Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e342e302f32332d3233203d3e20323638393134.roa
File:                     34352e3137342e342e302f32332d3233203d3e20323638393134.roa (raw, json)
Hash identifier:          +1iSDkVOH6DngSZEHAJRbUJsaag8iCjJ7/d1ub96qCk=
Subject key identifier:   FE:EF:06:FF:C5:DD:F3:72:FF:5E:20:B1:26:9F:AF:00:91:DE:93:A8
Certificate issuer:       /CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
Certificate serial:       2CD84A377CF13CD015848A456F9E2DB8C2036E63
Authority key identifier: 66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e342e302f32332d3233203d3e20323638393134.roa
Signing time:             Mon 12 Jan 2026 17:57:34 +0000
ROA not before:           Mon 12 Jan 2026 17:52:34 +0000
ROA not after:            Mon 11 Jan 2027 17:57:34 +0000
asID:                     268914
IP address blocks:        45.174.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 05:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:4a:37:7c:f1:3c:d0:15:84:8a:45:6f:9e:2d:b8:c2:03:6e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
        Validity
            Not Before: Jan 12 17:52:34 2026 GMT
            Not After : Jan 11 17:57:34 2027 GMT
        Subject: CN=FEEF06FFC5DDF372FF5E20B1269FAF0091DE93A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:2d:93:f5:23:80:00:62:13:d2:4e:b3:19:
                    39:27:7a:7b:58:29:cf:75:14:db:09:6e:55:53:af:
                    8b:74:8b:56:a8:a0:d0:ce:a6:b5:c2:16:97:f8:71:
                    56:b1:5e:fa:45:2e:58:42:d4:30:4b:ac:67:2d:53:
                    06:41:9f:68:76:77:6a:83:3c:0f:e6:ea:46:6e:a6:
                    33:52:61:56:34:23:3a:99:c3:97:bd:fe:e5:de:a1:
                    28:6e:82:0c:e5:b5:6c:4f:78:66:c0:5c:f6:ce:70:
                    7a:70:95:07:14:03:27:a3:55:0b:a4:0e:f4:e1:dc:
                    58:d1:e2:1d:67:82:be:b5:c4:cb:d9:79:a7:9e:cc:
                    1b:90:42:13:99:3c:20:03:39:13:b3:60:aa:a6:4f:
                    8d:d9:7f:6a:23:3b:57:58:6f:ac:0f:42:dd:b1:db:
                    2d:78:10:75:cc:9c:ac:f3:f5:bf:c9:38:23:c6:da:
                    55:72:93:da:31:cd:ce:de:ae:ac:3e:2c:f9:f3:40:
                    7f:5f:38:ef:a7:ae:1c:29:61:0d:d1:7a:97:a6:23:
                    a4:ae:0b:eb:57:9d:e1:0b:f0:9b:99:ed:4e:21:23:
                    7e:a5:03:b9:b9:8b:bc:c2:cd:45:be:0d:59:ca:54:
                    a6:74:03:90:34:5d:33:9c:d4:d9:f8:50:3e:39:b1:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EF:06:FF:C5:DD:F3:72:FF:5E:20:B1:26:9F:AF:00:91:DE:93:A8
            X509v3 Authority Key Identifier:
                keyid:66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e342e302f32332d3233203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:b5:26:74:fa:e5:34:ac:12:a2:be:47:31:ae:dc:dc:9e:
         a7:ba:5b:f1:11:5e:16:b3:e4:53:4b:29:43:2c:cd:79:c6:c1:
         2d:9b:5f:f0:08:29:49:0a:a6:7c:3a:6e:5c:26:e0:29:06:70:
         f1:d6:15:ca:c9:53:fc:c1:3f:92:37:7a:e6:88:64:2e:3e:b4:
         ca:94:de:68:d6:17:b0:b5:8b:0d:fa:5d:c1:c6:e3:a6:4c:dc:
         c2:9d:4e:8a:e8:f1:d7:10:ec:16:4c:ab:b5:17:7a:80:37:f7:
         df:b2:91:01:d2:90:6b:ab:01:f0:96:48:05:48:05:b3:0d:74:
         70:67:cd:b2:d5:ac:af:e1:a0:b5:14:61:b1:dd:d4:0c:39:08:
         dd:a5:82:e7:48:0f:9e:b9:7c:cb:07:8c:10:dd:99:23:21:13:
         ea:26:d8:95:b1:cf:9e:56:62:5e:27:17:be:ef:b3:a8:40:40:
         be:ea:e8:a4:81:ba:cd:31:15:0d:34:68:ab:66:da:0b:56:4d:
         80:bc:be:0e:0d:0e:ba:ae:28:da:3a:d3:20:fd:be:31:1f:15:
         b7:1d:63:c2:7d:1b:0a:48:db:b3:09:56:76:89:ff:71:89:68:
         07:ae:be:fd:09:9c:6e:df:90:02:33:79:e0:53:62:51:4d:72:
         7f:a4:0b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:43:03 2026 by rpki-client