Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
File:                     34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa (raw, json)
Hash identifier:          LebWAL8oKibwr0lZcOZl0CCZsbAGolZEI5MApoKCoBA=
Subject key identifier:   98:32:02:26:D1:F4:D1:8C:7B:6B:DE:44:46:C9:94:E0:CB:CD:8B:D3
Certificate issuer:       /CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
Certificate serial:       2F209634B9DE3128511B96C836713A35B51B27D8
Authority key identifier: E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
Signing time:             Thu 05 Feb 2026 02:29:13 +0000
ROA not before:           Thu 05 Feb 2026 02:24:13 +0000
ROA not after:            Thu 04 Feb 2027 02:29:13 +0000
asID:                     267168
IP address blocks:        45.230.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl
                          rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:96:34:b9:de:31:28:51:1b:96:c8:36:71:3a:35:b5:1b:27:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
        Validity
            Not Before: Feb  5 02:24:13 2026 GMT
            Not After : Feb  4 02:29:13 2027 GMT
        Subject: CN=98320226D1F4D18C7B6BDE4446C994E0CBCD8BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:60:90:82:de:88:30:63:f8:d5:64:02:12:
                    14:d4:45:ca:a7:08:d6:ec:92:69:a6:72:0b:bf:88:
                    c0:76:15:f0:8f:08:26:8a:52:06:43:30:c0:83:6c:
                    f0:04:a6:23:e9:09:8f:d6:56:d1:7b:a4:b0:ce:ea:
                    cf:49:8d:3e:0e:7b:38:af:ce:9f:9f:1e:e6:5a:f9:
                    12:97:47:06:90:de:05:2b:46:42:11:32:6e:bf:2d:
                    ba:d9:3d:e3:5a:d1:46:cf:62:78:b7:af:0a:8f:b5:
                    d2:32:cc:de:60:85:81:80:e1:d1:de:40:c5:08:f5:
                    43:08:2d:2a:a0:52:a6:9b:93:f0:e1:87:06:72:cf:
                    70:cb:66:af:a5:ba:bb:62:90:ae:cc:3e:ab:92:bf:
                    c0:1a:d0:b2:3d:2f:81:f1:51:fe:02:8d:8c:c5:d7:
                    3b:b3:5b:f5:62:04:56:b2:a3:87:a0:35:c5:26:06:
                    c1:2c:fe:24:fa:f8:a7:a3:00:32:b1:fb:25:a0:97:
                    87:bf:99:2e:7c:ec:54:6c:d3:3a:cf:05:f8:1e:2b:
                    42:5f:f1:59:44:27:40:4a:7e:74:58:36:6a:0e:45:
                    8a:5c:67:8b:c8:86:5d:57:65:9f:e9:9f:06:ea:19:
                    46:18:0a:d3:da:c6:5b:37:fb:5a:88:2d:e5:bf:11:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:02:26:D1:F4:D1:8C:7B:6B:DE:44:46:C9:94:E0:CB:CD:8B:D3
            X509v3 Authority Key Identifier:
                keyid:E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:08:4e:1f:56:72:c6:3d:d6:17:db:97:a1:ab:23:58:2f:
         09:35:71:9b:d3:16:67:be:07:b7:20:50:8b:f4:b5:81:7d:74:
         cb:ab:82:12:b0:c6:7c:ae:cc:df:93:72:92:07:cd:76:b4:f4:
         bc:cf:80:47:9a:9c:0a:c8:14:24:03:62:e3:61:e4:04:d0:ed:
         45:e0:df:e9:b9:1e:19:41:1a:c5:c6:07:d8:25:46:75:48:f7:
         e6:2a:9b:c9:0b:9e:0b:af:be:57:5f:85:d9:c2:98:ae:a5:3c:
         18:f4:30:88:71:e1:df:5c:e0:3f:dc:cb:85:2a:c9:b2:cb:f7:
         6d:4a:6f:50:3e:eb:d9:57:78:b3:98:5c:f7:63:6f:e5:86:3c:
         33:0a:ae:34:c2:d0:4e:57:51:fa:f4:05:35:14:bb:3a:0a:49:
         ec:04:c5:7d:c3:64:b4:d7:d5:98:62:80:e0:17:82:67:78:05:
         b7:3d:56:9e:5c:e4:1f:25:1b:27:90:03:07:52:8e:bb:a3:15:
         16:23:03:fc:fb:ca:e5:0b:1f:14:a5:8b:45:ad:51:0b:3e:3d:
         2e:56:62:07:8a:20:89:92:04:28:b3:b9:da:3e:c5:40:81:80:
         b5:52:ac:71:b7:c6:cc:91:fa:61:04:86:cf:6b:71:97:79:f3:
         01:b4:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:01 2026 by rpki-client