Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=
Subject key identifier:   A9:CA:B2:D1:ED:D4:F3:AD:D0:DB:EC:46:EE:EF:7C:88:8F:67:5C:74
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       46821DF7E7A23396AA70C01E368E97312ABFA163
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     267334
IP address blocks:        45.233.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:1d:f7:e7:a2:33:96:aa:70:c0:1e:36:8e:97:31:2a:bf:a1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=A9CAB2D1EDD4F3ADD0DBEC46EEEF7C888F675C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:08:c6:c4:91:91:62:5d:e8:d1:ea:60:6e:
                    8c:06:ba:b9:36:3f:49:b1:42:07:ca:49:be:2b:84:
                    fc:f8:b1:21:12:3a:a9:92:32:8f:26:60:56:ee:49:
                    bb:4d:84:c5:3d:e0:6a:e4:39:02:5b:45:0d:6a:97:
                    ef:ee:ca:7c:2c:d9:21:20:32:e5:8a:f3:03:e7:f8:
                    63:df:1e:ab:f7:68:03:39:0f:cf:ee:ab:b5:70:a2:
                    3a:49:cb:ea:cd:10:42:7b:c1:0b:68:9e:ae:85:c5:
                    28:35:72:23:d9:bb:53:02:07:d4:4f:d3:ae:50:cc:
                    28:63:66:6d:4e:51:5a:f9:f2:6d:95:83:db:0f:59:
                    90:8d:c4:eb:e1:fe:e3:a6:f5:b8:22:a9:03:ba:95:
                    47:bb:a5:6c:e8:68:ea:52:29:54:7f:e4:d1:1c:7e:
                    d3:27:f0:10:2d:ef:b7:b7:8e:86:e8:af:fa:8c:be:
                    a4:8f:e8:1b:ba:22:c2:46:81:14:8e:62:17:66:28:
                    4a:79:2d:a6:ed:66:a8:c6:a7:69:35:c7:44:ae:bb:
                    ef:67:41:e1:f3:16:7e:70:cc:c0:a0:a9:c2:9c:53:
                    3d:25:d4:7e:a0:92:15:5a:5b:53:7c:0d:b4:13:3a:
                    a4:46:c9:be:dc:76:54:3a:53:60:9b:be:de:9f:5e:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:B2:D1:ED:D4:F3:AD:D0:DB:EC:46:EE:EF:7C:88:8F:67:5C:74
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b3:62:31:ca:17:c4:7e:02:bd:10:a7:c6:93:65:1e:15:4c:
         09:68:d5:58:c5:95:17:3e:b1:3d:d7:58:02:e4:70:3e:69:02:
         cc:ee:58:c8:cb:36:72:55:f9:55:7b:85:45:52:b8:61:7c:be:
         63:a9:27:99:13:4b:9e:86:3c:66:4e:71:b4:49:75:e3:fa:21:
         9d:23:48:ed:b2:7f:bb:f1:12:f2:cb:11:56:6b:4e:0c:25:44:
         79:ab:d6:78:00:6e:9e:d1:da:78:68:2c:2b:70:2e:b4:24:06:
         7b:fa:1b:4c:17:1f:ec:d0:2e:6f:86:4e:75:bc:0d:50:90:ba:
         d6:f6:f1:e8:39:85:9e:aa:89:05:24:6a:80:f3:b6:04:27:af:
         f9:b1:06:dc:05:8d:10:4e:86:9d:05:de:d0:76:26:8b:09:dc:
         64:ed:b0:3f:b6:15:f5:f9:8c:8d:2f:fa:31:6c:32:ce:f7:30:
         77:ac:60:83:73:86:80:cb:a4:80:28:41:58:02:49:76:62:4e:
         e2:cf:3d:eb:96:58:f2:5e:4d:97:e3:f6:3a:4e:64:05:93:57:
         cd:7a:40:73:4d:12:8a:57:07:3c:4e:d5:72:f5:29:2e:98:17:
         ac:14:26:ee:f8:6f:4d:04:c7:b2:63:20:6f:6d:ac:59:60:8b:
         bd:b5:49:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURoId9+eiM5aqcMAeNo6XMSq/oWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGQzg2Mzc2NzJGNjk5NUYxNzFBMjYxRDUxNjc0QTUw
RkU0NTRBNjAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKEE5Q0FCMkQxRURENEYzQUREMERCRUM0NkVFRUY3Qzg4OEY2NzVDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmQjGxJGRYl3o0epgbowGurk2
P0mxQgfKSb4rhPz4sSESOqmSMo8mYFbuSbtNhMU94GrkOQJbRQ1ql+/uynws2SEg
MuWK8wPn+GPfHqv3aAM5D8/uq7VwojpJy+rNEEJ7wQtonq6FxSg1ciPZu1MCB9RP
065QzChjZm1OUVr58m2Vg9sPWZCNxOvh/uOm9bgiqQO6lUe7pWzoaOpSKVR/5NEc
ftMn8BAt77e3jobor/qMvqSP6Bu6IsJGgRSOYhdmKEp5LabtZqjGp2k1x0Suu+9n
QeHzFn5wzMCgqcKcUz0l1H6gkhVaW1N8DbQTOqRGyb7cdlQ6U2Cbvt6fXi/NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqcqy0e3U863Q2+xG7u98iI9nXHQwHwYDVR0j
BBgwFoAU0vyGN2cvaZXxcaJh1RZ0pQ/kVKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMS9EMkZDODYzNzY3MkY2OTk1RjE3MUEyNjFENTE2NzRBNTBGRTQ1NEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRkM4NjM3NjcyRjY5OTVG
MTcxQTI2MUQ1MTY3NEE1MEZFNDU0QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzEv
MzQzNTJlMzIzMzMzMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6f8wDQYJKoZIhvcNAQELBQADggEBALCzYjHK
F8R+Ar0Qp8aTZR4VTAlo1VjFlRc+sT3XWALkcD5pAszuWMjLNnJV+VV7hUVSuGF8
vmOpJ5kTS56GPGZOcbRJdeP6IZ0jSO2yf7vxEvLLEVZrTgwlRHmr1ngAbp7R2nho
LCtwLrQkBnv6G0wXH+zQLm+GTnW8DVCQutb28eg5hZ6qiQUkaoDztgQnr/mxBtwF
jRBOhp0F3tB2JosJ3GTtsD+2FfX5jI0v+jFsMs73MHesYINzhoDLpIAoQVgCSXZi
TuLPPeuWWPJeTZfj9jpOZAWTV816QHNNEopXBzxO1XL1KS6YF6wUJu74b00Ex7Jj
IG9trFlgi721ST4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:39 2026 by rpki-client