Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa
File:                     34352e3137332e32382e302f32322d3232203d3e20323638373839.roa (raw, json)
Hash identifier:          045rilVpi3Wj+0U36r+wsY3YktOqK7/h8nwyiXhYHT8=
Subject key identifier:   EC:9C:3A:B1:DA:FB:22:F3:83:49:D8:85:0E:3B:55:C8:21:28:AF:00
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       752EF29DAA02D172C5A75926C10533C4C1FB2AA3
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa
Signing time:             Thu 05 Feb 2026 12:46:19 +0000
ROA not before:           Thu 05 Feb 2026 12:41:19 +0000
ROA not after:            Thu 04 Feb 2027 12:46:19 +0000
asID:                     268789
IP address blocks:        45.173.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl
                          rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2e:f2:9d:aa:02:d1:72:c5:a7:59:26:c1:05:33:c4:c1:fb:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Feb  5 12:41:19 2026 GMT
            Not After : Feb  4 12:46:19 2027 GMT
        Subject: CN=EC9C3AB1DAFB22F38349D8850E3B55C82128AF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:c3:45:f7:8e:a1:ad:3b:d4:a8:ce:e4:c3:
                    19:73:71:5f:54:a7:f8:f5:d4:50:66:d8:40:cc:0f:
                    3e:40:d1:25:6b:f9:95:e6:a2:a9:71:d1:47:90:c4:
                    ce:34:36:f3:e2:74:ff:df:83:f5:73:4e:de:8b:82:
                    7c:8d:04:e5:bc:1e:82:54:7a:9c:1f:58:41:de:18:
                    d7:b9:1c:23:a0:c8:2d:72:13:69:6b:40:16:33:23:
                    57:aa:00:e8:66:88:f5:cb:22:09:e8:d3:77:da:c0:
                    c2:7a:56:de:99:64:90:5d:4c:8d:2a:60:ee:79:b6:
                    22:46:14:1d:1c:87:fd:53:d9:b9:86:d8:f6:13:d9:
                    b1:e1:7c:7e:08:1e:7c:f0:58:ae:df:97:23:e3:de:
                    f5:95:fd:e6:e2:a7:af:c7:ce:63:4f:80:fc:01:69:
                    b2:cd:22:84:26:0f:09:d6:76:fe:75:e6:1f:b5:2e:
                    6c:5d:f2:7b:5f:b6:fa:b2:7a:f9:a3:f6:8a:79:05:
                    47:e5:06:07:5a:b8:e3:9d:3d:b8:37:2e:e0:dc:bb:
                    55:a4:62:36:19:b4:c8:f8:2a:cf:98:f0:2b:0d:e8:
                    d0:c1:4a:43:c9:e0:b1:a5:eb:a1:1d:90:45:45:06:
                    48:15:a7:0d:6a:74:8b:0a:37:08:21:2d:c7:29:29:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:3A:B1:DA:FB:22:F3:83:49:D8:85:0E:3B:55:C8:21:28:AF:00
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:f5:f3:b0:68:af:20:d5:06:20:ce:29:94:fc:f1:e7:df:
         f9:1f:8e:14:5b:50:5c:a1:05:e4:d9:33:0f:9d:c0:7d:3f:da:
         fd:b1:54:d4:09:a6:e2:1a:81:c9:d1:e8:c6:dc:8d:e3:a9:ab:
         ca:07:bb:f7:b4:fe:0d:e5:34:07:8e:ae:3a:07:c8:dd:ee:34:
         a1:0a:04:c0:e5:47:94:db:0b:3f:23:74:77:fb:ca:ea:67:1d:
         a8:d1:a2:59:b6:ce:cc:c6:f7:23:67:43:33:a4:e8:62:e2:dc:
         07:4e:1d:8a:b8:3c:78:af:0e:58:5c:38:e3:64:6c:12:32:b2:
         b3:01:01:5e:35:61:f8:47:63:a1:84:72:ba:32:9c:b2:16:79:
         1d:38:9f:43:9e:6f:8e:69:30:68:dc:85:be:08:f1:5d:3a:15:
         da:8e:03:21:6c:37:11:6c:1f:94:a8:de:b3:13:7c:df:7f:20:
         48:05:d2:31:6c:b7:e1:43:9f:71:7e:5f:5e:98:24:e5:21:19:
         47:ba:67:3c:bb:c1:1e:a4:df:ff:18:cc:91:14:2d:2a:b5:e5:
         71:09:3c:ba:7e:d8:2c:fa:79:ca:cf:d7:d2:33:c8:08:3d:b6:
         7c:5b:6e:cd:99:54:ec:30:5a:9b:da:7c:1d:3d:91:2f:6d:42:
         51:6b:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:36 2026 by rpki-client