Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
File:                     34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier:          UXrg4cpmDtkq5l8dzTOszPD+oaD6rm/vT1tOrkki2w4=
Subject key identifier:   FA:C5:E5:D8:AC:16:B9:26:AD:11:83:E2:7D:70:35:80:39:A5:02:B3
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       4ED74801CBCAB4E0C90740104EDC60505C0B878C
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     268101
IP address blocks:        45.168.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:48:01:cb:ca:b4:e0:c9:07:40:10:4e:dc:60:50:5c:0b:87:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=FAC5E5D8AC16B926AD1183E27D70358039A502B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:cd:64:cb:4d:7b:1d:f1:f6:86:75:d7:c6:
                    34:19:52:6e:d3:29:3f:d3:9d:d4:80:79:12:a9:8c:
                    61:4a:4f:98:27:93:f6:76:63:ad:70:57:5e:08:f0:
                    01:dd:8c:6e:25:79:98:ae:c2:42:2d:e9:33:ad:68:
                    66:6c:5f:fc:55:60:1f:40:45:db:bf:a9:2d:cd:d3:
                    17:a5:30:04:fc:82:f0:8f:83:7f:e9:3d:92:52:42:
                    6a:ca:49:23:e8:5d:18:c5:12:04:c4:9c:44:ad:52:
                    9b:fd:3f:95:4f:dd:d7:2a:6b:4f:d1:e2:a6:54:1b:
                    5e:fe:05:7c:c8:b5:37:30:b8:5b:52:c9:ec:11:57:
                    bf:df:c9:17:b0:86:51:d3:e2:1c:86:aa:6a:f7:a6:
                    e4:c3:5b:c7:7e:5f:6c:46:24:32:0e:e2:82:2f:ad:
                    56:4d:db:15:a9:5a:64:f4:9c:15:e8:e7:be:91:e1:
                    94:7a:b2:38:03:67:04:5b:e0:ab:2c:f8:48:78:4c:
                    5e:d5:90:9a:59:b6:a1:20:0c:1a:c7:7c:a7:37:f6:
                    b8:44:57:8c:fa:fd:57:42:42:3a:0a:2e:90:d5:11:
                    3e:dd:94:4f:0c:84:ad:5b:23:46:16:23:9d:4e:d1:
                    df:ad:0b:b8:81:87:a2:4f:82:0d:6e:96:0d:4e:93:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C5:E5:D8:AC:16:B9:26:AD:11:83:E2:7D:70:35:80:39:A5:02:B3
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:25:aa:a7:f5:b7:cb:28:66:03:d1:07:70:d0:a0:e0:39:
         4a:e6:ed:4c:89:84:0b:3a:39:17:3f:80:d3:5d:3d:49:12:8b:
         fd:85:d4:b0:fc:76:c8:5d:32:53:fc:b4:89:37:84:a5:55:4d:
         93:1e:3a:03:b6:7c:21:bc:70:ca:8e:56:45:07:93:d0:4f:1c:
         e2:19:8d:dd:40:0a:54:0c:01:33:8a:17:1c:e9:7a:d7:67:bb:
         00:87:7f:42:5d:05:ae:bf:3f:d7:fb:14:80:0f:69:34:e2:ed:
         12:fb:3a:aa:f6:cb:21:89:8c:df:69:f5:c0:09:09:f5:9b:43:
         99:ff:45:bf:19:79:1a:c8:af:34:61:c9:79:92:69:63:0d:56:
         be:b7:f4:2f:0d:f8:a5:e7:88:d4:f5:2f:c5:b7:5e:9a:d8:99:
         5b:e7:a1:c6:1f:78:1b:62:db:06:3d:1a:14:6f:dd:6b:ab:f0:
         ec:8a:95:05:fe:75:72:75:9d:e9:ed:d6:94:10:d5:f8:d3:03:
         cb:08:29:0f:89:1e:f3:3d:6b:15:4d:ad:79:08:1f:08:26:87:
         ff:4d:34:a6:f3:7c:23:63:f8:dc:9b:95:94:6f:4c:18:8f:24:
         77:34:97:86:d2:0a:bc:b7:9f:ee:7a:0a:f7:46:1d:03:da:eb:
         4e:71:ca:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTtdIAcvKtODJB0AQTtxgUFwLh4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0
RDc5ODgyQTAeFw0yNjAyMDQxOTU1MDRaFw0yNzAyMDMyMDAwMDRaMDMxMTAvBgNV
BAMTKEZBQzVFNUQ4QUMxNkI5MjZBRDExODNFMjdENzAzNTgwMzlBNTAyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi81ky017HfH2hnXXxjQZUm7T
KT/TndSAeRKpjGFKT5gnk/Z2Y61wV14I8AHdjG4leZiuwkIt6TOtaGZsX/xVYB9A
Rdu/qS3N0xelMAT8gvCPg3/pPZJSQmrKSSPoXRjFEgTEnEStUpv9P5VP3dcqa0/R
4qZUG17+BXzItTcwuFtSyewRV7/fyRewhlHT4hyGqmr3puTDW8d+X2xGJDIO4oIv
rVZN2xWpWmT0nBXo576R4ZR6sjgDZwRb4Kss+Eh4TF7VkJpZtqEgDBrHfKc39rhE
V4z6/VdCQjoKLpDVET7dlE8MhK1bI0YWI51O0d+tC7iBh6JPgg1ulg1Ok/wFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+sXl2KwWuSatEYPifXA1gDmlArMwHwYDVR0j
BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL
TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC
RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzEv
MzQzNTJlMzEzNjM4MmUzMTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqJ4wDQYJKoZIhvcNAQELBQADggEBADH2Jaqn
9bfLKGYD0Qdw0KDgOUrm7UyJhAs6ORc/gNNdPUkSi/2F1LD8dshdMlP8tIk3hKVV
TZMeOgO2fCG8cMqOVkUHk9BPHOIZjd1AClQMATOKFxzpetdnuwCHf0JdBa6/P9f7
FIAPaTTi7RL7Oqr2yyGJjN9p9cAJCfWbQ5n/Rb8ZeRrIrzRhyXmSaWMNVr639C8N
+KXniNT1L8W3XprYmVvnocYfeBti2wY9GhRv3Wur8OyKlQX+dXJ1nent1pQQ1fjT
A8sIKQ+JHvM9axVNrXkIHwgmh/9NNKbzfCNj+NyblZRvTBiPJHc0l4bSCry3n+56
CvdGHQPa605xypE=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:02 2026 by rpki-client