Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
File:                     34352e342e35362e302f32322d3234203d3e20323636303338.roa (raw, json)
Hash identifier:          EGNHJFsM5XGEUu/x01+dzw9Z85bzdW6FupicnEfjWj8=
Subject key identifier:   F2:43:B5:1A:C8:72:36:AD:ED:59:A4:48:97:70:B9:3D:51:45:B5:7F
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       39FB7A06B4A1A982F461AE518A8ABF47B736BCBF
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
Signing time:             Thu 05 Feb 2026 19:56:43 +0000
ROA not before:           Thu 05 Feb 2026 19:51:43 +0000
ROA not after:            Thu 04 Feb 2027 19:56:43 +0000
asID:                     266038
IP address blocks:        45.4.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:7a:06:b4:a1:a9:82:f4:61:ae:51:8a:8a:bf:47:b7:36:bc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Feb  5 19:51:43 2026 GMT
            Not After : Feb  4 19:56:43 2027 GMT
        Subject: CN=F243B51AC87236ADED59A4489770B93D5145B57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5b:41:bc:54:3c:8d:2a:bc:7b:82:49:81:81:
                    1b:23:ab:b1:27:52:36:35:2a:95:39:e4:1e:bd:d3:
                    e0:33:d6:06:dc:27:9a:9e:e5:2c:39:66:75:89:36:
                    3a:1c:03:ef:77:0e:62:68:fd:2c:18:dd:c5:c5:0c:
                    3f:43:6b:b4:8b:81:63:83:f4:fd:aa:78:f6:ea:5c:
                    da:67:67:b8:54:20:9f:c1:4f:ff:9b:4b:8c:dd:24:
                    2c:0b:48:6f:e6:e4:d4:e4:ff:4d:b6:0a:2a:f4:d6:
                    c4:87:ac:dd:76:12:90:93:0b:6b:85:37:1c:39:7e:
                    f4:69:c6:e9:51:3d:03:31:1b:3f:71:c5:d0:57:8a:
                    fa:99:78:33:f6:fe:7d:ff:b7:87:d5:e0:1c:84:37:
                    b3:f5:c1:9d:de:19:e6:f1:be:5a:59:ce:40:8c:93:
                    fb:08:21:48:c6:05:fb:7c:c6:17:7b:f2:d3:ff:eb:
                    4a:5f:08:8d:14:ac:28:34:3c:61:d8:6b:27:63:dd:
                    1b:d5:18:c4:64:81:78:d0:2d:17:b5:6f:d8:a5:3c:
                    57:72:10:c4:76:58:4d:9f:6d:5c:1f:b5:f6:1f:2f:
                    c4:9e:c3:34:bd:fa:d5:d0:84:5c:40:fe:50:87:5b:
                    81:c2:2d:61:33:7d:a4:20:57:41:b4:e2:01:b6:43:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:B5:1A:C8:72:36:AD:ED:59:A4:48:97:70:B9:3D:51:45:B5:7F
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:07:e4:1f:e3:82:bb:b6:1e:0a:9f:49:fc:58:ed:e7:e1:
         bb:a3:fa:40:0e:80:a1:b7:a7:d8:92:41:b6:9a:ec:b7:0e:6f:
         b2:d0:f0:a3:bf:1e:c6:b5:a9:f2:b6:d2:86:b8:f9:09:06:6f:
