Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
File:                     34352e3136332e34302e302f32322d3234203d3e20323638353438.roa (raw, json)
Hash identifier:          cCgGq6f3bdWMFf8W+G2PTUUgxc7OtuB8QAQEPNYjsxQ=
Subject key identifier:   05:FF:D6:1B:7E:E9:D7:FC:0D:9F:60:05:1C:F5:45:C5:DB:CA:00:8B
Certificate issuer:       /CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
Certificate serial:       06775D8A6C4566EEACAC0B19C582A584BC27BF11
Authority key identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     268548
IP address blocks:        45.163.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl
                          rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:77:5d:8a:6c:45:66:ee:ac:ac:0b:19:c5:82:a5:84:bc:27:bf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:b2:ed:ac:6f:59:7d:37:fd:c4:df:13:cc:
                    ac:f6:85:28:1f:fe:25:b2:af:01:23:82:d4:8d:c3:
                    d2:bd:5f:54:66:1b:4a:bc:f4:8c:08:42:dc:aa:01:
                    9f:ca:c0:e5:af:a5:f6:4e:2c:07:9a:44:d5:66:c6:
                    8a:15:0a:36:43:90:86:97:9b:24:d1:74:8e:0a:8e:
                    8d:74:19:48:75:8c:00:fa:94:b2:ed:58:87:57:d5:
                    39:70:cf:51:ec:14:8c:48:f7:a1:de:fd:a7:9c:ab:
                    74:78:12:84:63:85:9a:83:81:f7:d0:cf:8c:a0:5a:
                    33:b5:e2:84:a7:7e:d9:36:96:21:73:e4:2e:b4:df:
                    83:85:25:8c:9b:25:7a:a9:9c:a1:16:aa:27:99:28:
                    9f:9b:3c:cb:58:b1:01:81:fa:01:17:94:1e:1c:18:
                    4f:04:9d:25:53:ea:03:22:94:13:b5:da:01:6b:b5:
                    db:f2:e0:eb:24:34:a7:16:8f:a4:ec:2d:15:0d:3c:
                    37:0e:ff:5c:a7:c7:80:42:74:82:17:77:50:97:81:
                    84:ee:23:5f:1b:7d:33:10:14:77:39:c4:10:ad:d7:
                    c0:3f:4b:79:f2:28:c1:7b:43:b9:d2:10:c0:77:f1:
                    ac:5c:d7:01:71:c5:3d:2b:1d:ca:00:64:b3:25:8d:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FF:D6:1B:7E:E9:D7:FC:0D:9F:60:05:1C:F5:45:C5:DB:CA:00:8B
            X509v3 Authority Key Identifier:
                keyid:12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:12:48:23:ef:ae:9d:98:dc:42:17:3c:c4:9f:81:32:a6:
         15:f2:8b:46:27:33:41:cb:18:6b:7c:81:4e:83:b1:d5:ce:14:
         22:2f:7a:77:83:6e:b0:82:15:01:6b:d0:03:88:7d:b5:ec:58:
         8c:d7:c3:af:28:6b:e2:f8:6a:bd:95:20:f3:f0:b4:ab:52:06:
         c8:6b:d3:88:3c:3b:4b:82:a8:c5:5a:da:16:09:3a:d1:e4:d9:
         0b:79:2d:4a:7d:ec:b6:08:95:f1:f3:c5:bc:4f:6b:6f:80:54:
         8e:92:e8:5d:64:78:a5:9b:df:e8:f4:00:f5:ff:0d:a7:97:cc:
         e1:4b:9e:9f:0a:0f:d0:07:bd:c1:6a:38:4a:85:62:70:bd:18:
         fe:fe:b8:7b:a8:df:01:54:5f:67:1c:14:10:00:99:cc:31:a1:
         23:80:37:69:7f:08:42:4b:72:22:7e:4d:55:58:97:97:11:dc:
         a7:70:88:00:83:e4:52:fc:c2:0f:32:c2:16:11:6e:b8:10:8a:
         55:b2:37:44:19:b5:61:23:3f:83:a6:c1:e6:15:9a:32:53:e2:
         77:44:2a:65:df:29:d7:51:5b:f2:f6:a6:c5:de:cb:3c:00:b5:
         32:53:ee:81:73:78:ce:e8:35:65:83:43:56:b2:33:cc:5a:17:
         a6:be:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:57 2026 by rpki-client