Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
File:                     34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          XIHUqLSBSkh+uND0iH7PeZcXzivXfes80WQfvk2csrw=
Subject key identifier:   5B:03:FC:86:E7:FB:CE:BC:B2:C4:58:6E:6B:AE:84:BB:E2:FD:57:F6
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       69547815F7CAD1A8AA2027D6DFF764E4305D3E3A
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
Signing time:             Thu 05 Feb 2026 09:00:30 +0000
ROA not before:           Thu 05 Feb 2026 08:55:30 +0000
ROA not after:            Thu 04 Feb 2027 09:00:30 +0000
asID:                     269647
IP address blocks:        45.190.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:54:78:15:f7:ca:d1:a8:aa:20:27:d6:df:f7:64:e4:30:5d:3e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Feb  5 08:55:30 2026 GMT
            Not After : Feb  4 09:00:30 2027 GMT
        Subject: CN=5B03FC86E7FBCEBCB2C4586E6BAE84BBE2FD57F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:5e:45:af:ca:86:c2:ec:64:da:b3:74:d6:
                    da:2c:f0:11:bd:39:7f:3d:f8:7b:00:a3:41:83:66:
                    dc:00:c6:be:1e:94:74:12:39:cc:b7:f3:42:24:92:
                    16:4b:4a:5a:5c:35:cb:78:80:a8:b6:f2:a9:d8:43:
                    56:48:0c:46:01:31:46:c1:0d:c6:ea:fc:b0:08:d7:
                    cc:9b:83:e7:cf:0e:48:0e:4d:5a:c6:93:15:59:52:
                    2f:d7:12:f6:c1:8a:d8:3c:75:50:7e:bc:c1:e7:5d:
                    25:38:18:e1:ba:63:1a:5b:7e:58:57:29:9e:29:f7:
                    2b:92:88:6a:fd:33:0a:43:5a:96:01:02:94:1b:7a:
                    ea:a3:47:f1:24:ac:7e:cd:cd:5b:5e:70:b4:c4:f4:
                    2c:0f:25:9a:b3:d2:1e:fe:8f:05:68:5c:7b:aa:20:
                    c1:1b:a9:df:6b:28:22:57:a1:52:08:48:3e:d6:f1:
                    d9:1d:ba:a0:b2:3a:4c:e7:d2:6f:01:5f:05:1d:3b:
                    60:38:06:00:5e:33:9a:83:f0:b6:10:fe:c4:8d:8d:
                    fb:2c:72:9c:24:ec:93:c5:f8:6f:d9:b9:e4:07:a9:
                    88:06:3b:bc:54:48:b2:39:28:95:72:06:3a:4d:1b:
                    72:cd:06:65:6b:ba:a0:e3:8b:0d:bf:37:32:ac:48:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:FC:86:E7:FB:CE:BC:B2:C4:58:6E:6B:AE:84:BB:E2:FD:57:F6
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:a1:96:59:1b:86:75:c3:fe:79:a4:70:f4:f9:0d:07:0b:
         f6:07:5f:91:64:06:b7:ab:d9:3a:c5:db:7e:2b:11:9d:1b:25:
         de:f1:4a:a9:a3:fc:1b:1c:e9:62:b5:da:2f:f3:d5:fb:fb:68:
         ae:c7:c1:e1:24:ae:f7:c5:fd:bc:2b:5b:52:29:77:26:d5:08:
         5b:50:e0:50:15:0e:bb:fb:27:6e:4d:4f:91:68:00:22:b6:a3:
         3f:d2:b7:e3:94:87:9c:d1:f5:eb:c8:c7:1d:6f:69:5f:d9:88:
         f1:53:85:bc:bb:f6:86:28:58:f8:0a:ea:1d:08:7d:ba:d9:fe:
         b3:0f:39:07:39:df:df:4a:fe:fd:1b:24:67:17:74:15:87:ee:
         8a:3e:d6:4b:c0:5f:e5:16:01:fc:1e:0b:90:b0:95:93:58:1e:
         d7:86:04:6a:14:28:d8:1b:42:25:3f:4a:60:02:c6:93:fe:86:
         91:b8:05:1f:0c:30:da:9d:88:97:02:87:d0:58:c2:6b:ad:ba:
         68:09:47:65:0d:c8:98:fd:8f:68:34:83:ba:0a:69:c7:39:cb:
         79:ea:83:2e:78:52:e1:ad:3e:39:80:cd:b7:01:74:4e:59:2e:
         db:26:0d:bd:62:db:5a:55:8d:2b:9a:d0:e9:bf:9f:59:b4:07:
         8e:f2:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:08 2026 by rpki-client