Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
File:                     34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          CWPLFQGExfrvjoFFrNxnSM/JpYzdzyT16Mlsc0RBoMA=
Subject key identifier:   5E:34:44:82:0C:46:78:EF:F9:3D:DB:31:60:1D:A1:A7:09:73:49:BD
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       16B79DE83ED8DC72C269758E13A8B59B84B0F665
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     266211
IP address blocks:        45.229.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:9d:e8:3e:d8:dc:72:c2:69:75:8e:13:a8:b5:9b:84:b0:f6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:3a:b8:79:2b:4a:66:a4:bb:fb:28:b4:69:
                    ca:84:0c:f1:90:00:9a:3d:7e:85:8c:fe:b4:89:5e:
                    72:7b:37:1f:69:a6:e4:ca:8f:50:db:1d:95:87:25:
                    a9:99:1f:0d:1e:a9:50:b7:05:c9:c4:05:01:d1:83:
                    a3:bf:e6:5d:47:44:75:23:44:15:9b:1e:3e:80:26:
                    81:cd:b6:9d:34:80:41:87:7b:5b:91:7b:9f:54:41:
                    ff:6f:ff:4b:2f:44:88:b7:f9:28:dd:b0:9f:f0:09:
                    71:46:b6:10:b9:5e:00:69:e1:b5:27:cb:bb:ed:1b:
                    20:eb:6e:6e:fc:63:1b:87:ca:3a:1a:37:ef:79:f5:
                    b6:2f:d2:f2:33:bf:ad:09:f5:ac:12:d4:3f:eb:c0:
                    38:0b:ff:19:2a:d4:59:42:99:2f:64:7c:8a:b6:e3:
                    51:c7:11:72:75:6c:eb:7d:36:8b:41:f0:c4:04:13:
                    f5:e3:86:22:14:8a:ad:83:09:46:35:9f:c5:ef:3c:
                    1d:d7:82:02:9f:95:1c:d3:c3:ff:41:8b:38:e5:17:
                    8b:88:58:44:a5:4d:3f:c3:cd:0a:ce:50:31:5e:af:
                    28:c5:44:7a:60:92:2f:8d:de:9b:e6:9a:88:5c:2a:
                    7f:f3:58:64:d0:5c:1c:af:a1:c3:c5:11:2b:d2:0c:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:44:82:0C:46:78:EF:F9:3D:DB:31:60:1D:A1:A7:09:73:49:BD
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:4b:cc:63:96:27:69:28:f3:8e:e3:5e:d2:c3:77:e3:37:
         be:bf:77:58:aa:79:d4:f5:b0:4f:14:68:a6:b2:de:cc:8c:25:
         ea:72:61:b1:2d:b5:cb:c2:24:ee:eb:d8:be:fe:e6:a4:30:37:
         70:ff:19:9c:2b:62:7c:93:cc:7a:4d:69:4a:0e:6c:9a:86:29:
         0e:b6:e9:10:7c:61:fb:10:04:da:f8:54:91:60:b1:56:14:cb:
         42:d6:ea:a8:0c:63:7f:1c:a9:99:47:ee:ed:2a:b3:ab:9c:34:
         97:f4:6f:d1:68:81:18:39:b6:e7:ad:93:b7:74:e2:9d:60:a4:
         81:47:af:47:75:80:91:de:5a:ed:b3:00:6c:e5:b8:37:bd:7f:
         d6:8b:38:b9:35:13:f9:b5:d1:de:53:8b:3a:80:d4:6d:e4:47:
         ca:87:40:cf:03:7e:b1:fd:f0:14:7c:3b:d4:28:5b:c5:f4:37:
         0e:05:31:4e:98:bf:6b:47:91:51:df:5e:e8:af:5d:b3:e3:7f:
         52:7c:f3:a3:c0:ec:55:80:43:ba:be:99:d9:ea:ac:76:5f:d2:
         59:45:bc:0a:97:35:3e:3f:54:cb:46:b8:73:22:0f:e9:10:b0:
         a7:ed:05:32:57:ad:58:33:cd:bd:c7:bf:df:73:17:71:02:17:
         ae:01:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:28 2026 by rpki-client