Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
File:                     34352e3233332e34342e302f32322d3332203d3e20323637323933.roa (raw, json)
Hash identifier:          GNIMlywxUIVZTouBPiiO4V6WoAra0CE/pRR3eJwHmsY=
Subject key identifier:   E7:E7:13:19:1A:48:78:8B:7D:23:23:E2:5D:6E:B5:57:E2:44:65:04
Certificate issuer:       /CN=910494A18C7A628293563A78776F129AEA078B88
Certificate serial:       418D961F23617F5800832E1CDD2B831B1DD66F69
Authority key identifier: 91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
Signing time:             Wed 04 Feb 2026 22:00:24 +0000
ROA not before:           Wed 04 Feb 2026 21:55:24 +0000
ROA not after:            Wed 03 Feb 2027 22:00:24 +0000
asID:                     267293
IP address blocks:        45.233.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl
                          rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:96:1f:23:61:7f:58:00:83:2e:1c:dd:2b:83:1b:1d:d6:6f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910494A18C7A628293563A78776F129AEA078B88
        Validity
            Not Before: Feb  4 21:55:24 2026 GMT
            Not After : Feb  3 22:00:24 2027 GMT
        Subject: CN=E7E713191A48788B7D2323E25D6EB557E2446504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:59:00:e2:87:b3:6b:0d:9b:c2:61:ec:c8:ba:
                    f9:7c:e1:22:3a:68:52:de:87:b2:4f:d0:ab:84:d4:
                    f9:36:f2:b7:cc:99:60:7c:05:41:5a:8a:4b:34:a4:
                    41:38:85:c5:ea:67:59:79:ab:14:80:1a:7c:bc:3d:
                    e0:a9:6c:e1:6e:46:3a:85:96:39:98:5b:29:f9:db:
                    5f:98:4a:21:3a:89:65:3a:27:28:c3:5e:63:8f:bf:
                    39:ca:98:d8:ab:20:1a:ec:a5:b9:72:32:26:14:30:
                    30:df:ed:d7:a8:30:4b:c4:0c:e1:7c:bd:71:ab:a7:
                    d6:37:d4:c8:b1:45:48:b4:03:66:d5:16:45:72:dd:
                    4c:db:29:e2:c8:5d:5c:45:5d:bd:c9:93:56:32:79:
                    15:63:54:45:30:49:e7:3d:bd:f7:61:cb:92:c7:79:
                    34:dc:13:0d:d3:66:c5:e4:8d:6d:f5:a7:39:50:79:
                    6b:2a:e3:fc:7c:73:09:11:61:91:da:db:29:47:5c:
                    6c:40:21:00:e2:35:6b:90:55:da:cf:30:b1:d2:b3:
                    97:f6:4e:fd:a4:89:84:52:b2:a0:0d:74:dd:4d:1a:
                    5c:71:8e:27:fc:f0:56:d4:f4:93:8e:84:9f:be:7a:
                    42:bd:23:01:55:ed:f0:8c:6f:cc:10:66:e9:1f:5c:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:13:19:1A:48:78:8B:7D:23:23:E2:5D:6E:B5:57:E2:44:65:04
            X509v3 Authority Key Identifier:
                keyid:91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:31:37:d1:13:eb:9c:87:4a:dd:04:40:47:f3:f6:30:3a:cc:
         d4:f2:7d:10:7e:30:40:d9:48:2f:40:98:2a:2a:8c:df:63:88:
         84:53:58:de:9c:2d:33:5b:01:ac:2a:2e:91:4d:34:b5:e1:aa:
         b9:36:4c:ea:df:8b:60:a6:04:ce:49:99:82:f1:02:33:93:43:
         cf:da:2e:26:79:5c:68:d5:cb:ce:53:cb:82:bd:a6:2a:1a:fd:
         f8:05:4f:1c:e9:41:5e:20:d3:0b:78:73:e1:fb:ea:75:35:9e:
         af:cf:9f:2e:0d:b9:09:6e:09:43:33:96:b2:34:b5:25:c5:ce:
         46:23:40:2e:e6:94:77:b1:d8:c8:55:80:c4:54:76:74:86:43:
         4a:7c:b2:92:b9:97:d7:0a:4d:90:b7:07:40:35:7e:d6:36:35:
         55:2f:f3:9e:96:eb:cc:1d:34:b1:e5:b1:b0:5c:32:eb:11:4c:
         96:4e:00:21:66:3e:18:87:09:86:1e:0c:8d:15:e0:b5:8f:00:
         71:d9:2b:de:be:be:4a:d1:dd:f0:64:14:38:c9:db:9c:d8:70:
         d6:75:c4:a0:80:c1:cc:60:8a:aa:f5:ad:91:eb:77:8e:17:8d:
         ab:b2:84:91:8a:7b:c2:05:0d:30:53:94:51:81:6a:9f:98:d2:
         02:ce:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:16 2026 by rpki-client