Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa
File:                     34352e342e3130342e302f32322d3234203d3e20323636303633.roa (raw, json)
Hash identifier:          3IzG2u9Tvm/ZvJfm67J3rQInKqJ6ykRL4gHSU5shqrA=
Subject key identifier:   B0:C9:04:EF:56:8A:35:5D:05:DB:FC:72:C6:CC:49:58:2A:9D:42:A8
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       783EDD17AE527DBEA9141AB65E547F9D3200A768
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa
Signing time:             Thu 05 Feb 2026 00:25:58 +0000
ROA not before:           Thu 05 Feb 2026 00:20:58 +0000
ROA not after:            Thu 04 Feb 2027 00:25:58 +0000
asID:                     266063
IP address blocks:        45.4.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3e:dd:17:ae:52:7d:be:a9:14:1a:b6:5e:54:7f:9d:32:00:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Feb  5 00:20:58 2026 GMT
            Not After : Feb  4 00:25:58 2027 GMT
        Subject: CN=B0C904EF568A355D05DBFC72C6CC49582A9D42A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:35:9e:23:9a:83:93:98:e6:d3:c4:06:2d:
                    c6:ec:42:4a:a8:15:0b:60:b6:41:7b:3e:10:22:76:
                    ee:91:70:33:26:c1:35:cc:a4:6f:01:d7:d0:ba:28:
                    a6:2e:e7:97:16:1c:15:6a:1d:ef:ef:ef:f9:88:1a:
                    18:2a:29:8b:e7:85:9b:b5:dd:b4:3c:1a:87:e1:5f:
                    3f:82:50:ab:0e:8f:b8:04:3c:a2:de:49:46:9b:ed:
                    2f:81:6d:b2:01:35:d1:ba:ae:5c:15:7f:8c:74:cc:
                    32:49:5c:42:48:58:4a:a8:f4:c4:18:f4:6c:e9:e8:
                    79:6d:4a:df:e1:9e:7a:f7:f2:8c:7d:f2:cc:99:cb:
                    b9:03:91:38:22:5a:f0:07:ad:2a:12:da:f8:81:35:
                    77:22:e6:f1:96:bc:a7:f9:38:62:d4:0a:95:25:19:
                    eb:fd:9a:d8:32:e7:9f:1e:0e:23:ff:fe:c3:67:06:
                    37:d9:24:13:40:dc:84:76:f4:e2:4a:c6:84:42:ff:
                    5d:03:e6:f4:7b:a7:e5:3c:93:41:7b:e0:65:a6:a1:
                    20:ea:4c:c5:d4:90:e3:84:d6:d8:46:3a:b1:88:10:
                    6b:7a:0d:13:be:3b:90:4f:86:23:51:d7:f8:b3:b3:
                    af:46:12:6f:1a:f7:d7:5d:34:44:46:65:5f:12:41:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C9:04:EF:56:8A:35:5D:05:DB:FC:72:C6:CC:49:58:2A:9D:42:A8
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:56:68:14:53:8e:ce:84:33:78:39:d3:12:16:e1:95:8a:
         98:e8:dd:73:fa:af:e1:cd:a2:d9:87:53:56:a4:40:93:62:ba:
         44:90:51:bb:34:a5:68:fa:6f:f1:2c:4a:dd:d5:ad:ed:e0:e6:
         84:ce:1a:5f:5e:13:69:c6:c2:f8:ab:c6:d7:e8:29:0d:47:98:
         c4:77:e4:05:29:5d:25:2c:00:74:48:1b:97:29:2d:17:e8:9b:
         3e:33:33:76:3a:5b:7d:00:35:8d:38:e4:bb:1d:f9:f4:2b:88:
         93:03:9d:02:37:2b:38:2c:07:7c:9a:f5:5c:33:3a:2b:52:e3:
         14:48:54:aa:2b:8f:06:23:61:ca:87:82:d5:95:b7:ee:99:e5:
         65:95:69:e5:15:8b:b2:54:30:9a:d0:85:65:38:59:eb:fc:20:
         cf:f7:c8:ee:0f:6d:e5:4d:f0:ed:c7:fb:c4:6d:84:1e:78:f6:
         28:6c:13:0a:7e:78:5e:90:66:c6:13:be:42:f6:e3:f7:6e:c5:
         4a:d2:8e:01:fd:ed:2e:b4:b9:5f:25:dd:d1:78:77:c3:de:be:
         da:76:bd:af:e0:97:6e:80:9f:c0:09:95:3a:83:69:0b:0f:cd:
         73:8c:f6:d6:56:d4:37:11:5f:66:8f:82:a0:f8:96:54:c4:9a:
         e5:ae:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:09 2026 by rpki-client