         f3:70:79:a9:7a:2d:44:de:ae:4c:08:00:ba:35:a2:fc:b0:eb:
         16:97:df:73:83:b2:2e:36:f8:60:f7:1c:a3:44:17:6c:94:06:
         a4:d2:6c:4f:29:f9:54:23:81:a0:db:80:00:ff:60:6b:2a:68:
         24:44:64:93:b2:aa:66:e1:ad:9f:8e:b5:00:b5:d2:24:46:97:
         19:66:91:8d:38:8a:74:74:4f:66:88:49:54:4e:d8:bc:e2:9c:
         c4:75:35:34:f3:22:c2:09:83:3d:44:8b:aa:56:51:4f:22:c2:
         d3:20:fa:63:8f:f0:bd:90:95:d3:51:c6:37:b3:dc:3b:fa:a5:
         de:2f:62:89:c3:68:06:43:af:84:32:5d:17:4a:e0:fc:9b:67:
         34:c7:12:c2:09:9d:85:a3:7d:8c:02:9a:2e:4e:a2:47:26:49:
         e9:d7:9f:0c:ef:55:d5:83:6d:9d:b5:0e:e8:1a:52:cc:ae:bf:
         1b:e9:d6:9e:63:3d:70:f0:86:fb:56:13:e6:68:7d:4c:a1:ed:
         2d:7c:7b:2e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOft6BrShqYL0Ya5Rioq/R7c2vL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGMkZCRjY2QUQyRTlGNjFFQ0NDRUM2Nzc0MUM2QUQx
NzM2QUNERTAeFw0yNjAyMDUxOTUxNDNaFw0yNzAyMDQxOTU2NDNaMDMxMTAvBgNV
BAMTKEYyNDNCNTFBQzg3MjM2QURFRDU5QTQ0ODk3NzBCOTNENTE0NUI1N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxW0G8VDyNKrx7gkmBgRsjq7En
UjY1KpU55B690+Az1gbcJ5qe5Sw5ZnWJNjocA+93DmJo/SwY3cXFDD9Da7SLgWOD
9P2qePbqXNpnZ7hUIJ/BT/+bS4zdJCwLSG/m5NTk/022Cir01sSHrN12EpCTC2uF
Nxw5fvRpxulRPQMxGz9xxdBXivqZeDP2/n3/t4fV4ByEN7P1wZ3eGebxvlpZzkCM
k/sIIUjGBft8xhd78tP/60pfCI0UrCg0PGHYaydj3RvVGMRkgXjQLRe1b9ilPFdy
EMR2WE2fbVwftfYfL8SewzS9+tXQhFxA/lCHW4HCLWEzfaQgV0G04gG2Qw9zAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU8kO1GshyNq3tWaRIl3C5PVFFtX8wHwYDVR0j
BBgwFoAUlvL79mrS6fYezM7Gd0HGrRc2rN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05NZ2YyQW02dFdoekp5YUFIMmlpMlhmVlJpNXQ0eEdmNlRIM2N2Qmh1
aEcvMS85NkYyRkJGNjZBRDJFOUY2MUVDQ0NFQzY3NzQxQzZBRDE3MzZBQ0RFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjJGQkY2NkFEMkU5RjYx
RUNDQ0VDNjc3NDFDNkFEMTczNkFDREUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOTWdmMkFtNnRXaHpKeWFBSDJpaTJYZlZSaTV0NHhHZjZUSDNjdkJodWhHLzEv
MzQzNTJlMzQyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDMz
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBDgwDQYJKoZIhvcNAQELBQADggEBACKrB+Qf44K7th4K
n0n8WO3n4buj+kAOgKG3p9iSQbaa7LcOb7LQ8KO/Hsa1qfK20oa4+QkGb/Nweal6
LUTerkwIALo1ovyw6xaX33ODsi42+GD3HKNEF2yUBqTSbE8p+VQjgaDbgAD/YGsq
aCREZJOyqmbhrZ+OtQC10iRGlxlmkY04inR0T2aISVRO2LzinMR1NTTzIsIJgz1E
i6pWUU8iwtMg+mOP8L2QldNRxjez3Dv6pd4vYonDaAZDr4QyXRdK4PybZzTHEsIJ
nYWjfYwCmi5OokcmSenXnwzvVdWDbZ21DugaUsyuvxvp1p5jPXDwhvtWE+ZofUyh
7S18ey4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:41 2026 by rpki-client