Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa
File:                     34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (raw, json)
Hash identifier:          k4K7+hzmTEHQFtnq/XNsZ1hu3zUZKKOrdUrtEvD/CFU=
Subject key identifier:   BA:AE:04:F6:37:B3:79:F5:01:AE:C7:59:6E:40:4A:46:88:00:13:BD
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       620D32C3033878E08FEF27F1E92437411EFB4857
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     267257
IP address blocks:        45.232.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0d:32:c3:03:38:78:e0:8f:ef:27:f1:e9:24:37:41:1e:fb:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=BAAE04F637B379F501AEC7596E404A46880013BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:74:ec:03:6c:34:91:10:fb:b9:71:a6:18:
                    1e:a6:60:ee:0a:0a:62:24:2b:c7:28:9c:ea:20:0c:
                    3b:a0:56:35:1c:9d:fd:9a:ec:33:f9:90:a9:6a:59:
                    db:0a:ae:9c:3d:e9:bc:bf:14:92:13:a7:19:87:76:
                    b1:13:ec:6a:5f:97:3b:6f:61:e2:ce:10:45:00:71:
                    a5:03:5f:86:d5:ac:29:0a:d4:c0:4a:78:ab:4b:b1:
                    f1:4f:67:f7:36:fd:dc:16:eb:30:47:ec:02:e4:ce:
                    e8:61:73:19:3a:3b:5e:3e:0e:81:02:a1:b0:de:a0:
                    27:e7:f5:ae:8f:fb:7e:4b:74:bc:af:a1:e8:3a:ad:
                    3e:a1:bd:66:e1:a8:69:df:e9:f6:52:20:8b:8a:2a:
                    46:ed:83:8e:98:eb:ad:8d:2e:bf:be:4d:1b:60:b1:
                    4f:be:78:54:23:20:21:07:2a:ba:bb:97:4b:7c:b1:
                    b1:a7:a7:56:16:cd:a5:91:2d:1c:9f:5b:1b:14:6a:
                    81:13:c5:48:a4:2a:d2:87:0a:3c:33:63:3a:85:bd:
                    3c:41:a6:54:01:52:dc:e9:21:5a:d1:87:4c:08:e9:
                    78:93:01:51:16:03:74:b0:16:39:ad:99:7f:72:ed:
                    94:2c:d0:06:c5:4b:e1:fd:39:ea:66:f1:ba:29:b5:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:04:F6:37:B3:79:F5:01:AE:C7:59:6E:40:4A:46:88:00:13:BD
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:c4:8d:93:5e:73:5a:cc:7a:e3:d1:a3:41:36:fb:52:37:17:
         22:fa:bf:0f:65:ad:df:8b:21:2f:d9:0b:1e:f1:8a:0d:88:49:
         1b:08:ec:53:ef:7a:6a:b6:02:66:8a:1b:3b:7a:81:9b:3f:5d:
         65:3c:37:ef:dc:8a:8b:82:35:e6:20:d9:90:ad:89:6d:04:a4:
         eb:ea:e4:06:9c:0e:f2:68:0a:95:34:c8:15:b8:21:2e:48:1b:
         3e:01:39:b0:af:46:cc:f1:26:07:f7:1b:ad:56:0f:bf:11:58:
         61:a7:a0:37:ba:f8:ce:d1:41:d9:7d:78:96:18:04:8a:91:c6:
         ad:0e:e4:ad:ec:e7:12:09:50:fa:12:ee:88:9b:7d:ec:86:e2:
         6a:12:c8:a6:2e:cf:b0:cd:1f:5f:3c:5d:85:ff:23:8b:a8:c7:
         df:2a:59:7c:82:8b:af:52:e2:e1:66:43:38:e8:aa:69:fb:64:
         79:28:89:8d:5f:64:2d:e5:1b:de:4f:01:f4:65:a1:14:3f:7c:
         eb:f4:29:96:49:c2:59:53:8e:fb:35:2c:93:41:08:78:60:ae:
         28:3f:31:fb:a9:4c:71:fc:6b:5d:e6:c7:bc:c2:2d:63:ea:6e:
         80:f7:a2:dd:17:3b:3a:6f:96:75:4d:04:5b:98:f4:fe:a1:38:
         e9:f3:66:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYg0ywwM4eOCP7yfx6SQ3QR77SFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTY1RkRDM0QwNTIzOEVGRTJCNEQ4REMyMkM1QjdE
RUZFN0QwMTAeFw0yNjAyMDQxODU1MDFaFw0yNzAyMDMxOTAwMDFaMDMxMTAvBgNV
BAMTKEJBQUUwNEY2MzdCMzc5RjUwMUFFQzc1OTZFNDA0QTQ2ODgwMDEzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChR3TsA2w0kRD7uXGmGB6mYO4K
CmIkK8conOogDDugVjUcnf2a7DP5kKlqWdsKrpw96by/FJITpxmHdrET7Gpflztv
YeLOEEUAcaUDX4bVrCkK1MBKeKtLsfFPZ/c2/dwW6zBH7ALkzuhhcxk6O14+DoEC
obDeoCfn9a6P+35LdLyvoeg6rT6hvWbhqGnf6fZSIIuKKkbtg46Y662NLr++TRtg
sU++eFQjICEHKrq7l0t8sbGnp1YWzaWRLRyfWxsUaoETxUikKtKHCjwzYzqFvTxB
plQBUtzpIVrRh0wI6XiTAVEWA3SwFjmtmX9y7ZQs0AbFS+H9Oepm8boptW3tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuq4E9jezefUBrsdZbkBKRogAE70wHwYDVR0j
BBgwFoAUpH5l/cPQUjjv4rTY3CLFt97+fQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2
RXMvMi9BNDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0N0U2NUZEQzNEMDUyMzhF
RkUyQjREOERDMjJDNUI3REVGRTdEMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhYaXN2NDF6VFdYZmJTaWZCRXZFVVFSMUcyZDRkWTZUc0xZUXF6dVFKdkVzLzIv
MzQzNTJlMzIzMzMyMmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLehQMA0GCSqGSIb3DQEBCwUAA4IBAQBIxI2TXnNa
zHrj0aNBNvtSNxci+r8PZa3fiyEv2Qse8YoNiEkbCOxT73pqtgJmihs7eoGbP11l
PDfv3IqLgjXmINmQrYltBKTr6uQGnA7yaAqVNMgVuCEuSBs+ATmwr0bM8SYH9xut
Vg+/EVhhp6A3uvjO0UHZfXiWGASKkcatDuSt7OcSCVD6Eu6Im33shuJqEsimLs+w
zR9fPF2F/yOLqMffKll8gouvUuLhZkM46Kpp+2R5KImNX2Qt5RveTwH0ZaEUP3zr
9CmWScJZU477NSyTQQh4YK4oPzH7qUxx/Gtd5se8wi1j6m6A96LdFzs6b5Z1TQRb
mPT+oTjp82b5
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:01 2026 by rpki-client