Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
File:                     34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          8Cv8I79/EEbB7ReP+WS2lDvVTQIBg0kjQ3tCxiYC8Rg=
Subject key identifier:   F1:99:29:7D:88:25:7D:72:38:96:D0:D5:41:44:43:07:D8:6F:48:0A
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       47D6F39BA679E384FE5A21DCD704590A60F8C2C4
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 05 Feb 2026 10:46:18 +0000
ROA not before:           Thu 05 Feb 2026 10:41:18 +0000
ROA not after:            Thu 04 Feb 2027 10:46:18 +0000
asID:                     268097
IP address blocks:        45.169.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d6:f3:9b:a6:79:e3:84:fe:5a:21:dc:d7:04:59:0a:60:f8:c2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Feb  5 10:41:18 2026 GMT
            Not After : Feb  4 10:46:18 2027 GMT
        Subject: CN=F199297D88257D723896D0D541444307D86F480A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:b6:f3:c1:56:df:94:d0:f8:30:2f:d0:23:
                    55:0c:a1:29:c2:47:45:03:f1:35:b5:7c:13:1e:19:
                    08:d9:fd:fa:dc:e8:39:60:fb:1a:2d:18:be:8e:af:
                    26:78:12:a0:39:33:7e:b6:ff:c3:88:1e:71:d5:e5:
                    c8:98:d0:84:4d:09:a4:fc:cb:73:78:1c:65:0d:25:
                    bc:3c:b5:0f:c1:57:67:fb:80:47:96:b3:8d:cc:ea:
                    f0:ea:3d:d7:e2:03:7c:b6:ee:87:5b:fd:73:e0:bc:
                    0b:43:8f:59:3e:a6:d6:1d:a3:99:31:d5:58:75:0e:
                    bb:2a:20:58:d9:31:fc:3f:f5:bf:df:eb:84:af:5e:
                    ad:aa:9e:d6:01:f7:8a:5e:20:17:eb:54:c0:fb:34:
                    4b:ba:2c:b6:af:f4:b3:9e:77:d5:20:45:ca:23:0c:
                    28:38:f2:b8:7f:aa:1a:56:ab:d2:82:16:66:26:f2:
                    4d:06:0d:c9:d7:14:98:af:08:1e:45:ef:30:98:bf:
                    91:cd:99:44:fe:3e:86:ac:23:bf:4e:e2:6a:ff:5c:
                    7e:75:ba:6c:f8:b8:cb:92:83:e0:e2:72:2b:45:1c:
                    8c:7e:2a:16:f1:4c:82:15:96:d4:b5:a3:18:ed:f6:
                    79:5f:a2:9c:bb:05:4c:90:e1:4a:ca:ae:1d:6c:3b:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:99:29:7D:88:25:7D:72:38:96:D0:D5:41:44:43:07:D8:6F:48:0A
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:06:b8:15:8c:a7:cd:4b:ac:73:83:51:c6:b2:99:72:43:
         d2:a9:5f:77:10:fc:c7:75:ec:9f:0f:db:bb:fe:95:2a:6e:4a:
         d4:b4:0e:b0:5f:9c:14:f0:76:c9:d4:03:6e:d3:57:53:31:21:
         36:fc:f9:35:8e:c1:7f:bc:aa:6c:42:1b:d9:3e:75:3a:6a:7b:
         8a:7a:42:2f:60:f3:2a:9e:e6:d7:05:7d:8a:3c:25:6c:1f:9f:
         8a:84:c9:a4:c6:4f:0f:cc:da:a9:2e:57:75:2d:f9:ed:c3:97:
         c3:18:a5:fb:5f:37:e5:60:2f:a2:33:62:7d:68:66:64:c8:dd:
         8c:ee:cc:54:ee:30:1f:dd:f1:8f:ef:fe:37:aa:a5:9b:78:62:
         34:8f:f2:9e:d4:fd:58:e7:be:04:1b:09:ed:bb:54:60:1d:e9:
         e9:2c:24:d3:95:4f:2d:0e:79:0a:a7:4a:63:51:5a:6f:9e:20:
         d5:f3:80:36:0a:7f:f4:2c:4b:44:4c:4b:e1:35:dd:7f:96:09:
         e7:08:3e:56:a8:1e:0c:1b:8a:63:3f:33:cc:ea:32:ef:bb:fc:
         89:30:44:9d:fc:9f:00:27:ae:47:5e:3f:80:cf:3e:77:d9:8b:
         03:40:2d:c0:71:f8:49:bb:9c:0e:59:08:09:bf:25:55:e5:5d:
         5c:0a:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:25 2026 by rpki-client