Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
File:                     34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa (raw, json)
Hash identifier:          6Y+GJNINdBdntN132Otci3NtyqNX7hRbY6eMCOHhNqk=
Subject key identifier:   EA:12:CC:8A:F4:95:EB:E6:D1:A0:2B:CA:EC:AD:15:01:42:84:F3:FE
Certificate issuer:       /CN=83318EF9934F62654EC63A75033AEDCCD1657C52
Certificate serial:       0448597BDCFEB780A55C60158496F210D60496C5
Authority key identifier: 83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
Signing time:             Wed 04 Feb 2026 20:28:47 +0000
ROA not before:           Wed 04 Feb 2026 20:23:47 +0000
ROA not after:            Wed 03 Feb 2027 20:28:47 +0000
asID:                     268482
IP address blocks:        45.239.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl
                          rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:48:59:7b:dc:fe:b7:80:a5:5c:60:15:84:96:f2:10:d6:04:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83318EF9934F62654EC63A75033AEDCCD1657C52
        Validity
            Not Before: Feb  4 20:23:47 2026 GMT
            Not After : Feb  3 20:28:47 2027 GMT
        Subject: CN=EA12CC8AF495EBE6D1A02BCAECAD15014284F3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:68:52:4f:f2:3b:1f:5a:8a:65:1f:b0:8b:
                    07:18:f1:3d:d8:30:82:ea:1b:f2:f8:b3:d6:6c:c7:
                    11:a5:1b:e7:f9:e3:fd:fd:c0:36:52:1d:ae:9e:03:
                    16:10:8c:be:b0:2b:33:28:d6:55:42:e0:66:89:89:
                    12:74:a4:d5:a0:ce:b9:3a:0f:b8:b5:32:f8:cf:05:
                    3c:c5:d2:5e:fe:35:31:9e:f3:3e:2d:6c:86:07:ba:
                    52:dc:36:86:19:c3:9f:d3:d7:d0:0c:c9:84:34:b9:
                    09:5c:e2:52:71:e3:3f:0d:2d:38:f4:ef:17:92:f6:
                    c1:58:25:6a:f2:d9:c0:b4:1d:59:e8:98:7e:35:d3:
                    46:9d:a9:d4:c7:3d:73:3e:32:d3:0b:47:ba:4d:e7:
                    21:c2:ff:2b:34:c8:e9:33:0b:ff:b1:55:bb:8a:a6:
                    01:3f:07:79:d5:12:33:b0:7d:ea:90:d3:8a:c2:fb:
                    8d:d1:6d:d7:db:fd:b5:c7:99:2c:5e:34:10:df:5f:
                    e8:a2:92:23:f0:a8:2b:7f:c2:3e:1a:06:1b:c7:e6:
                    ee:86:b4:35:4a:9f:b5:e8:7f:df:c4:a1:e6:13:92:
                    6b:f9:7b:34:bd:66:95:cf:cd:f9:35:cd:d2:45:4d:
                    6f:0b:b5:72:b0:97:41:65:a6:5d:0e:21:3b:09:4e:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:CC:8A:F4:95:EB:E6:D1:A0:2B:CA:EC:AD:15:01:42:84:F3:FE
            X509v3 Authority Key Identifier:
                keyid:83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:0b:8b:ce:62:97:72:df:20:80:ec:6f:a3:e4:92:af:b7:41:
         4d:64:b9:bb:67:64:be:8f:b2:47:a7:f4:e1:92:31:b0:49:79:
         31:31:de:d0:f0:6c:4a:7e:ea:35:71:fa:f4:08:a5:f9:d9:a0:
         b0:03:a8:0d:8b:55:87:10:4e:3a:cb:0c:4c:0a:2b:9e:96:0c:
         0d:11:47:f1:52:1d:f8:bd:ac:d7:8d:51:c1:2d:67:b6:d5:b6:
         d9:12:85:e2:d9:34:10:b9:2b:08:e2:ca:eb:04:a1:66:ee:f7:
         09:61:94:36:ea:1a:58:27:56:4d:2d:88:59:ee:42:f8:93:fb:
         11:d6:0e:4e:fc:31:ef:22:8a:44:4a:7a:92:7f:4d:b9:87:f5:
         2f:23:48:36:c4:5e:e1:09:0f:13:13:e9:da:94:ce:06:2a:bc:
         dd:2b:7a:61:4f:28:ed:f7:08:97:bb:d9:fd:86:85:3b:45:95:
         8b:6e:bf:3a:f9:65:2b:e2:d5:61:ce:bb:41:f4:fa:9b:6c:34:
         ce:b7:d1:9f:d4:e9:53:da:b3:2a:50:46:0a:1c:71:00:d6:58:
         02:bb:89:15:88:83:c8:f1:fa:3f:f4:0f:b4:e0:d8:fc:fa:5b:
         b7:e7:59:4c:1c:70:d5:a2:0c:39:a0:d7:44:ce:6b:36:47:72:
         3c:fc:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:06 2026 by rpki-client