Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa
File:                     34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (raw, json)
Hash identifier:          sUc9FSgggdoLcOcMTld7TYMgrTtgGNY3qjOibBet8RA=
Subject key identifier:   DC:52:C8:60:EB:19:1D:46:EC:E7:90:69:53:97:0B:DA:A0:DB:2C:B8
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       12303D83B1E1EFF1138EC5FAF8D654B46F4CA588
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa
Signing time:             Thu 05 Feb 2026 10:11:35 +0000
ROA not before:           Thu 05 Feb 2026 10:06:35 +0000
ROA not after:            Thu 04 Feb 2027 10:11:35 +0000
asID:                     268683
IP address blocks:        45.165.166.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:3d:83:b1:e1:ef:f1:13:8e:c5:fa:f8:d6:54:b4:6f:4c:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Feb  5 10:06:35 2026 GMT
            Not After : Feb  4 10:11:35 2027 GMT
        Subject: CN=DC52C860EB191D46ECE7906953970BDAA0DB2CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:48:8f:8f:b0:3c:65:c7:38:ad:fb:b9:8e:
                    f9:ed:d1:60:36:3f:6a:d3:d7:62:34:17:5c:fa:cb:
                    56:06:33:8f:c6:f4:01:e1:de:23:f8:26:cb:76:e0:
                    ca:26:d1:16:a9:59:11:7f:cc:0f:3a:50:74:be:56:
                    bf:5e:ba:d9:cd:93:c7:25:03:35:9f:51:66:37:b1:
                    70:fe:1e:7c:6b:da:b7:a0:2b:52:04:6f:aa:71:e6:
                    89:cc:d5:73:5f:eb:16:0c:51:4d:7c:e5:45:fb:eb:
                    39:c3:cf:99:4d:25:fb:f3:6e:f2:b4:32:85:e6:21:
                    a7:d7:dc:88:8c:a0:b9:8b:3d:b5:54:8f:10:03:94:
                    40:9c:7c:c0:da:c8:31:19:d2:bb:8b:5a:0a:63:3c:
                    20:af:1d:a8:2b:88:af:f4:5e:21:9b:0a:b5:d2:a6:
                    b3:d9:c8:c3:66:e8:fb:32:b7:09:0e:b7:1d:ba:51:
                    42:a4:95:58:4b:a5:e5:6a:7d:ac:5d:7c:00:bf:d8:
                    16:7e:9d:76:fc:f0:92:cf:62:4b:10:87:a2:12:34:
                    bc:21:c8:34:6e:e9:ac:2b:f1:64:a6:9d:a0:47:04:
                    af:f0:4e:d1:c4:e7:31:08:89:56:70:9d:25:b4:17:
                    bf:37:f1:d6:1c:01:a0:8c:eb:fe:07:5f:47:32:e0:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:C8:60:EB:19:1D:46:EC:E7:90:69:53:97:0B:DA:A0:DB:2C:B8
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:72:5d:75:75:ed:c3:4f:c3:0e:36:24:c8:40:ef:5e:e8:
         98:27:5a:4f:b4:ae:a2:94:01:bc:96:a7:3b:05:06:5f:f3:51:
         5c:26:b6:1b:9f:c1:13:9e:76:88:dc:85:28:c4:bd:d9:24:a6:
         93:92:9f:20:74:b1:f0:35:96:15:f9:ab:8e:a7:83:9e:52:60:
         c3:e2:0e:c6:2a:67:79:1b:70:d1:06:68:52:00:65:57:02:40:
         67:ce:16:c4:1d:a3:35:96:94:bb:2f:23:a9:d6:6a:79:8a:11:
         37:45:b4:d2:87:15:1f:f9:a2:5c:0c:08:86:1b:b8:77:dc:32:
         60:8b:9e:35:76:29:29:35:e7:c6:72:ee:7f:1c:2a:d2:96:c4:
         b3:0d:09:7a:72:91:92:a7:9c:23:41:5d:17:69:c0:aa:be:32:
         9a:30:60:a0:89:d1:7e:62:80:ae:c0:cc:51:26:11:d2:96:93:
         e8:01:cc:3b:15:f7:af:3a:1f:ac:cd:81:17:75:bd:fd:ff:5d:
         bc:2c:5d:1c:14:84:93:9e:15:8b:64:2e:5d:bf:73:c9:c7:9e:
         4d:9b:1b:03:15:f1:64:20:b1:51:35:33:a8:bf:69:fb:c5:7b:
         d0:9c:40:d8:af:41:28:fa:d0:02:30:1c:69:c5:37:bc:6f:c3:
         c0:84:0c:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEjA9g7Hh7/ETjsX6+NZUtG9MpYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4
MDIxREEyNTAeFw0yNjAyMDUxMDA2MzVaFw0yNzAyMDQxMDExMzVaMDMxMTAvBgNV
BAMTKERDNTJDODYwRUIxOTFENDZFQ0U3OTA2OTUzOTcwQkRBQTBEQjJDQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQUiPj7A8Zcc4rfu5jvnt0WA2
P2rT12I0F1z6y1YGM4/G9AHh3iP4Jst24Mom0RapWRF/zA86UHS+Vr9eutnNk8cl
AzWfUWY3sXD+Hnxr2regK1IEb6px5onM1XNf6xYMUU185UX76znDz5lNJfvzbvK0
MoXmIafX3IiMoLmLPbVUjxADlECcfMDayDEZ0ruLWgpjPCCvHagriK/0XiGbCrXS
prPZyMNm6PsytwkOtx26UUKklVhLpeVqfaxdfAC/2BZ+nXb88JLPYksQh6ISNLwh
yDRu6awr8WSmnaBHBK/wTtHE5zEIiVZwnSW0F7838dYcAaCM6/4HX0cy4BJhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3FLIYOsZHUbs55BpU5cL2qDbLLgwHwYDVR0j
BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2
eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF
RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZTEV3d3NEOFFxd2ZMVGlzd1FxZWR2dk1SU3llclZacmNCZEtXQndLdnhrLzEv
MzQzNTJlMzEzNjM1MmUzMTM2MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpaYwDQYJKoZIhvcNAQELBQADggEBAFYacl11
de3DT8MONiTIQO9e6JgnWk+0rqKUAbyWpzsFBl/zUVwmthufwROedojchSjEvdkk
ppOSnyB0sfA1lhX5q46ng55SYMPiDsYqZ3kbcNEGaFIAZVcCQGfOFsQdozWWlLsv
I6nWanmKETdFtNKHFR/5olwMCIYbuHfcMmCLnjV2KSk158Zy7n8cKtKWxLMNCXpy
kZKnnCNBXRdpwKq+MpowYKCJ0X5igK7AzFEmEdKWk+gBzDsV9686H6zNgRd1vf3/
XbwsXRwUhJOeFYtkLl2/c8nHnk2bGwMV8WQgsVE1M6i/afvFe9CcQNivQSj60AIw
HGnFN7xvw8CEDJc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:55 2026 by rpki-client