Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          ksnTh12B/em1ls8I475st8G9xevAgKV8u567pG+26/M=
Subject key identifier:   AD:98:0F:35:DA:4F:DC:4A:D4:76:25:3C:19:37:50:DE:70:6C:BB:DA
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       7828FCDFEE940AE3F175C8DD4E5F14DA8C1EFC4D
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 05 Feb 2026 07:34:44 +0000
ROA not before:           Thu 05 Feb 2026 07:29:44 +0000
ROA not after:            Thu 04 Feb 2027 07:34:44 +0000
asID:                     268412
IP address blocks:        45.160.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:28:fc:df:ee:94:0a:e3:f1:75:c8:dd:4e:5f:14:da:8c:1e:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Feb  5 07:29:44 2026 GMT
            Not After : Feb  4 07:34:44 2027 GMT
        Subject: CN=AD980F35DA4FDC4AD476253C193750DE706CBBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:26:4f:6f:c5:f3:b4:6d:a0:44:0a:c3:7c:
                    b7:0c:ed:0b:73:09:3a:cd:a8:78:63:21:b1:b0:78:
                    fc:75:19:40:58:84:f6:94:90:6c:44:b2:33:9e:82:
                    2f:0c:ae:1e:0d:27:56:5b:3e:29:b1:2d:ef:6e:d5:
                    70:3e:10:46:ac:1a:47:d5:1a:ec:09:d7:9a:40:37:
                    52:80:c0:e5:61:ea:75:1f:03:c7:22:54:3a:22:e5:
                    5d:d7:f5:0d:c5:cd:0c:68:7c:dd:ad:e8:f5:15:6d:
                    99:7a:e7:f7:5b:78:20:f0:77:1e:2e:73:71:8f:94:
                    02:3c:b7:4c:b3:24:fa:aa:f4:de:2e:fe:6e:ed:92:
                    37:3d:9f:ba:12:cf:db:e2:37:9e:da:d3:a5:06:f5:
                    a6:1b:cf:15:a8:92:2f:90:88:b4:e2:88:40:ff:1f:
                    c7:d4:46:d0:71:cf:4e:99:12:93:a7:62:d5:5d:4b:
                    c6:04:b4:7b:92:65:83:5e:82:87:63:a4:3f:83:13:
                    68:6f:ba:17:de:df:10:a0:e4:9a:79:e0:37:0a:ae:
                    5b:f4:eb:98:59:42:a9:75:cf:06:d9:ce:29:31:8c:
                    e0:24:d5:d7:00:ab:d5:86:04:62:2f:cf:70:a7:24:
                    44:d4:8a:4a:f7:a4:1c:39:e3:cf:e8:4d:0d:72:94:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:0F:35:DA:4F:DC:4A:D4:76:25:3C:19:37:50:DE:70:6C:BB:DA
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:d5:03:4c:8e:7a:bf:c2:bf:f1:3e:c2:ce:6f:bd:d4:a1:
         58:2a:30:35:2a:3a:5f:5c:c5:ac:f4:f7:67:23:b6:c1:ec:96:
         8f:4f:18:6b:51:df:20:93:31:a3:fa:0d:f7:3c:08:79:a4:b8:
         8d:64:7d:0f:9d:c8:8c:2a:6c:21:c9:1f:50:f6:d9:3f:08:7e:
         e4:a1:cd:fc:e3:ce:10:be:fe:c9:0d:11:7a:55:cb:c1:80:57:
         e0:8a:be:0c:4c:69:6c:e0:2a:61:92:19:15:b9:c5:e0:58:c3:
         45:87:18:4a:de:47:52:06:ab:3b:0e:9c:aa:f4:74:41:32:49:
         15:5c:c5:07:d1:b0:76:8b:40:09:87:06:61:d7:d6:5a:d1:44:
         f3:43:09:b9:ae:ba:65:86:9b:f0:94:76:e4:a6:91:e6:d5:8c:
         67:6a:e8:4b:1a:4f:b9:b9:22:9d:ba:54:2f:35:fd:c3:86:6b:
         9b:58:f3:d0:b9:d4:07:f7:46:05:2a:95:dc:c5:3b:c0:f9:6b:
         a9:d6:ed:1e:ca:7c:52:a3:29:a2:d8:f1:a0:aa:c6:fe:a1:ef:
         d9:30:3d:c7:e2:bd:99:d8:16:2c:3e:fc:5f:3c:2b:49:3f:73:
         1b:bc:d0:0a:1e:38:5e:fd:76:82:17:66:41:dc:80:82:1d:07:
         22:dc:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:05 2026 by rpki-client