Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa
File:                     34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (raw, json)
Hash identifier:          iCx3xg5krG4iM1lxR5uLVHmBRX1kEx0SfB2Sj+RKTHA=
Subject key identifier:   26:55:1A:93:24:FE:00:A4:BF:05:EE:2F:3B:74:F7:58:D4:E3:9A:F9
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       157D2C41D98A5F9754AF83C179A321D043518A75
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa
Signing time:             Fri 06 Feb 2026 19:00:01 +0000
ROA not before:           Fri 06 Feb 2026 18:55:01 +0000
ROA not after:            Sat 06 Feb 2027 19:00:01 +0000
asID:                     268881
IP address blocks:        45.175.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7d:2c:41:d9:8a:5f:97:54:af:83:c1:79:a3:21:d0:43:51:8a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Feb  6 18:55:01 2026 GMT
            Not After : Feb  6 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:c7:e6:ca:ec:9d:60:d6:16:fb:80:ee:5d:
                    23:32:3b:e5:e0:d8:d0:11:b9:30:7e:1c:17:d1:c2:
                    78:6f:e9:ad:1d:11:05:6c:a8:cf:0e:eb:9f:4e:b1:
                    15:cc:91:7a:ee:72:ec:03:eb:4c:db:28:34:88:fc:
                    ce:d4:82:bd:25:b8:d6:7f:04:cc:4e:1d:72:4b:ed:
                    73:87:65:9e:47:6b:b7:a4:c0:92:8d:69:e3:fd:04:
                    68:8f:a7:e9:dd:aa:3b:82:10:31:e7:df:2b:db:70:
                    62:79:95:89:74:94:24:66:61:57:7f:cf:d3:a6:ce:
                    90:81:83:66:f9:67:4d:10:f1:cb:ad:a9:5a:fb:42:
                    e3:00:5a:68:5c:d1:f9:bc:88:ce:65:ba:4d:99:05:
                    4a:9d:82:af:78:f7:37:3e:4e:91:f6:1a:c0:68:47:
                    cc:a9:b9:e2:07:eb:71:41:67:ee:2f:67:f4:89:74:
                    9d:14:fc:b4:2c:21:0b:bb:60:e6:20:92:10:a9:2e:
                    0b:95:96:12:04:12:e4:e0:db:1f:70:1f:c3:4c:f0:
                    2b:7f:be:6b:d0:ff:c0:6a:37:66:87:14:8f:93:40:
                    91:92:bd:12:34:ca:80:b0:ea:5b:3f:bc:68:31:d2:
                    ec:3f:de:63:30:5a:b8:ce:4f:01:c0:8f:89:6c:ae:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:1A:93:24:FE:00:A4:BF:05:EE:2F:3B:74:F7:58:D4:E3:9A:F9
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:01:ad:b0:ea:f5:70:62:37:20:09:05:0d:31:23:8f:b0:
         44:75:17:07:ce:73:4f:fc:cc:98:eb:1c:46:31:d2:dc:6f:20:
         ae:fc:b9:ae:d7:0b:0f:4e:ed:0c:8d:49:fc:df:30:b0:e7:14:
         6f:02:13:8f:c7:af:46:31:12:52:b0:96:e1:6f:fd:77:92:d5:
         01:c6:1b:13:bd:02:2b:16:d7:c5:48:70:84:f0:4a:6c:ff:ad:
         84:6d:c5:8a:ba:d7:c1:1d:f6:b3:fb:45:96:92:62:2c:6e:ff:
         35:f6:7f:e9:f4:3b:0d:88:35:43:cb:b0:d1:fb:91:91:54:5c:
         f3:8a:2a:e3:7b:dc:7e:a9:0a:5a:d8:4b:a4:0e:36:50:d3:51:
         a4:ef:dc:db:0a:bf:4c:ea:f6:97:17:18:d1:29:fb:f9:b0:39:
         e2:f4:55:65:6e:91:78:5e:d8:4f:fa:f3:c2:a3:11:77:0a:f6:
         99:aa:ec:4f:c3:6a:c0:99:bb:72:c5:6c:e4:2d:74:fe:10:8f:
         80:8f:e6:22:12:36:0b:38:83:dc:bd:ac:32:4f:95:50:91:fd:
         67:49:ee:d6:93:2b:27:89:34:c0:df:0b:6b:be:6a:55:62:fa:
         6e:44:c5:ee:53:e4:7c:a0:f8:76:8d:10:b2:3f:c8:d0:6a:ae:
         18:85:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:43 2026 by rpki-client