Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          P76wIP2is1D+fDVhf/iE6swwxFW9BMmI5bF4u2ueRX8=
Subject key identifier:   00:7B:41:91:8B:B3:0F:59:E1:AF:B8:58:F2:77:48:89:17:19:D3:BC
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       251F3BB73B010550220E2B66A791DE2CAA78D2D6
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
Signing time:             Thu 05 Feb 2026 10:00:21 +0000
ROA not before:           Thu 05 Feb 2026 09:55:21 +0000
ROA not after:            Thu 04 Feb 2027 10:00:21 +0000
asID:                     269128
IP address blocks:        45.180.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:3b:b7:3b:01:05:50:22:0e:2b:66:a7:91:de:2c:aa:78:d2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Feb  5 09:55:21 2026 GMT
            Not After : Feb  4 10:00:21 2027 GMT
        Subject: CN=007B41918BB30F59E1AFB858F27748891719D3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:ef:1b:0f:6d:0a:04:a4:86:6a:1a:68:12:
                    85:b2:5a:7e:51:3a:f6:00:ab:a2:de:6e:c6:5e:0a:
                    6b:62:8f:79:59:6e:54:90:e6:a8:2e:be:fa:a7:ba:
                    d3:7f:60:f3:e2:71:48:a0:5a:dc:02:23:2c:c8:3e:
                    4e:44:84:d2:6e:14:61:83:63:59:b3:f8:4d:3d:db:
                    eb:12:37:18:96:5e:cc:cb:b4:ec:34:2f:5e:79:c3:
                    79:52:7f:9c:3f:57:ae:0a:82:85:e1:db:d5:53:27:
                    6a:6b:d8:f8:e7:08:81:0b:25:2d:86:58:3c:c9:6b:
                    0e:20:22:dc:2e:78:ce:c9:ef:7d:e6:f6:fe:2f:70:
                    ca:a7:5b:97:d0:e9:a4:c4:79:9e:2a:bd:c6:b8:1b:
                    7a:6d:27:3a:0f:46:2d:5b:ab:d4:39:11:09:42:d6:
                    b8:85:be:16:f9:d2:7f:65:70:c8:d0:06:5c:b8:88:
                    85:1f:98:9a:c8:21:92:40:67:36:09:5a:4e:ab:07:
                    34:f4:4b:59:d4:ff:87:d0:8e:90:86:57:68:2a:a0:
                    02:12:b8:28:43:97:64:30:9d:c1:07:2d:07:30:59:
                    7a:1f:74:0a:e4:02:2e:e8:c6:5d:c2:94:f4:9a:e1:
                    99:a5:bd:d0:1a:72:c2:f9:19:f6:4d:44:56:d7:5c:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:41:91:8B:B3:0F:59:E1:AF:B8:58:F2:77:48:89:17:19:D3:BC
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:e2:5f:34:c5:66:98:95:a5:8a:99:78:e1:07:d3:f6:30:
         c0:61:df:9b:be:ae:4d:f0:d4:a8:19:c6:05:13:78:cf:4a:2d:
         c0:23:9b:bd:0f:42:cb:7d:00:09:ba:52:1a:ef:97:09:8b:07:
         66:65:57:a4:78:20:c8:d1:99:5f:ba:1b:cb:8e:ea:a1:71:e2:
         fc:a0:c2:64:b9:d3:34:bc:4e:68:5b:2c:b1:81:a9:ab:70:6e:
         66:3b:09:90:e9:78:6e:9b:4e:1b:23:9f:0b:74:15:94:2d:e9:
         35:67:53:04:dc:b9:fd:15:de:cc:6a:f7:e9:d8:b0:39:a7:ff:
         a5:8c:e5:79:aa:d8:78:32:eb:cb:ce:e3:be:0d:f7:46:c3:c0:
         42:7e:e6:28:bf:85:2f:93:b2:59:0a:27:1a:25:a1:5a:db:7d:
         d3:7b:41:c1:64:05:01:1f:1e:4f:48:e3:1a:f9:93:38:29:3b:
         64:5e:4d:54:9f:5f:b1:b4:92:67:8b:e0:cc:8b:b4:33:98:51:
         c2:f0:3c:f2:cc:9e:6e:e9:2a:19:5e:3b:ed:b0:a5:7d:de:37:
         c1:1c:26:4e:54:80:a5:1e:28:fe:54:3b:c6:de:e4:ca:21:f2:
         3b:8d:8e:9a:e9:fb:e8:3b:62:e3:35:fd:18:bb:e0:4f:3c:36:
         c7:a9:c6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:59 2026 by rpki-client