Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          zaUE+dBbqEytXlX/u1CRrW05GLYt5Jnsij/wqHI/1XU=
Subject key identifier:   43:D7:2E:51:9F:E8:6F:43:7B:88:95:D8:4B:0B:CE:78:5E:DD:4B:9C
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       37EEDE3A28F41C3D8C33B0CE90C0D94D6FF75E5F
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 05 Feb 2026 07:34:44 +0000
ROA not before:           Thu 05 Feb 2026 07:29:44 +0000
ROA not after:            Thu 04 Feb 2027 07:34:44 +0000
asID:                     268412
IP address blocks:        45.160.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ee:de:3a:28:f4:1c:3d:8c:33:b0:ce:90:c0:d9:4d:6f:f7:5e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Feb  5 07:29:44 2026 GMT
            Not After : Feb  4 07:34:44 2027 GMT
        Subject: CN=43D72E519FE86F437B8895D84B0BCE785EDD4B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:11:89:46:30:1c:c6:a0:66:99:7f:20:91:
                    db:6e:37:97:e9:44:5f:55:b3:63:d0:b5:9d:1d:51:
                    bd:65:9a:05:d1:7c:d5:f5:9e:28:6e:dc:76:ee:0d:
                    dd:6b:44:6d:06:37:b6:e2:aa:b8:1c:05:df:04:c2:
                    dd:15:cc:8c:ed:73:14:97:a4:e5:86:66:33:d4:d3:
                    a4:e3:10:b4:96:c1:85:b2:31:26:db:e0:6b:ff:12:
                    dd:e9:42:2f:9d:a4:8e:c5:63:31:f7:65:fa:45:c2:
                    72:c1:0a:69:b7:cf:96:18:2f:dd:7f:a1:66:17:2b:
                    83:52:0d:cd:c9:59:ca:4b:37:39:0e:fd:71:80:b4:
                    42:ed:35:76:5e:ca:03:fc:42:6d:85:c8:c2:88:65:
                    de:61:22:25:ed:68:8c:f7:89:86:2b:04:f3:5b:97:
                    b2:59:aa:69:9a:54:19:bb:ed:4c:bd:cc:db:dd:a7:
                    6a:f9:38:02:53:2d:83:8e:96:f3:7d:2d:6c:d5:1b:
                    89:c4:8a:8f:02:b3:ed:c2:f2:c0:70:fd:81:5f:cf:
                    5e:86:2e:a3:52:70:fe:57:6b:04:21:93:a1:44:5c:
                    01:d0:70:9c:8d:64:43:54:71:fe:cb:63:58:f4:7c:
                    f8:85:ec:72:86:70:10:5d:85:27:8c:d3:17:b9:d5:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D7:2E:51:9F:E8:6F:43:7B:88:95:D8:4B:0B:CE:78:5E:DD:4B:9C
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:cb:97:61:83:0e:e3:51:fc:58:cb:0f:c1:d3:9e:86:c5:
         3e:58:81:1a:90:2f:ff:3e:89:a0:d5:e3:ed:9d:f3:7a:4c:b0:
         72:a2:62:06:db:ab:fc:a7:e7:ee:23:f0:25:65:c0:ff:e9:5d:
         e2:46:ba:6d:c8:24:18:33:23:96:b3:45:a5:3d:87:ef:07:f7:
         e8:90:61:29:1c:37:e3:f3:0f:41:59:74:19:53:9a:d4:82:64:
         52:cd:38:5f:0d:35:39:ad:80:b1:98:6d:0b:16:02:11:be:e8:
         40:ea:8b:4c:4e:20:05:b7:a8:2e:3e:32:b7:28:26:c3:bb:a0:
         a6:26:ff:ac:41:d5:f3:8c:dd:bc:6a:6e:a1:d7:e0:d9:13:57:
         04:5a:6d:67:70:06:b7:64:99:b9:24:b6:bf:82:22:82:99:fa:
         04:c2:76:97:ef:11:d9:7b:e9:26:61:26:59:56:b1:bf:8e:4d:
         3d:9c:29:54:1a:e3:76:b7:61:98:79:1d:36:44:bf:ce:63:c8:
         4a:d7:87:02:fc:fe:4e:b4:65:b1:96:24:22:93:16:4f:76:4b:
         62:97:94:ca:b5:58:0d:02:00:bc:fe:57:cb:f9:81:21:26:3a:
         bb:4e:7c:d8:ee:2c:c4:d9:b2:91:d2:af:ec:56:39:63:d5:5b:
         2e:b3:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:09 2026 by rpki-client