Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa
File:                     34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (raw, json)
Hash identifier:          DkzEhfo/djgFstR+AHtR3oS6mZdFxxkqveXJYCkllkQ=
Subject key identifier:   66:47:B5:88:5D:A3:4B:92:72:45:02:11:CF:DF:6F:58:0B:EC:3C:29
Certificate issuer:       /CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
Certificate serial:       1A64B8B9241B128A3840E6D18F8D8D8908EB0136
Authority key identifier: 91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa
Signing time:             Thu 05 Feb 2026 10:05:43 +0000
ROA not before:           Thu 05 Feb 2026 10:00:43 +0000
ROA not after:            Thu 04 Feb 2027 10:05:43 +0000
asID:                     269063
IP address blocks:        45.179.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl
                          rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:b8:b9:24:1b:12:8a:38:40:e6:d1:8f:8d:8d:89:08:eb:01:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
        Validity
            Not Before: Feb  5 10:00:43 2026 GMT
            Not After : Feb  4 10:05:43 2027 GMT
        Subject: CN=6647B5885DA34B9272450211CFDF6F580BEC3C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:21:01:79:38:c1:1b:63:3d:0c:ca:02:f1:
                    d2:2b:26:27:55:d4:68:08:d0:70:19:98:15:9c:72:
                    b9:96:20:3f:6e:95:ed:4b:a1:ea:24:53:dc:90:cb:
                    79:67:ae:18:41:07:21:3d:d1:2f:d5:c4:41:5d:99:
                    5e:dd:42:e7:74:ef:4f:5c:7d:4b:3e:cd:b6:15:02:
                    d9:76:90:6d:3b:e5:e4:71:bb:a0:4f:cf:aa:d3:ef:
                    c6:b0:9d:4e:d4:59:94:2b:12:d2:0b:87:91:1e:2f:
                    cf:d7:9d:4d:44:72:b1:aa:14:c7:a4:90:2b:5d:63:
                    b7:40:b1:b5:ee:0c:62:83:fa:68:39:fe:fb:07:99:
                    dd:08:da:85:be:2b:5e:c5:bb:24:d1:63:da:1f:80:
                    06:41:2e:a5:cb:6a:55:0c:8d:10:b1:f5:b8:61:73:
                    0b:ec:57:a2:ad:9b:88:6e:f0:a0:bd:d8:d6:02:09:
                    fa:a9:52:ea:36:f4:85:43:5e:1c:48:74:60:fc:05:
                    e6:86:af:be:e6:7e:17:b9:2f:b3:4f:26:c8:92:65:
                    18:30:0a:6c:a9:e0:6e:59:1b:1c:52:9f:c2:aa:42:
                    52:ad:ac:03:93:36:59:0b:f3:48:7e:31:49:6c:6b:
                    e2:4e:1f:76:26:ef:7d:5e:17:5a:f8:75:e1:48:af:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:B5:88:5D:A3:4B:92:72:45:02:11:CF:DF:6F:58:0B:EC:3C:29
            X509v3 Authority Key Identifier:
                keyid:91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:6b:f5:4b:e8:ca:8d:bb:35:90:bd:2a:78:50:bd:59:6b:
         34:73:37:26:b0:aa:ca:73:0d:84:80:60:45:75:90:ed:bc:03:
         f1:b3:31:80:b1:03:72:bd:8f:6d:0c:0b:da:99:46:8c:53:17:
         4e:61:77:98:65:aa:61:35:97:3e:d3:57:63:e3:0c:c6:24:19:
         f6:f9:e7:ad:7f:b6:c5:d8:ba:2e:6b:f1:bd:1b:72:2e:0d:7b:
         34:ac:f2:75:18:e6:5a:c9:b2:70:f3:bb:f4:05:65:43:d6:70:
         c6:12:a7:58:ef:3b:6e:46:7d:cb:fd:cb:81:fd:c8:d0:13:d8:
         60:43:80:cb:71:e3:9e:cf:c8:1e:e1:5c:70:a6:88:8f:ae:43:
         98:3b:d7:80:84:4f:ff:22:42:f7:e1:7e:b7:a1:43:34:cf:38:
         26:e6:62:c6:73:d6:a0:cc:0c:65:5e:ec:c2:27:5c:2b:c4:f7:
         2e:d8:79:cf:48:bd:ce:79:ad:f4:66:b0:0c:77:31:1e:4d:e4:
         6f:f3:ca:6b:10:5a:dd:54:ff:cf:dd:69:bc:63:ab:66:73:53:
         3f:35:f5:c6:f5:55:de:06:a0:49:3d:79:92:26:6b:a1:82:c1:
         4c:53:d9:7a:fd:cd:b9:b3:e7:3e:64:f2:86:a9:b1:ae:91:ce:
         e5:ab:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:59 2026 by rpki-client