Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (raw, json)
Hash identifier:          L9BHIbv92g/F9T+1lY48K2LRnnR/gCqYPWtvQztkh6I=
Subject key identifier:   34:DE:38:2E:50:41:70:80:D0:41:FD:E3:09:DE:FE:3D:F7:C9:02:52
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       3CA4D33B6485D08E278A6A15BFB39CE6659F0BE3
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa
Signing time:             Thu 05 Feb 2026 09:28:35 +0000
ROA not before:           Thu 05 Feb 2026 09:23:35 +0000
ROA not after:            Thu 04 Feb 2027 09:28:35 +0000
asID:                     267222
IP address blocks:        45.229.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a4:d3:3b:64:85:d0:8e:27:8a:6a:15:bf:b3:9c:e6:65:9f:0b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Feb  5 09:23:35 2026 GMT
            Not After : Feb  4 09:28:35 2027 GMT
        Subject: CN=34DE382E50417080D041FDE309DEFE3DF7C90252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:7a:19:79:bd:19:9b:9c:1b:91:bf:89:3f:
                    24:b3:da:9b:71:00:bd:0c:f1:bb:0e:dd:71:1c:6a:
                    ea:cd:11:a6:de:7b:ca:0f:7d:23:58:e5:0b:c9:28:
                    0f:2e:70:bf:65:06:4c:ed:3e:28:a1:4d:91:80:43:
                    ec:22:08:22:e5:27:da:f1:72:bb:8a:a1:25:80:59:
                    90:ca:b4:11:74:4d:a6:c8:3b:ed:dc:b2:fc:38:ef:
                    d7:e2:3e:2b:a1:d5:d3:d8:c3:b2:31:69:5f:e9:e2:
                    dc:47:88:47:22:b7:d1:09:bd:92:99:7d:d5:8b:a6:
                    1d:c7:4d:32:b9:2c:d0:6a:e6:e0:bf:20:e5:97:11:
                    08:6d:75:ee:77:de:4c:a6:bf:37:00:0a:69:9d:0c:
                    6e:a6:6e:0f:8d:7f:86:17:71:78:bc:22:d8:b2:d5:
                    10:61:fe:f7:f1:9b:59:18:7a:73:cf:97:2c:e0:84:
                    66:b7:d0:19:d9:d8:09:25:d9:9c:76:89:08:d4:4b:
                    ba:05:20:01:9c:a6:aa:4b:32:9f:58:5c:ec:2f:3a:
                    ec:ab:f6:22:30:d0:31:59:f2:0f:4a:7b:3d:ee:59:
                    7e:9b:48:b5:89:42:0f:68:62:56:09:48:4c:17:56:
                    21:80:8b:d0:d9:e4:31:88:9f:9b:77:2f:b0:fb:13:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DE:38:2E:50:41:70:80:D0:41:FD:E3:09:DE:FE:3D:F7:C9:02:52
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:50:7e:5a:b1:4d:d8:e8:8d:14:b9:bb:66:d4:7e:b6:6c:24:
         3a:74:92:db:66:7d:00:6e:e1:78:5e:bc:9b:0a:78:e9:d9:44:
         d5:44:cb:ff:6d:60:a0:5d:a2:4f:a6:e0:22:f0:4a:20:da:3e:
         1c:44:30:46:75:bd:35:74:64:78:38:11:99:65:e2:10:09:8a:
         02:d1:34:ab:c5:fc:36:b0:72:4d:fa:fb:67:f1:fe:49:0c:bd:
         fc:16:a9:ee:fb:b8:74:92:98:22:eb:0c:6b:c5:61:d8:ff:66:
         68:3e:f4:c2:4b:76:4e:29:28:7f:97:b8:53:e3:0a:88:5d:b9:
         52:d5:5d:32:20:c7:28:d2:4b:7e:36:97:af:b0:84:99:fe:80:
         2d:d4:f2:11:67:e9:44:93:52:8f:1a:93:db:dd:70:6a:6b:a8:
         c7:8d:eb:26:54:b9:74:72:bf:09:3d:d0:d6:d2:58:e2:79:60:
         1b:c7:f2:01:58:0a:1e:8a:ee:e9:71:f6:82:31:89:b4:86:fb:
         17:b2:dc:e6:e6:55:03:39:c0:3e:18:82:a7:1e:1d:a1:1c:58:
         c7:71:ca:3e:c3:d1:00:96:0e:36:0c:73:b1:ab:1a:72:e6:15:
         df:a8:33:08:91:32:f6:b6:83:8c:ae:99:66:57:8e:ef:05:1a:
         e2:64:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:31 2026 by rpki-client