqcguJojalcJTZbtrnfqVgXy9WVCKobsk8EWJZMwoTTGcsTrtrBgA
X+Y4ldW2IHXhcOZK/PKOe1fazi3cTSad6Fzi2AKg5qQJem8PSmSR5Mu6Xm2dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiqEI42IpUvpWv7Rb7IODU/I2BO8wHwYDVR0j
BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL
TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC
RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzEv
MzQzNTJlMzEzNjM4MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqJwwDQYJKoZIhvcNAQELBQADggEBAJX0E6zw
ojmLPUbLzZaU/FxYci4CR9d4Jg0KyxF6UfQvuV2+kvA8TyjpjD5H5XErASmG3xxG
OeHOmvJdpzbjIKh834zbGh0dLBY5AXROrembviW4jcSisTWJjQIiQa+sPcfot5pX
9eSmwxBOZz6QGQ35PNI8gSqK6WTONYJyh5PSo5ykjKTzXacUeetoiKWQMuXSs2dW
Amm2Zf52nGZ7ee43vFKeXlTzbIpCWKxte/7bvE8kyGWL25RnP8ckF71CzWPuHeXY
+VIDPmq0aTHVnwpboOvCrxAZFpS7eCGAu8l4G/oJQ6boxX1lL2ai029lp0de6wlE
mGA8LlhWSa6bol8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:11 2026 by rpki-client