Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa
File:                     34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa (raw, json)
Hash identifier:          pPAK6UixOZHKMy0hTrvR9zoaBVz8OyeFKpUJG7eY794=
Subject key identifier:   77:16:34:21:35:8B:BC:4D:DE:26:AD:87:6F:2E:3D:D5:5F:A3:63:77
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       2587EAAFA8F4EFEFCBADEA3D15E4C4A01D3A2216
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa
Signing time:             Thu 05 Feb 2026 08:48:25 +0000
ROA not before:           Thu 05 Feb 2026 08:43:25 +0000
ROA not after:            Thu 04 Feb 2027 08:48:25 +0000
asID:                     267218
IP address blocks:        45.231.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:87:ea:af:a8:f4:ef:ef:cb:ad:ea:3d:15:e4:c4:a0:1d:3a:22:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Feb  5 08:43:25 2026 GMT
            Not After : Feb  4 08:48:25 2027 GMT
        Subject: CN=77163421358BBC4DDE26AD876F2E3DD55FA36377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:45:6d:a1:0f:0b:bb:17:dd:7e:b9:e4:cc:
                    6f:41:ac:a1:50:1a:55:46:31:e2:dd:ad:c3:4c:b6:
                    05:01:92:7c:b5:17:2f:03:82:1d:cb:84:69:c0:32:
                    72:3f:e7:30:d0:4b:69:c1:34:87:30:9c:48:f6:eb:
                    c7:3e:1c:5a:2f:22:ff:db:3f:11:f9:c8:08:82:2b:
                    05:2c:85:bd:47:1a:0e:d9:d1:cc:3d:cc:9f:18:f8:
                    4d:39:12:cb:9e:8e:0e:a1:6e:0b:90:6d:d0:38:23:
                    a2:b3:82:c2:bb:6e:f7:78:5f:68:f6:b0:5f:b2:f7:
                    c5:38:34:d6:ca:8f:b9:67:3f:9d:09:6d:62:5c:86:
                    53:72:84:33:ee:cb:d6:4c:42:af:0f:36:cf:ec:c4:
                    6d:34:92:f6:78:7f:b2:4e:5d:e7:55:a9:60:85:0e:
                    8c:46:1a:6a:82:15:5a:10:cf:57:71:a8:7e:64:2c:
                    42:3c:9f:76:52:02:8d:93:e5:0e:09:7a:0f:7b:fa:
                    cb:0a:3f:88:ab:b3:17:43:3a:f9:5d:ab:6e:93:bc:
                    9c:66:87:d0:99:13:df:c8:7a:a9:67:f3:81:6e:12:
                    67:6f:9e:fe:6a:c9:cf:01:80:eb:b9:3f:9b:96:b3:
                    69:99:75:e8:2f:9e:a0:35:c7:b8:ee:86:6b:ee:b1:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:16:34:21:35:8B:BC:4D:DE:26:AD:87:6F:2E:3D:D5:5F:A3:63:77
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:64:8f:6a:1f:22:61:24:01:d5:c4:d1:8a:79:47:6f:03:88:
         da:61:e5:88:50:35:d0:f6:aa:2b:48:52:ee:ab:31:86:c7:51:
         86:4a:24:cf:e7:36:ec:0e:b3:76:3c:ea:c6:99:91:3a:f0:1d:
         8d:77:de:c0:54:46:29:90:a8:5d:0e:f0:94:5c:0c:9c:8e:b5:
         1b:72:fd:15:06:ba:3a:05:3c:fa:7b:c3:de:ed:d9:5b:98:d3:
         bc:58:a9:c4:38:a9:a0:6d:11:28:c6:a9:7b:76:80:87:50:ec:
         de:94:4a:0d:6b:5d:83:52:9c:0f:f6:28:11:0b:d7:91:b7:cf:
         bf:ea:2e:f2:e3:b0:94:4c:44:08:07:8f:ae:80:28:68:ab:ab:
         7b:99:79:2d:59:c6:f1:a1:f2:95:c3:e1:c0:28:6b:84:5e:c8:
         42:44:e2:3b:4d:3a:38:ae:38:3f:8a:69:7c:3f:e2:2f:72:38:
         03:c7:f0:3b:63:9c:19:f8:7b:5d:6b:67:39:b5:99:42:dc:eb:
         d9:20:14:01:47:5a:c5:64:51:eb:e2:d7:bd:a4:c3:0f:d6:39:
         39:7c:c0:b8:2e:a1:2a:17:a9:80:0d:47:1a:23:24:84:8a:36:
         ed:de:21:90:2d:45:a8:9b:54:c9:a9:06:59:00:0e:22:b9:05:
         9e:4d:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:43 2026 by rpki-client