Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
File:                     34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (raw, json)
Hash identifier:          LMzzrhzmAUlfsBEa68CgBpfRVLprrk9pmGbQqR2nIvY=
Subject key identifier:   02:66:69:E6:8C:5E:37:0F:20:16:FF:10:6A:56:EB:54:40:18:C4:06
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       012029F11F00410A82BA6FFDCBA83AD136A55B42
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     269195
IP address blocks:        45.179.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:20:29:f1:1f:00:41:0a:82:ba:6f:fd:cb:a8:3a:d1:36:a5:5b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=026669E68C5E370F2016FF106A56EB544018C406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:61:49:3a:03:c9:15:79:3b:d0:16:e6:d8:
                    bc:60:e1:51:d0:a3:9a:24:81:c7:9b:7d:8f:10:be:
                    ce:40:38:26:3d:e7:9e:aa:3e:c4:47:84:eb:51:74:
                    3b:81:38:e8:8a:1e:78:0e:f8:b6:4b:65:d1:87:a9:
                    52:95:7a:6a:50:60:ce:eb:c8:e6:f9:44:dd:5b:d8:
                    8b:c7:39:64:53:fa:3c:bf:94:62:a8:83:dc:38:72:
                    e8:51:f8:e1:96:d9:37:2a:56:d5:6c:1b:11:7d:6c:
                    97:60:49:13:90:af:1c:2c:19:32:c6:f2:ec:a4:c7:
                    18:16:40:6b:f5:3e:9e:05:ec:a5:0b:8e:7b:33:8b:
                    b3:c3:71:f6:51:99:69:34:1c:30:ec:5e:89:5e:65:
                    c0:87:f9:a5:6c:66:56:ef:ca:61:c6:70:25:d3:6d:
                    1f:a8:a9:a9:01:4a:1d:e7:3f:b6:be:ba:7a:f6:ce:
                    8d:c4:22:6d:a1:5f:9a:97:b7:a7:d7:a7:10:86:79:
                    3b:29:10:26:7b:3a:96:e6:83:76:56:d7:5a:bc:3a:
                    52:64:75:61:c8:6b:81:d7:7a:73:7f:9c:4e:08:af:
                    91:bf:73:83:38:e2:9c:6d:13:30:8c:7f:5f:96:2a:
                    77:41:b5:69:c0:bd:e2:5a:cc:d4:5b:aa:b2:b1:cf:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:66:69:E6:8C:5E:37:0F:20:16:FF:10:6A:56:EB:54:40:18:C4:06
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:e6:3f:63:2b:10:ac:d1:e4:f2:d2:aa:11:12:41:b2:b9:
         ca:25:d7:8f:8c:ba:67:4c:18:fc:8e:58:f1:71:7c:b3:56:5f:
         3f:dd:55:bf:05:8b:4c:35:d4:fc:37:9e:73:74:82:9b:58:07:
         b1:c2:61:81:ba:f8:be:86:c9:be:d7:af:f3:6d:f0:35:43:ef:
         31:38:3b:6c:da:db:b9:00:43:36:e4:d5:27:7c:e7:cf:7e:54:
         74:d1:2b:d7:8c:97:7f:a4:c4:5a:51:26:62:f1:6e:fb:cc:41:
         c6:55:38:2d:f9:2b:81:80:58:72:9b:f8:67:c1:c2:70:50:e7:
         43:4e:15:f3:d7:2e:00:d2:24:a0:fa:a0:b0:62:ed:44:36:46:
         5e:50:c2:4d:45:eb:bf:b9:19:21:1b:29:44:f5:bf:e0:86:fa:
         8f:1c:74:25:82:be:67:8e:40:de:49:3b:6a:83:ba:f4:8f:c2:
         5f:45:d2:cc:57:15:6c:bd:94:e3:56:e7:c6:39:7f:06:ee:1a:
         60:0a:d6:48:a7:d8:10:5c:c5:1f:0d:70:73:23:ba:83:e3:a7:
         f3:c3:2e:79:44:2a:60:6b:32:5b:ff:48:21:6c:28:90:a4:3d:
         5d:fa:eb:3a:7c:7c:fe:ce:75:1e:5a:63:1b:e7:8e:19:63:c3:
         94:67:8d:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUASAp8R8AQQqCum/9y6g60TalW0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4MjQyRTg1QzZDOEQ1RTBFMTZGQTNGOUI3NUQ3N0ND
RjQ0OEE5RDAeFw0yNjAyMDQxOTU1MDFaFw0yNzAyMDMyMDAwMDFaMDMxMTAvBgNV
BAMTKDAyNjY2OUU2OEM1RTM3MEYyMDE2RkYxMDZBNTZFQjU0NDAxOEM0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/GFJOgPJFXk70Bbm2Lxg4VHQ
o5okgcebfY8Qvs5AOCY9556qPsRHhOtRdDuBOOiKHngO+LZLZdGHqVKVempQYM7r
yOb5RN1b2IvHOWRT+jy/lGKog9w4cuhR+OGW2TcqVtVsGxF9bJdgSROQrxwsGTLG
8uykxxgWQGv1Pp4F7KULjnszi7PDcfZRmWk0HDDsXoleZcCH+aVsZlbvymHGcCXT
bR+oqakBSh3nP7a+unr2zo3EIm2hX5qXt6fXpxCGeTspECZ7Opbmg3ZW11q8OlJk
dWHIa4HXenN/nE4Ir5G/c4M44pxtEzCMf1+WKndBtWnAveJazNRbqrKxz2a/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAmZp5oxeNw8gFv8QalbrVEAYxAYwHwYDVR0j
BBgwFoAUVYJC6FxsjV4OFvo/m3XXfM9Eip0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMS81NTgyNDJFODVDNkM4RDVFMEUxNkZBM0Y5Qjc1RDc3Q0NGNDQ4QTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1ODI0MkU4NUM2QzhENUUw
RTE2RkEzRjlCNzVENzdDQ0Y0NDhBOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlEQVFkMnkzR2dhaThSSkVzTGZ0RnRyVWE5WnZHcnkzOUZNVllRUEhrbkxuLzEv
MzQzNTJlMzEzNzM5MmUzMTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts7wwDQYJKoZIhvcNAQELBQADggEBABL/5j9j
KxCs0eTy0qoREkGyucol14+MumdMGPyOWPFxfLNWXz/dVb8Fi0w11Pw3nnN0gptY
B7HCYYG6+L6Gyb7Xr/Nt8DVD7zE4O2za27kAQzbk1Sd8589+VHTRK9eMl3+kxFpR
JmLxbvvMQcZVOC35K4GAWHKb+GfBwnBQ50NOFfPXLgDSJKD6oLBi7UQ2Rl5Qwk1F
67+5GSEbKUT1v+CG+o8cdCWCvmeOQN5JO2qDuvSPwl9F0sxXFWy9lONW58Y5fwbu
GmAK1kin2BBcxR8NcHMjuoPjp/PDLnlEKmBrMlv/SCFsKJCkPV366zp8fP7OdR5a
Yxvnjhljw5RnjeQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:04 2026 by rpki-client