Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
File:                     3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (raw, json)
Hash identifier:          qaPYl8OJyl+e/YsZEgIv0OUJSc+a6GG3tVTC+Pt9OVU=
Subject key identifier:   B8:8C:F1:3A:0C:4D:03:5D:53:51:F5:1C:57:D9:C1:E0:C7:60:DB:22
Certificate issuer:       /CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Certificate serial:       3F36C9C0530D7F06381E0E6EB7F1915BC2AE5C7E
Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
Signing time:             Thu 05 Feb 2026 21:38:00 +0000
ROA not before:           Thu 05 Feb 2026 21:33:00 +0000
ROA not after:            Thu 04 Feb 2027 21:38:00 +0000
asID:                     265113
IP address blocks:        170.254.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl
                          rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:c9:c0:53:0d:7f:06:38:1e:0e:6e:b7:f1:91:5b:c2:ae:5c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
        Validity
            Not Before: Feb  5 21:33:00 2026 GMT
            Not After : Feb  4 21:38:00 2027 GMT
        Subject: CN=B88CF13A0C4D035D5351F51C57D9C1E0C760DB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:bc:01:23:cf:a8:cc:97:77:f7:fd:c1:f2:
                    6f:25:56:0c:1d:4c:58:46:15:a9:58:27:bf:f1:fb:
                    29:08:1b:73:d6:bb:6e:3a:ae:55:ca:3a:69:0b:86:
                    6d:92:a9:0b:f4:a5:eb:3c:79:36:d3:b8:08:63:6b:
                    88:2d:13:53:1a:90:a3:4a:28:a2:f8:b7:2e:51:29:
                    44:e6:81:29:dc:80:1a:3e:09:56:9b:47:be:40:c5:
                    af:ed:ef:47:5b:e2:4f:29:cb:78:b6:de:01:1c:d9:
                    2d:34:19:a4:e7:2a:e2:64:9d:ef:a5:cb:27:79:1e:
                    80:8f:58:6a:72:b0:e2:2b:df:49:49:6c:5d:d7:3b:
                    2c:e0:fc:d0:21:bf:bf:0e:e1:9b:f9:9b:a5:1f:d1:
                    ec:4c:c1:8e:81:39:52:e3:a4:6e:69:c3:93:7f:87:
                    b4:ed:f4:41:2f:4e:98:7c:1b:11:7b:25:66:ee:2d:
                    9b:a7:a0:b4:e4:06:75:3f:ce:4b:22:10:20:8f:da:
                    9c:39:62:d8:43:d7:6c:44:c3:b5:20:8c:f9:70:4a:
                    4c:7f:15:83:b1:c6:cf:64:70:74:42:2b:85:d5:1b:
                    76:ef:4b:59:e1:9f:17:74:03:e0:c4:25:6e:ba:f3:
                    4d:4b:0a:fe:6d:c0:e1:25:11:67:cc:aa:e5:5f:b1:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8C:F1:3A:0C:4D:03:5D:53:51:F5:1C:57:D9:C1:E0:C7:60:DB:22
            X509v3 Authority Key Identifier:
                keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:eb:01:39:8f:3c:7d:b1:34:a9:a9:17:96:31:4c:90:cc:
         62:b2:30:45:84:1e:61:68:d4:11:ae:80:7e:65:72:14:93:c6:
         70:a0:70:1b:e4:0f:d2:44:9a:2b:a5:c4:ab:4d:a4:11:55:f7:
         86:4b:0a:59:a0:5f:d9:34:13:b4:06:1b:ab:9d:d1:2c:fb:85:
         f9:21:d4:77:36:4b:77:20:75:64:34:cf:8c:7f:3f:a1:c3:a6:
         5b:d3:54:3e:6c:56:58:bd:4b:48:f0:e5:a6:70:7b:ff:cd:73:
         76:88:72:8b:0d:ce:2f:1e:6c:93:47:63:4e:2e:e8:1d:cd:2c:
         b2:48:71:43:b5:3e:95:43:72:5d:f0:be:cf:a2:92:ac:14:7e:
         d8:a3:5f:c9:d3:dd:b0:ef:4b:d2:64:da:40:c6:92:1d:03:15:
         70:7c:2d:a3:c4:7e:da:33:28:45:3f:cb:84:4f:ef:f5:b5:c4:
         ce:1f:8e:a1:f3:62:a3:b8:02:ba:68:fb:d7:87:0b:c6:f0:a0:
         17:a8:b3:85:6f:25:dc:30:a2:50:f3:45:8b:db:7b:80:32:7e:
         d0:6d:b5:6f:17:7d:d7:11:67:cb:59:92:27:2c:aa:c3:8b:fd:
         dc:4d:c8:09:7c:a5:14:2b:58:7c:b4:3d:c5:4b:a4:c3:86:6e:
         ef:ab:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:10 2026 by rpki-client