Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          0eyF3jxkiTqMJPvWvaIXaVQw4yclLCkPekb7F/LOg8c=
Subject key identifier:   EB:66:C4:AC:97:89:E7:74:C0:62:85:55:65:55:96:D0:CD:E3:EC:A8
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       0911A2FABF7471460054779D272C5A675BE31B7A
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
Signing time:             Thu 05 Feb 2026 10:00:21 +0000
ROA not before:           Thu 05 Feb 2026 09:55:21 +0000
ROA not after:            Thu 04 Feb 2027 10:00:21 +0000
asID:                     269128
IP address blocks:        45.180.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:11:a2:fa:bf:74:71:46:00:54:77:9d:27:2c:5a:67:5b:e3:1b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Feb  5 09:55:21 2026 GMT
            Not After : Feb  4 10:00:21 2027 GMT
        Subject: CN=EB66C4AC9789E774C0628555655596D0CDE3ECA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:9e:21:8e:b7:07:88:28:e8:c0:9b:53:82:
                    61:b3:9f:bf:0d:dc:73:0c:8d:dc:d1:22:02:c3:92:
                    13:26:08:07:ff:c8:9b:e9:61:c1:2d:7e:c6:df:72:
                    f7:1e:c4:5c:5e:5a:ce:57:1d:e4:58:1a:9b:57:00:
                    75:56:2a:bd:42:b6:01:0f:0b:57:cf:28:6c:53:24:
                    fd:48:eb:3e:6a:e0:c8:c3:d5:40:72:f1:48:27:0d:
                    6e:46:c7:48:bb:e6:d2:c1:ca:3d:33:02:fc:b0:3c:
                    83:07:b7:5d:cb:74:d7:d2:d6:a7:37:1c:44:d3:ba:
                    63:07:9b:ea:f4:e4:10:6e:51:82:e1:91:50:f7:55:
                    af:4d:72:f5:33:dd:c1:7b:f0:38:bb:5a:b5:f7:e8:
                    9a:9d:9f:d1:62:42:84:2d:3e:f7:0a:5f:20:8c:22:
                    19:7d:b6:49:c9:3d:6a:55:af:b8:d2:f9:59:3c:14:
                    c5:e4:a9:fb:a4:1b:2e:3e:24:fa:32:02:3c:0d:b6:
                    73:10:b5:23:b9:13:70:7b:be:47:d7:90:f5:c7:d6:
                    bb:20:3a:1b:47:ea:ba:9e:ab:76:c6:dd:83:e9:09:
                    df:d1:da:b7:d0:91:95:c2:f6:87:45:4c:ab:c6:e7:
                    c0:c3:c8:b1:e3:0f:91:e4:59:8f:73:6a:8a:b4:9f:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:C4:AC:97:89:E7:74:C0:62:85:55:65:55:96:D0:CD:E3:EC:A8
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:fb:e0:f0:3d:8c:40:36:8e:93:53:d4:cd:4f:84:7a:f4:
         11:af:f5:47:a3:cd:d0:43:6a:2e:c1:3b:fa:20:d3:b4:72:7e:
         9b:9b:d7:7a:f0:8a:a0:dd:39:53:f4:86:c9:84:65:3b:67:58:
         3e:ba:bc:42:30:14:14:d7:83:2a:4a:8c:f5:18:0e:4c:2f:34:
         0d:17:81:88:2d:4f:ac:7c:0a:4f:46:e1:3c:04:ea:02:cc:e1:
         56:36:a9:59:9e:de:69:09:62:a6:56:34:5a:b5:ab:88:ef:7c:
         00:88:d7:e9:e2:94:bd:b4:3c:16:b7:8e:6a:0f:f5:8f:ce:a5:
         ef:a4:18:16:8c:1e:28:8a:e8:13:b2:50:86:09:39:b8:50:96:
         f6:95:ef:04:6a:24:73:ec:47:63:ff:8f:27:9c:e9:1a:a6:0d:
         df:39:b1:20:7c:cc:5c:3b:4b:77:ce:cd:c1:66:36:7f:0d:46:
         76:9a:14:0f:62:2c:fd:3e:ea:2f:45:a6:6d:97:0e:8f:14:aa:
         1a:2c:9c:09:37:d7:4f:15:af:08:5c:e0:5a:2c:2a:3c:56:ee:
         5d:6d:cc:d8:8a:11:c8:fa:07:b1:56:da:0e:a7:35:77:6d:75:
         05:a9:84:ab:a8:91:86:28:ef:2a:f5:cd:d1:f1:2a:f0:eb:25:
         e4:2d:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:15 2026 by rpki-client