Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (raw, json)
Hash identifier:          1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=
Subject key identifier:   2F:DF:87:BE:9A:3C:4F:83:82:4C:A0:D3:37:29:BD:98:95:BF:78:7A
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       441A3ABB645759139EEE5D76223B2E3A176F0C82
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267334
IP address blocks:        45.233.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:3a:bb:64:57:59:13:9e:ee:5d:76:22:3b:2e:3a:17:6f:0c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=2FDF87BE9A3C4F83824CA0D33729BD9895BF787A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:b7:2d:27:84:ed:26:7c:3b:8a:12:48:2a:
                    dc:84:4b:9e:57:4b:5a:1a:65:6e:8e:e6:1e:ef:d7:
                    82:6b:93:04:6d:ab:55:ff:49:69:44:3c:dd:d4:8f:
                    e2:fe:f8:89:68:ec:dd:62:6b:db:75:a4:c7:a0:05:
                    19:6f:ae:08:f9:b9:4c:44:c4:a0:0e:21:2d:e0:89:
                    cd:e4:d6:b9:80:04:67:00:b8:e4:20:49:4f:7b:03:
                    c3:fd:aa:31:df:dc:56:42:02:f7:e8:df:6b:d5:aa:
                    a4:07:8a:57:02:e0:4e:c3:f3:42:3a:d2:25:d4:7a:
                    c6:50:47:03:06:61:d1:9a:d1:8e:ea:6d:6f:92:4e:
                    64:ef:8a:4f:e1:55:69:bf:43:0c:e3:cc:e6:d6:ea:
                    b0:07:28:e9:27:a4:8b:6b:54:9d:e6:71:0e:10:21:
                    60:1e:bc:bc:8a:fb:29:0c:55:ed:d7:a8:8f:48:c0:
                    d3:23:15:e0:d1:51:f0:25:42:7d:c4:92:e5:8d:5e:
                    e5:fe:42:62:8c:12:c4:d1:f3:db:8c:75:2d:d1:ce:
                    6d:bb:a5:be:3f:52:f6:b0:31:2e:48:51:30:c2:b6:
                    bf:4b:b6:f9:05:45:df:79:14:8b:28:5a:f4:1d:88:
                    43:82:6f:98:51:97:27:ee:1e:34:c3:66:46:57:1c:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:87:BE:9A:3C:4F:83:82:4C:A0:D3:37:29:BD:98:95:BF:78:7A
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:5b:d3:7e:94:c4:11:91:9a:34:7c:83:a8:5f:65:bc:c0:
         b7:10:be:95:8a:6d:54:77:8f:ef:97:cf:85:7b:11:3a:1d:2a:
         a5:8d:8e:0f:4d:3a:0d:ae:f2:a3:af:fe:ca:17:3e:74:e6:8d:
         49:f1:47:b1:eb:bf:66:9c:b8:be:32:7d:b3:bc:b1:3b:b4:f9:
         b1:b6:b1:ca:30:5a:2d:9d:5d:82:c7:68:af:3e:ce:c8:61:3c:
         12:9e:75:6a:e2:13:93:7d:48:f9:b4:1f:f9:2e:0f:38:11:1a:
         5b:3d:3e:ca:fc:45:e6:75:03:79:66:af:6a:70:a4:91:f6:ae:
         b6:25:3e:53:de:66:50:aa:32:99:23:d3:c7:97:88:92:24:26:
         f6:c8:cc:ca:d7:02:eb:da:8a:13:b6:4d:08:7f:4b:5a:4b:f2:
         eb:84:a5:7f:e5:8f:9f:db:9d:c2:63:63:c8:5b:cd:e5:8f:fc:
         90:bb:42:5b:4f:9a:01:96:45:e0:a1:e5:76:d7:90:a5:40:21:
         93:10:48:bd:a9:35:80:a8:35:10:9d:d6:07:ca:f7:d4:aa:b2:
         8a:09:de:df:35:1e:71:e2:f8:97:9b:79:9d:66:08:fa:48:68:
         49:4c:c4:1f:bf:7a:57:f9:a0:f7:b2:20:27:bf:dd:d0:13:48:
         a9:af:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:44 2026 by rpki-client