Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa
File:                     34352e3136352e32302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          5OpG2rXQHRF9Gqx7kKB5jlt8A5Nyj9YtfcOaNuateUw=
Subject key identifier:   38:A0:E9:61:20:31:7E:E3:50:A8:34:D4:0D:BC:1C:8F:D9:F2:A7:5D
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       1D3FA767D4C15E99CBCC6ABB68B8F1FA8BE554DD
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 05 Feb 2026 21:23:18 +0000
ROA not before:           Thu 05 Feb 2026 21:18:18 +0000
ROA not after:            Thu 04 Feb 2027 21:23:18 +0000
asID:                     28220
IP address blocks:        45.165.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:a7:67:d4:c1:5e:99:cb:cc:6a:bb:68:b8:f1:fa:8b:e5:54:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  5 21:18:18 2026 GMT
            Not After : Feb  4 21:23:18 2027 GMT
        Subject: CN=38A0E96120317EE350A834D40DBC1C8FD9F2A75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8c:54:08:86:d1:9f:ed:01:1f:fa:ab:41:ed:
                    68:ef:70:78:ac:b2:b8:a5:16:0a:80:19:ba:c0:61:
                    85:32:c7:72:a2:22:09:b6:77:73:be:e4:5d:98:40:
                    df:fc:00:a7:01:2b:23:63:76:b2:64:30:2f:91:a0:
                    6a:c6:9b:94:3b:23:70:46:dd:ec:dd:96:d5:63:a5:
                    ac:10:2c:93:00:37:09:0d:cf:b3:23:1d:67:8e:2c:
                    fc:31:97:b6:46:ae:ad:f9:e0:d9:4d:3c:2c:40:d9:
                    ea:64:67:9a:08:2d:cc:01:84:8a:7a:a5:3b:ae:80:
                    55:3b:20:fc:01:4d:5c:fe:ae:46:2d:38:ec:94:22:
                    69:9a:da:dd:c3:f7:be:4d:eb:7e:ff:19:3a:d9:16:
                    13:ed:a0:36:b7:6f:cc:10:06:f1:53:4d:a3:5f:a5:
                    4e:65:09:94:b6:c0:97:b5:14:e3:fb:3e:63:d1:3b:
                    d7:a7:3b:47:16:ca:0a:96:ee:5c:79:a0:de:31:59:
                    ac:93:ee:13:ea:34:45:18:a4:20:f1:d2:f6:1a:f1:
                    ea:8c:ae:51:9a:dc:6b:57:9a:cc:8c:57:b1:e7:75:
                    ba:ac:da:1c:06:7c:38:55:29:a2:f3:e0:49:e5:58:
                    3e:03:1d:2a:3b:56:e8:73:10:88:cc:f3:01:ac:9a:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:E9:61:20:31:7E:E3:50:A8:34:D4:0D:BC:1C:8F:D9:F2:A7:5D
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:21:bb:10:d2:b5:d2:e0:f5:fd:48:15:19:59:65:67:0f:
         42:f6:60:f4:c0:38:6a:81:cd:50:95:04:a0:e1:c7:7d:15:4c:
         ad:55:5c:e5:c5:cf:8b:ab:0b:8b:7d:be:1e:ff:d2:fc:90:6d:
         20:04:25:5a:1a:ec:58:5d:63:7c:b7:d8:02:15:f2:85:86:2a:
         4c:99:fa:9e:2c:6e:41:fa:56:1c:aa:45:4c:55:3e:20:55:e0:
         46:f7:62:d8:a4:3b:12:b4:ee:af:f4:d3:5d:86:f4:f1:36:f4:
         a7:3d:65:0c:53:03:c0:aa:2f:81:bc:8f:4b:6e:2a:44:eb:2d:
         4b:d1:eb:cd:32:48:53:18:56:30:20:cb:d5:77:cd:83:f0:46:
         d3:87:de:cd:9f:30:f0:2e:55:b9:34:e4:70:4e:ee:6b:6b:d3:
         1a:76:91:af:02:33:55:50:83:f7:23:42:ae:40:5e:e3:98:20:
         44:dd:20:31:55:86:fe:0d:14:b4:8a:b8:ea:df:99:a7:ac:cd:
         50:b2:42:c8:f6:54:35:41:b2:a1:42:ae:31:fd:ec:88:8f:d3:
         80:1f:42:a3:c2:f8:44:d6:4f:8c:09:ba:71:0c:3b:cb:66:9f:
         d7:b8:41:5c:4d:d9:40:ec:de:6f:c5:b7:c9:c2:ec:a1:3a:76:
         a7:67:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:26 2026 by rpki-client