Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa
File:                     34352e3136362e32302e302f32322d3234203d3e20323634313035.roa (raw, json)
Hash identifier:          K2TKjNjChlsgKDIj0ys0/Uki/VtyPe4EJnXV3O/ZLSM=
Subject key identifier:   AC:06:4E:2F:BC:71:56:F9:44:04:9F:23:95:F0:2C:95:83:AB:DC:B7
Certificate issuer:       /CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
Certificate serial:       311225AFC4BADF530181ED93E5350EA89A2129E3
Authority key identifier: E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa
Signing time:             Thu 05 Feb 2026 13:28:00 +0000
ROA not before:           Thu 05 Feb 2026 13:23:00 +0000
ROA not after:            Thu 04 Feb 2027 13:28:00 +0000
asID:                     264105
IP address blocks:        45.166.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl
                          rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:12:25:af:c4:ba:df:53:01:81:ed:93:e5:35:0e:a8:9a:21:29:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
        Validity
            Not Before: Feb  5 13:23:00 2026 GMT
            Not After : Feb  4 13:28:00 2027 GMT
        Subject: CN=AC064E2FBC7156F944049F2395F02C9583ABDCB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:c9:3c:c3:25:bc:d1:aa:3c:a2:18:17:ec:
                    70:29:a3:52:2d:43:27:50:ff:70:eb:96:67:46:85:
                    14:bc:fb:44:16:58:8f:9e:29:70:6a:33:ff:8b:d7:
                    ee:7c:d7:ea:f7:37:94:59:71:9e:30:7f:7f:58:c1:
                    0c:9d:28:93:2e:60:f8:5c:7f:01:0b:86:81:01:17:
                    9e:7d:bc:17:a8:84:0e:39:39:24:39:0c:f2:23:95:
                    7f:8e:54:72:09:b6:ad:98:ac:34:59:60:52:cf:18:
                    bd:72:68:f4:38:c8:e3:ab:45:53:ef:fc:ca:95:6a:
                    5a:24:cf:f4:09:41:8d:ac:52:c3:a3:91:dc:da:92:
                    49:1e:9f:3d:30:b7:63:a8:37:f1:1d:49:c8:64:e9:
                    43:b4:08:71:f5:c3:43:e2:42:c6:d3:59:ce:0d:fb:
                    cb:ea:00:32:4a:b5:31:35:bb:e8:d8:c1:6a:37:3e:
                    d3:18:92:da:78:35:17:14:d3:39:88:41:4e:ca:81:
                    c5:21:ad:7f:5d:e2:d1:32:68:e8:bd:34:8b:84:fb:
                    98:f7:d2:af:80:7a:54:e6:f9:f3:61:d9:7c:89:d4:
                    2c:90:b1:37:1c:44:df:03:61:d7:0f:bd:7f:ea:7e:
                    db:48:bf:ed:b9:09:e6:25:9d:1b:c2:bd:fe:5e:79:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:06:4E:2F:BC:71:56:F9:44:04:9F:23:95:F0:2C:95:83:AB:DC:B7
            X509v3 Authority Key Identifier:
                keyid:E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:f3:d0:1c:7c:2a:23:76:99:2b:78:97:98:2c:64:1a:a2:
         a7:cc:3a:ad:a1:ec:06:00:fa:de:56:67:2b:6d:6c:84:e0:d0:
         38:73:36:db:84:65:cd:28:95:22:67:f0:14:9a:79:b4:b9:ea:
         f2:83:c0:a8:95:59:44:e2:e7:fe:9c:a1:f9:0f:b9:ca:5f:5b:
         42:77:2a:ab:9a:e2:61:da:9b:f1:a5:00:79:32:e7:bb:70:e2:
         86:50:d1:c9:80:3d:8d:6a:6f:84:81:66:a7:88:f1:84:cd:f4:
         93:50:a2:07:e7:24:8d:18:8a:a7:e7:46:40:23:25:54:40:d0:
         c4:72:0d:b9:d5:3e:77:22:d6:e6:ca:f2:00:21:08:83:9a:7c:
         f5:de:54:3f:52:83:2a:65:c2:52:e3:7c:2b:5f:59:6b:3f:ae:
         d9:62:fe:51:94:78:d0:5d:50:f8:41:bb:63:d7:30:0f:bd:91:
         b9:2c:ce:fd:05:9b:ee:e8:f3:19:2b:39:11:bf:cc:58:6e:ff:
         e2:ba:ee:a8:18:3f:9b:73:db:d5:d7:37:6b:68:b8:73:72:06:
         79:3a:2f:54:05:42:9a:be:38:1f:d7:f9:26:fd:59:9c:03:d6:
         40:56:f8:46:0d:ae:ff:79:4b:bc:b2:fb:f5:60:a5:66:13:29:
         4e:2f:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:27 2026 by rpki-client