Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
File:                     34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa (raw, json)
Hash identifier:          2uzt6GXNyq7bHS0GQj9AEWJtdPV79XOljl20Kw5SILk=
Subject key identifier:   8A:7D:2D:C5:AC:F9:75:81:BC:DF:81:8B:9B:85:67:79:9B:19:DF:E7
Certificate issuer:       /CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
Certificate serial:       7518113C93BDF7617E07FC371A41F199026AB118
Authority key identifier: 5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
Signing time:             Thu 05 Feb 2026 10:06:30 +0000
ROA not before:           Thu 05 Feb 2026 10:01:30 +0000
ROA not after:            Thu 04 Feb 2027 10:06:30 +0000
asID:                     266914
IP address blocks:        45.224.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl
                          rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:11:3c:93:bd:f7:61:7e:07:fc:37:1a:41:f1:99:02:6a:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
        Validity
            Not Before: Feb  5 10:01:30 2026 GMT
            Not After : Feb  4 10:06:30 2027 GMT
        Subject: CN=8A7D2DC5ACF97581BCDF818B9B8567799B19DFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:95:8d:0c:fd:00:d1:d7:d1:68:f3:4a:b6:
                    09:f0:2d:e9:a3:67:67:4f:9d:8a:58:3e:93:7a:87:
                    d0:7f:e4:04:38:bb:64:c9:f7:0b:f6:e9:31:45:eb:
                    32:4c:5e:b1:6c:4c:ee:6a:e5:6e:9b:cb:d9:2b:3e:
                    31:c1:a8:9f:5e:41:77:fe:97:37:8f:34:28:cf:7d:
                    27:ba:57:b1:1b:3c:51:4c:d4:4a:5c:65:43:ad:b2:
                    32:da:76:42:3e:09:51:ca:c3:d3:f1:36:6e:4c:8e:
                    70:1f:f7:8d:3c:b2:5f:07:fa:2a:03:94:21:73:d7:
                    a9:88:50:04:1b:5e:62:76:f2:dc:ec:91:03:9a:30:
                    56:97:1a:d3:70:88:16:fb:71:36:96:7e:81:81:1f:
                    53:55:f8:57:cf:cb:d1:71:c2:d3:98:7b:1d:26:7b:
                    d4:d8:c7:34:a1:a8:be:76:63:b6:f1:47:bc:9f:d6:
                    f0:44:79:b0:b7:c6:32:f1:20:7e:a2:7e:36:fc:1a:
                    7c:ec:7a:10:7d:9a:e3:33:3b:1c:77:af:c6:3d:79:
                    a5:26:68:ba:ef:b6:5b:e5:63:2d:7f:91:07:34:10:
                    e7:32:85:c2:18:53:1f:2f:ea:ea:e0:53:f2:37:73:
                    a7:ab:68:73:57:55:92:d4:4e:44:36:93:0c:8c:e0:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:2D:C5:AC:F9:75:81:BC:DF:81:8B:9B:85:67:79:9B:19:DF:E7
            X509v3 Authority Key Identifier:
                keyid:5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:33:72:35:80:e8:c5:2b:78:b2:fe:7d:be:e5:e7:bf:cd:
         5f:f2:87:df:fc:9e:d8:ef:c2:b9:45:f4:8e:2c:51:e1:19:47:
         11:0f:e2:51:e1:75:5a:8b:bf:93:16:08:6e:d0:c5:22:4a:58:
         e3:a0:4f:6a:1c:71:f7:01:f5:c3:ed:be:19:61:84:e3:58:96:
         92:5e:db:6e:65:0b:2e:9e:35:2d:91:5e:86:81:c1:cd:fa:f6:
         86:ec:37:7d:ff:65:36:30:d0:6f:9d:91:aa:a2:ed:6d:f2:9d:
         bb:4e:d6:11:cb:04:10:33:10:04:37:d5:78:02:2c:d3:a8:55:
         0a:27:03:ae:df:06:3e:5e:ea:e1:97:4c:8f:39:d4:3e:5f:8e:
         6f:08:b4:06:45:93:52:17:54:a9:26:3d:d9:65:c1:d4:32:4a:
         39:6a:54:23:81:7d:37:c9:86:56:cf:9d:e8:5d:63:a7:b7:b3:
         f6:a1:35:5b:72:08:d6:6c:1c:4b:35:68:85:20:78:c9:f3:24:
         4a:1c:9b:a1:9a:b2:cd:bf:2d:9f:99:21:33:cc:ad:0e:69:a0:
         2c:9a:aa:78:dc:f2:dd:5d:50:32:68:ed:b5:80:d5:05:bb:1b:
         5f:6d:99:71:03:23:b5:01:40:ef:bf:3e:0e:f3:0b:35:01:97:
         c0:57:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:59 2026 by rpki-client