Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
File:                     34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (raw, json)
Hash identifier:          QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=
Subject key identifier:   BA:A7:F2:AC:65:E0:05:DF:2B:3F:25:72:BF:24:83:59:62:D3:52:69
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       0E2D59DBC6239A8E09559EFBEEA77F030085E738
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     267334
IP address blocks:        45.233.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2d:59:db:c6:23:9a:8e:09:55:9e:fb:ee:a7:7f:03:00:85:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=BAA7F2AC65E005DF2B3F2572BF24835962D35269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:ca:95:13:e0:7a:27:1c:69:31:e7:ab:ba:
                    e9:21:01:85:b0:0c:18:c2:7f:38:ed:f4:4d:bf:b5:
                    77:6f:81:ca:58:62:84:38:55:56:75:b7:b3:e9:75:
                    c1:33:94:41:fd:9b:3b:30:c1:76:73:1b:4c:9b:04:
                    f0:3b:36:97:ec:1f:4f:51:31:16:86:31:90:40:85:
                    7b:95:16:c0:5d:9e:fd:e4:c7:e4:4d:41:53:42:b3:
                    68:41:3a:65:55:95:e6:fb:bf:9e:5c:7b:c6:a7:0d:
                    dc:8d:64:97:9b:f3:c0:49:97:e4:1d:db:6e:1c:60:
                    68:15:3c:57:de:85:ff:20:cf:0e:fc:fc:d1:c5:b4:
                    f5:41:ce:9a:d4:f6:d5:8b:d8:b9:c1:23:07:c7:c1:
                    05:4f:4b:97:da:34:1e:7e:9e:1d:50:f8:4a:ef:27:
                    d8:55:0c:55:6f:4d:2f:3a:86:4c:87:1c:38:e3:25:
                    3c:03:c2:26:43:b3:36:df:44:b5:14:01:48:81:db:
                    c8:74:4f:ad:27:06:ad:50:28:d8:82:e4:17:50:50:
                    d0:35:9b:9f:46:e3:fd:0f:9d:bf:d3:10:02:86:4b:
                    90:90:23:74:75:19:4a:b3:33:dc:ce:bb:4e:78:8c:
                    57:d1:ee:4a:e3:99:10:c7:e3:5f:56:b9:2c:ca:1c:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:F2:AC:65:E0:05:DF:2B:3F:25:72:BF:24:83:59:62:D3:52:69
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:7b:6d:df:71:48:14:2a:a7:79:6f:43:56:57:25:0e:e4:bf:
         01:4a:e3:3e:d8:10:ee:f2:67:d2:77:f1:3c:1e:97:09:bf:19:
         2d:08:4a:55:9f:a8:8b:7e:d3:fb:b4:f5:4a:27:52:46:28:a1:
         74:88:4a:ca:d5:0b:af:b8:e4:34:39:fe:e5:e2:a2:04:8e:79:
         7e:1a:05:b0:b9:a0:cd:3f:6f:26:d4:b6:73:5b:d6:8c:c9:f9:
         2f:4e:57:70:c4:41:ea:2c:43:fd:f0:3f:fc:40:fa:17:3f:72:
         cb:a9:02:08:78:40:7f:00:54:e1:92:f5:28:61:43:91:e7:19:
         e4:5b:42:c7:81:2a:3d:47:de:d0:d4:0d:37:65:7a:7d:fd:5a:
         18:85:18:5b:a3:83:c9:2b:a2:e1:26:12:28:dc:00:13:7b:20:
         46:d9:7b:a2:d8:bd:10:2d:d4:52:ae:75:12:cb:89:72:82:7a:
         e7:7f:a4:fe:20:cd:1e:09:0f:70:eb:52:d5:e7:a8:d5:b6:b0:
         fe:bd:29:1b:c9:e2:ad:07:93:74:fb:19:fc:7d:47:59:cf:95:
         18:b3:8b:5f:cd:f0:90:12:48:62:2b:cc:40:6e:58:7e:9f:ab:
         2e:14:5d:b4:19:1d:cb:74:97:da:11:61:d7:fe:ba:7e:24:17:
         91:c0:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:58 2026 by rpki-client