Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
File:                     34352e3233352e36352e302f32342d3234203d3e20323637343132.roa (raw, json)
Hash identifier:          1Su2EBPvhwgzAzaGt1KpsEOk3WhvxDuE+t3h4LGQcZs=
Subject key identifier:   F1:9B:80:40:BF:66:A3:0A:F9:B0:D6:52:12:86:B7:3F:E1:7E:65:2F
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       515B1A3A1F4AF3EA95FB6FD28350CD3A70CFCB9B
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 18:46:46 +0000
ROA not before:           Mon 05 Jan 2026 18:41:46 +0000
ROA not after:            Mon 04 Jan 2027 18:46:46 +0000
asID:                     267412
IP address blocks:        45.235.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5b:1a:3a:1f:4a:f3:ea:95:fb:6f:d2:83:50:cd:3a:70:cf:cb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 18:41:46 2026 GMT
            Not After : Jan  4 18:46:46 2027 GMT
        Subject: CN=F19B8040BF66A30AF9B0D6521286B73FE17E652F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:1d:95:ae:7d:98:f1:15:6e:d1:15:72:39:
                    8e:a3:03:2e:82:9e:67:52:46:13:cc:89:ae:f8:0c:
                    11:b2:0b:ef:c2:40:29:8d:fe:cf:01:99:e1:9e:5f:
                    18:69:d3:14:f2:b9:34:8e:38:4b:e6:a7:c1:96:27:
                    07:25:37:7b:43:71:28:5b:fc:d7:57:6a:4a:fa:0f:
                    9f:f4:95:d6:33:65:22:64:87:a6:75:ca:2e:6e:ad:
                    3c:32:c2:16:e6:11:f1:1a:73:cf:fe:84:5f:d2:01:
                    a5:9e:48:cd:aa:63:90:b7:5b:89:2c:f5:19:5c:43:
                    d6:ac:52:02:a0:ff:21:f4:99:23:5c:ad:f0:c6:de:
                    a2:18:28:a7:f6:28:99:ba:78:03:26:ad:54:af:a6:
                    bd:89:ff:5c:10:c1:18:45:d1:a7:ae:3a:15:2a:52:
                    eb:ad:b0:33:c5:6e:c3:36:92:84:22:ca:42:5d:81:
                    a8:a9:dd:19:ab:c4:8a:d2:e8:2f:b9:9f:68:41:92:
                    43:76:50:91:6f:e9:01:95:5b:6f:a6:fc:25:d2:77:
                    67:e2:2f:d4:d6:93:a4:b6:a9:77:6e:b1:b0:3c:a4:
                    2d:ad:7a:8a:5b:8e:37:70:49:75:86:a1:86:1e:e1:
                    2d:d6:f6:8b:0c:db:01:23:fd:06:7c:6a:a4:08:64:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9B:80:40:BF:66:A3:0A:F9:B0:D6:52:12:86:B7:3F:E1:7E:65:2F
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:bf:08:b5:99:dc:f3:6b:60:bf:6a:3a:62:ba:f1:d2:46:
         8b:45:48:b9:42:d9:f4:9c:a6:13:66:d4:9c:cd:0c:0d:73:6d:
         4f:f8:3f:30:90:7e:f0:bd:ab:08:80:99:24:3c:17:a2:7d:ac:
         f7:e5:1f:ca:57:02:00:77:df:a3:54:65:63:42:eb:ba:4b:49:
         67:89:fe:32:8c:91:b5:ac:22:ea:ab:98:21:8d:cb:68:fc:14:
         e0:5a:95:40:08:63:dd:3b:ec:31:38:e3:b2:5e:96:87:67:fb:
         d5:a7:34:90:48:d8:74:69:3a:b8:5b:77:e7:c2:a1:6a:37:fb:
         85:48:5b:e8:96:57:9e:67:88:b6:88:33:be:cc:30:20:55:a9:
         38:c5:20:d3:06:9a:32:59:2e:a9:f9:57:57:36:38:5e:4b:ed:
         92:5d:b7:66:ba:05:5f:45:1c:54:9f:aa:c4:90:3f:34:a8:80:
         c1:fd:ae:30:77:e0:6a:7c:15:ee:9e:cd:45:f4:97:cf:56:20:
         eb:3d:d5:53:c6:f9:10:ad:98:74:be:7c:04:c7:0b:31:e3:dc:
         cf:33:e1:7a:ba:ec:a7:54:84:fd:26:e1:1b:fd:b0:bb:31:69:
         d1:94:89:0e:1f:8b:98:01:05:4e:13:67:48:3a:23:c6:bd:22:
         b3:76:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:14 2026 by rpki-client