Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
File:                     34352e37312e37362e302f32322d3234203d3e20323637353434.roa (raw, json)
Hash identifier:          a3oPa26170rrGDJA41jEXPD9SgqM9YNUOvox9TukohY=
Subject key identifier:   5B:92:3F:8F:47:44:1E:99:75:E3:27:64:99:35:59:AE:9A:F9:B6:6E
Certificate issuer:       /CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Certificate serial:       5C854A17112049B5958B9C78536ED12016002627
Authority key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267544
IP address blocks:        45.71.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
                          rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:4a:17:11:20:49:b5:95:8b:9c:78:53:6e:d1:20:16:00:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:49:2c:cd:d7:b8:fe:fe:f7:e2:44:07:bd:
                    65:be:97:bf:6a:c2:ad:84:fe:0c:9b:0d:bf:29:88:
                    54:f0:db:6c:62:96:d6:6a:e2:da:76:35:df:30:58:
                    43:92:6d:81:55:47:d1:f4:34:63:58:24:c3:4d:ca:
                    6c:af:7b:a4:57:c8:5c:28:c1:46:63:22:bd:30:36:
                    99:84:3f:8a:7d:5f:3e:a8:d0:19:c5:92:47:50:49:
                    ed:ef:bd:dc:2e:d5:48:88:70:87:cd:55:f2:d9:3d:
                    84:06:d7:23:d3:84:2a:af:59:4c:3f:f0:6b:6f:e8:
                    d8:06:d7:73:c8:d5:21:7c:36:0b:8b:60:fc:1b:12:
                    59:7a:0f:13:55:ae:21:1b:46:c1:2a:66:57:62:4d:
                    34:3c:3e:e1:9f:4c:1e:9c:55:a0:be:06:f1:cd:fc:
                    32:09:e4:5a:0a:60:57:01:36:20:9c:f4:63:9b:66:
                    4a:5c:e5:77:14:f7:40:e7:2c:85:d3:7e:53:07:c4:
                    f0:20:1b:42:ff:66:b6:bf:8a:0e:e7:25:17:9c:cb:
                    1c:88:f4:4d:3c:64:3c:7f:0a:f4:6e:2b:d6:0c:22:
                    43:fa:e5:3f:2d:c6:ed:31:50:68:54:7d:48:5f:3c:
                    f9:aa:8d:41:2c:7f:30:06:56:cf:bc:87:f1:b0:31:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:3F:8F:47:44:1E:99:75:E3:27:64:99:35:59:AE:9A:F9:B6:6E
            X509v3 Authority Key Identifier:
                keyid:77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/34352e37312e37362e302f32322d3234203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:c3:9b:71:a8:55:c7:d2:66:c2:82:0a:49:06:1b:1f:36:
         ed:39:08:e8:99:0b:c1:52:15:09:43:b2:f8:38:8c:32:d2:d9:
         5f:81:41:3b:95:7a:1c:cf:26:bc:4e:70:3b:e5:b1:29:d8:c7:
         b1:ad:01:61:c3:99:d0:66:21:df:01:63:2d:1d:c9:1f:61:c3:
         38:9a:a2:83:a1:f0:6b:22:b9:4f:88:11:13:d2:59:72:83:e4:
         2c:14:7d:ad:83:23:47:39:a6:0e:d1:57:52:17:dd:a8:ce:69:
         0d:d8:66:1b:3c:e7:57:04:f5:57:26:fd:01:78:63:0d:31:33:
         89:f7:de:95:48:8b:84:ac:52:cf:ca:2d:b8:e8:91:15:46:52:
         81:53:ba:9d:32:e5:11:53:a0:22:51:3d:68:77:55:52:22:b9:
         4b:49:6e:65:fa:17:77:bf:37:df:17:8a:d4:be:47:1c:6e:52:
         d1:dc:a4:a4:61:e1:92:63:8f:ba:6a:ba:48:03:54:04:84:cd:
         3f:44:49:95:6f:48:85:a9:04:e2:c9:92:45:c2:f2:3f:f9:38:
         2e:d1:61:ec:37:09:4e:89:2d:ef:51:33:e0:9f:14:54:77:37:
         e5:52:98:28:b6:6c:b5:9a:01:39:3f:5e:1d:2b:64:c9:a9:f8:
         8d:3a:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:31 2026 by rpki-client