Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          Ul2+xdU6tUOw/7MH5IVNUjzimoScLM8utnqd+jo+VZc=
Subject key identifier:   24:F2:E0:B9:AC:F6:52:83:18:08:C8:EE:14:32:7D:8D:0C:1D:07:B0
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       38F7FE0CB3E50FB6F86631733C13EECC0A62C58E
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     268011
IP address blocks:        45.167.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f7:fe:0c:b3:e5:0f:b6:f8:66:31:73:3c:13:ee:cc:0a:62:c5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=24F2E0B9ACF652831808C8EE14327D8D0C1D07B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:91:d2:b3:9a:c7:63:79:6f:e1:3a:bf:85:
                    3f:94:fb:84:1e:d8:eb:4f:70:49:04:c3:d2:7e:36:
                    95:d2:7b:b3:61:9e:1e:d2:26:48:92:bd:68:db:2a:
                    bf:9f:ab:3b:3a:64:0d:a7:5d:5f:1f:33:35:07:84:
                    c5:ee:9a:8f:a5:23:08:61:e9:7a:8a:d4:52:30:6a:
                    38:eb:ad:3a:8b:41:cf:9b:d4:92:1d:40:45:de:fd:
                    d1:a1:2c:61:ef:c0:60:7c:2e:2c:63:31:8b:b8:ad:
                    fe:a3:06:8e:ff:cb:2c:eb:6b:9e:28:d7:a2:47:aa:
                    ec:cf:c7:0b:52:a8:ed:c9:46:ff:0d:63:f1:f8:65:
                    bb:f0:ac:19:c7:8a:30:4c:6a:08:bf:fe:e3:a4:d3:
                    8b:a6:a8:96:6a:fb:46:15:05:b0:a9:5f:63:20:81:
                    7c:33:b5:50:58:8d:18:c7:c3:8f:8a:f3:92:1b:2c:
                    24:f0:3e:85:85:7e:f4:91:01:8b:ed:37:c2:95:61:
                    2a:aa:ff:b3:4f:76:b5:50:27:93:e8:4e:f1:98:81:
                    45:9e:11:46:24:32:66:ad:52:9b:b5:00:82:d9:02:
                    7b:60:f9:67:88:cb:ac:72:f1:6e:7e:5c:69:e4:01:
                    99:28:c5:7d:43:dd:ed:b9:aa:18:d9:ab:6b:95:ae:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:E0:B9:AC:F6:52:83:18:08:C8:EE:14:32:7D:8D:0C:1D:07:B0
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:87:cf:1d:79:07:e8:8d:8e:dd:16:ce:99:55:55:a1:30:
         7e:61:7a:4d:c9:ee:24:87:76:ce:74:d3:ef:05:97:45:45:70:
         52:ad:54:6c:bd:45:ef:af:e2:9c:98:87:7d:29:97:5b:88:74:
         94:ca:2c:ad:67:40:e2:74:b1:7d:7f:66:ab:d0:74:48:4c:9f:
         a9:63:78:c8:13:8b:56:de:65:c6:16:fa:70:61:86:ff:b7:60:
         bc:c6:2c:83:0e:ef:ae:dd:4b:29:f5:35:8f:19:fe:14:7d:7e:
         ef:23:68:c6:11:9e:49:f2:2e:b2:94:03:81:88:0f:b0:bc:1e:
         ff:1d:50:df:2d:59:50:69:07:ce:52:52:8d:cd:bc:e5:65:18:
         75:20:80:c0:c1:d9:fd:31:28:d6:b5:0e:a5:17:16:cf:c0:1b:
         25:b4:31:8e:17:de:e5:91:fa:1b:36:42:b9:ec:5a:bc:73:15:
         eb:fd:da:8b:6c:ff:99:ae:a3:8e:42:17:ad:97:f4:ad:98:61:
         74:4a:3f:cc:e2:ab:11:84:f3:f9:e9:1a:10:76:b9:d4:27:03:
         d3:47:ca:05:6c:cb:88:32:5b:41:a5:8e:e7:ba:8e:e3:e9:ef:
         a4:9c:76:28:14:fe:07:54:cc:fc:49:3e:a8:61:8b:ef:fc:91:
         a8:6f:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:46:44 2026 by rpki-client