Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa
File:                     34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (raw, json)
Hash identifier:          TMYk7Ho0KodBzVtCHwIpxNLPHTRDuFaSSLYPzV8TGDo=
Subject key identifier:   34:E7:C3:FC:D5:18:52:05:7E:29:C9:9D:04:F3:F2:F0:81:7F:79:F6
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       17CC5F76EF46BC0C594DA543B79248637FAC9FE2
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa
Signing time:             Wed 04 Feb 2026 21:38:06 +0000
ROA not before:           Wed 04 Feb 2026 21:33:06 +0000
ROA not after:            Wed 03 Feb 2027 21:38:06 +0000
asID:                     269039
IP address blocks:        45.177.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 08:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:5f:76:ef:46:bc:0c:59:4d:a5:43:b7:92:48:63:7f:ac:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Feb  4 21:33:06 2026 GMT
            Not After : Feb  3 21:38:06 2027 GMT
        Subject: CN=34E7C3FCD51852057E29C99D04F3F2F0817F79F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:b3:10:e3:4d:05:dd:d0:0d:1c:23:0f:e6:
                    8c:05:d5:2b:d7:c9:a7:6c:2a:9a:83:80:1a:8d:60:
                    d7:fb:c4:a4:d5:98:94:59:ac:7f:68:9c:3d:74:3b:
                    2a:77:bd:aa:6f:2e:68:3d:8c:ec:07:db:59:17:ad:
                    b6:95:62:53:b8:a6:ac:c9:0c:35:db:7a:e1:14:12:
                    d7:4a:98:1a:30:7e:f6:1c:18:d9:f8:dd:1c:4f:28:
                    7b:1c:ee:f4:b1:da:de:b1:4d:82:25:9c:da:66:d4:
                    53:81:67:dd:ad:e8:84:6d:1d:13:ba:c9:96:b8:a7:
                    6d:50:59:1f:7e:f9:e2:25:26:05:97:5c:ae:fb:42:
                    3a:a5:26:76:84:c7:58:06:ea:e7:31:53:d5:5c:84:
                    04:e9:d4:b7:e7:51:ba:d7:9a:a6:bb:c5:07:5a:b6:
                    1a:b1:4b:45:a3:18:2a:dd:fa:3f:0b:a8:e8:7d:91:
                    93:09:a3:da:3c:35:eb:e0:35:56:de:f9:fd:b9:28:
                    0b:d7:9d:02:77:9f:f3:0d:14:4b:38:c9:8b:63:3d:
                    e5:00:21:10:cb:f0:df:65:dc:ca:9a:28:1e:1d:d1:
                    68:9b:c6:2d:28:64:e8:62:4a:f8:24:44:b8:b8:9c:
                    ea:c0:77:97:5c:b8:a1:91:2f:0c:91:cf:ea:d2:b9:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:C3:FC:D5:18:52:05:7E:29:C9:9D:04:F3:F2:F0:81:7F:79:F6
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:05:76:f7:4d:56:b7:9c:d6:53:e0:d9:b1:cf:79:3d:53:
         0a:81:61:da:09:31:c3:11:f4:fe:3e:e6:3c:95:82:89:92:e2:
         bb:8f:bc:c4:93:91:d4:50:e5:50:b6:71:22:23:da:7d:31:43:
         ab:57:f5:ff:da:04:5a:ca:2b:e8:7a:63:b1:35:8d:2a:d2:d8:
         99:c6:34:9e:0a:92:33:f3:3d:d8:d3:55:8d:28:aa:e8:94:59:
         ee:fb:ba:c1:02:65:65:c7:81:6f:2a:0b:db:35:81:db:b9:54:
         95:c0:dd:ed:64:87:4a:a5:21:78:97:5d:98:f9:fe:a6:d5:80:
         e4:89:39:49:cc:50:ca:8c:16:c1:3b:6a:48:8e:7a:2f:03:2a:
         12:4f:87:3c:ba:2d:57:ab:8a:04:13:0b:96:25:cf:21:ae:e3:
         26:19:f2:c1:ae:f9:fd:1b:0b:42:7b:0e:f3:26:d2:3f:b3:96:
         7e:bc:3d:a1:19:a0:ca:4c:d9:11:c7:b4:0f:47:7e:54:b7:df:
         d5:f1:30:3e:a3:ba:90:38:b5:69:94:2d:b0:de:fa:4d:6f:b6:
         9b:e0:a6:dd:e8:98:dc:83:80:22:2a:c0:18:58:93:ae:cd:91:
         3a:e0:6c:8c:f2:a2:63:e4:ee:26:0d:d7:e2:0e:fa:ef:43:de:
         39:89:16:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF8xfdu9GvAxZTaVDt5JIY3+sn+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0REQzODM3REQ5OEY4OUUzRjdCQzA5RDdEMTdCMjZD
Qjk3NENFOTAeFw0yNjAyMDQyMTMzMDZaFw0yNzAyMDMyMTM4MDZaMDMxMTAvBgNV
BAMTKDM0RTdDM0ZDRDUxODUyMDU3RTI5Qzk5RDA0RjNGMkYwODE3Rjc5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmrMQ400F3dANHCMP5owF1SvX
yadsKpqDgBqNYNf7xKTVmJRZrH9onD10Oyp3vapvLmg9jOwH21kXrbaVYlO4pqzJ
DDXbeuEUEtdKmBowfvYcGNn43RxPKHsc7vSx2t6xTYIlnNpm1FOBZ92t6IRtHRO6
yZa4p21QWR9++eIlJgWXXK77QjqlJnaEx1gG6ucxU9VchATp1LfnUbrXmqa7xQda
thqxS0WjGCrd+j8LqOh9kZMJo9o8NevgNVbe+f25KAvXnQJ3n/MNFEs4yYtjPeUA
IRDL8N9l3MqaKB4d0Wibxi0oZOhiSvgkRLi4nOrAd5dcuKGRLwyRz+rSuXi3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNOfD/NUYUgV+KcmdBPPy8IF/efYwHwYDVR0j
BBgwFoAUQk3Tg33Zj4nj97wJ19F7JsuXTOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJBQ1RVRFE2N1pvRm9SZFB0cGE5dVZDS1ZoVEdLTlE4ZThyWUViNFR1
TFovMS80MjRERDM4MzdERDk4Rjg5RTNGN0JDMDlEN0QxN0IyNkNCOTc0Q0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNEREMzgzN0REOThGODlF
M0Y3QkMwOUQ3RDE3QjI2Q0I5NzRDRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCQUNUVURRNjdab0ZvUmRQdHBhOXVWQ0tWaFRHS05ROGU4cllFYjRUdUxaLzEv
MzQzNTJlMzEzNzM3MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsaAwDQYJKoZIhvcNAQELBQADggEBACk/BXb3
TVa3nNZT4Nmxz3k9UwqBYdoJMcMR9P4+5jyVgomS4ruPvMSTkdRQ5VC2cSIj2n0x
Q6tX9f/aBFrKK+h6Y7E1jSrS2JnGNJ4KkjPzPdjTVY0oquiUWe77usECZWXHgW8q
C9s1gdu5VJXA3e1kh0qlIXiXXZj5/qbVgOSJOUnMUMqMFsE7akiOei8DKhJPhzy6
LVerigQTC5YlzyGu4yYZ8sGu+f0bC0J7DvMm0j+zln68PaEZoMpM2RHHtA9HflS3
39XxMD6jupA4tWmULbDe+k1vtpvgpt3omNyDgCIqwBhYk67NkTrgbIzyomPk7iYN
1+IO+u9D3jmJFu0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:12 2026 by rpki-client