Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
File:                     34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          i4BSeSbhnMSJBSl2EdliMJklfYhh0WftCF9698okUmA=
Subject key identifier:   FA:00:C1:B0:6C:F1:89:18:71:25:A8:F3:94:30:FD:C6:52:2A:95:CB
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       59F1CD8491B459238DDE17996B13C1B76643C5C3
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
Signing time:             Wed 04 Feb 2026 12:15:01 +0000
ROA not before:           Wed 04 Feb 2026 12:10:01 +0000
ROA not after:            Wed 03 Feb 2027 12:15:01 +0000
asID:                     263665
IP address blocks:        45.227.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f1:cd:84:91:b4:59:23:8d:de:17:99:6b:13:c1:b7:66:43:c5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  4 12:10:01 2026 GMT
            Not After : Feb  3 12:15:01 2027 GMT
        Subject: CN=FA00C1B06CF189187125A8F39430FDC6522A95CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:82:8a:9d:fc:c1:d0:d5:50:ca:c1:dc:ab:
                    96:55:1a:1a:f7:8c:c6:23:bb:d4:e8:82:50:21:64:
                    5a:07:3f:8c:de:57:95:b1:69:d2:d0:11:d9:6b:a9:
                    90:62:6a:e7:4a:f2:87:37:5f:f6:74:c1:d8:b0:ec:
                    cd:50:36:5e:f1:8c:83:9a:64:9c:ac:5f:60:20:ac:
                    41:7a:4b:72:83:44:b0:5f:d6:84:25:44:9d:60:e2:
                    0e:e5:06:d4:73:17:89:0d:6b:71:02:50:c9:8c:96:
                    74:ce:47:7f:06:34:6f:0d:86:ba:88:4c:9d:79:25:
                    f0:1c:f8:38:a3:b8:fa:d4:d8:1c:c4:7d:76:36:17:
                    79:da:c7:de:a9:6e:0d:30:ad:25:66:cd:f5:ad:7e:
                    e9:ce:03:51:3b:06:32:82:71:98:36:c4:aa:49:23:
                    87:2d:80:43:24:c6:ad:b7:f1:fc:74:7a:38:7d:eb:
                    81:f4:ff:6c:99:ea:70:80:e8:d2:97:c6:e4:fc:c4:
                    51:37:c8:84:a8:68:d9:d7:20:c9:a3:45:bf:25:35:
                    0a:4f:7e:84:97:40:82:f8:d3:35:fb:04:73:eb:c3:
                    99:f2:ae:85:b5:e7:1b:ca:58:48:21:c4:2f:4e:74:
                    c7:fd:8c:4f:27:00:98:87:48:19:89:f7:b5:84:64:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:C1:B0:6C:F1:89:18:71:25:A8:F3:94:30:FD:C6:52:2A:95:CB
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:0a:ec:e1:ee:1d:80:bc:6a:9b:51:92:cb:97:67:ba:32:
         67:4d:c9:47:48:7c:c9:cd:8d:8e:b7:f3:2d:03:10:0b:81:c5:
         61:71:aa:18:1b:d1:64:5d:74:fd:9d:2e:42:3f:fb:82:41:af:
         4e:c2:1f:ea:dc:e4:4a:eb:5c:bc:58:f1:6d:c1:5a:58:37:6e:
         2b:3a:23:ce:e3:b9:97:29:e8:32:0c:e1:98:b9:09:0b:25:16:
         eb:c4:d0:f4:6c:ea:a3:e5:66:9e:b2:1f:88:91:8c:c9:8f:fe:
         e2:ef:69:ae:7e:27:c2:9a:cd:bf:16:9d:ba:c2:a1:b7:64:c5:
         6e:59:8a:41:c4:24:2b:75:26:66:e4:49:5a:40:22:c8:d7:5a:
         80:fa:2a:85:70:86:e0:52:56:68:00:08:45:2a:19:78:4a:14:
         69:86:a0:f8:22:6a:d5:a3:74:8b:03:e2:96:db:0d:c7:79:46:
         04:85:28:28:bb:89:f2:ad:6e:f6:e0:d7:10:08:6e:b5:c1:fe:
         88:fa:28:12:57:27:37:2b:14:7c:bf:f8:39:35:eb:1c:7a:13:
         07:ab:54:44:bd:8c:18:50:bf:c1:c9:40:9e:bf:cd:f7:75:72:
         81:82:32:39:c8:cb:b1:62:07:73:43:a0:09:c0:8f:b7:8f:eb:
         45:0f:4f:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWfHNhJG0WSON3heZaxPBt2ZDxcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RDUyQjRBMjY1QTU5OTE4NzEzMzhFRENENTBDMUQx
REVDRTZEMTAeFw0yNjAyMDQxMjEwMDFaFw0yNzAyMDMxMjE1MDFaMDMxMTAvBgNV
BAMTKEZBMDBDMUIwNkNGMTg5MTg3MTI1QThGMzk0MzBGREM2NTIyQTk1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6YKKnfzB0NVQysHcq5ZVGhr3
jMYju9ToglAhZFoHP4zeV5WxadLQEdlrqZBiaudK8oc3X/Z0wdiw7M1QNl7xjIOa
ZJysX2AgrEF6S3KDRLBf1oQlRJ1g4g7lBtRzF4kNa3ECUMmMlnTOR38GNG8NhrqI
TJ15JfAc+DijuPrU2BzEfXY2F3nax96pbg0wrSVmzfWtfunOA1E7BjKCcZg2xKpJ
I4ctgEMkxq238fx0ejh964H0/2yZ6nCA6NKXxuT8xFE3yISoaNnXIMmjRb8lNQpP
foSXQIL40zX7BHPrw5nyroW15xvKWEghxC9OdMf9jE8nAJiHSBmJ97WEZIgpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+gDBsGzxiRhxJajzlDD9xlIqlcswHwYDVR0j
BBgwFoAUGZ1StKJlpZkYcTOO3NUMHR3s5tEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC8xOTlENTJCNEEyNjVBNTk5MTg3MTMzOEVEQ0Q1MEMxRDFERUNFNkQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUQ1MkI0QTI2NUE1OTkx
ODcxMzM4RURDRDUwQzFEMURFQ0U2RDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzQzNTJlMzIzMjM3MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt47wwDQYJKoZIhvcNAQELBQADggEBAEMPCuzh
7h2AvGqbUZLLl2e6MmdNyUdIfMnNjY638y0DEAuBxWFxqhgb0WRddP2dLkI/+4JB
r07CH+rc5ErrXLxY8W3BWlg3bis6I87juZcp6DIM4Zi5CQslFuvE0PRs6qPlZp6y
H4iRjMmP/uLvaa5+J8Kazb8WnbrCobdkxW5ZikHEJCt1JmbkSVpAIsjXWoD6KoVw
huBSVmgACEUqGXhKFGmGoPgiatWjdIsD4pbbDcd5RgSFKCi7ifKtbvbg1xAIbrXB
/oj6KBJXJzcrFHy/+Dk16xx6EwerVES9jBhQv8HJQJ6/zfd1coGCMjnIy7FiB3ND
oAnAj7eP60UPT9k=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:31 2026 by rpki-client