Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa
File:                     34352e372e3135362e302f32322d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          6PwF1DHdKDVL7v6F0GGLeBujRxYfZqQbxtobjUMffhM=
Subject key identifier:   0F:F3:6B:39:BF:D5:68:96:B1:90:8C:52:44:07:FB:84:96:A4:12:8E
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       69218FBB859C878ABC39036A27966E9054F1FC18
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa
Signing time:             Wed 28 Jan 2026 13:26:36 +0000
ROA not before:           Wed 28 Jan 2026 13:21:36 +0000
ROA not after:            Wed 27 Jan 2027 13:26:36 +0000
asID:                     262729
IP address blocks:        45.7.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:21:8f:bb:85:9c:87:8a:bc:39:03:6a:27:96:6e:90:54:f1:fc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jan 28 13:21:36 2026 GMT
            Not After : Jan 27 13:26:36 2027 GMT
        Subject: CN=0FF36B39BFD56896B1908C524407FB8496A4128E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:8e:f4:55:ec:25:2e:8d:88:f8:f9:4e:1f:
                    e7:f2:3a:e4:7c:35:3d:48:62:bf:41:be:b9:ee:8d:
                    83:3d:70:eb:66:33:e0:0f:92:69:29:7a:ee:44:a0:
                    0a:16:02:7a:88:65:71:57:6a:0f:4f:8f:83:9b:6e:
                    50:f2:9a:43:8f:2a:7a:01:83:c3:5e:20:05:dc:08:
                    e7:a9:9f:03:68:32:28:ef:1b:5b:c1:ee:b5:eb:a3:
                    24:0a:f6:04:4d:1d:b4:df:19:bc:61:a1:99:bd:3d:
                    37:0e:10:71:60:7d:93:d5:6a:a0:df:45:23:d0:a8:
                    ea:b2:a1:ed:db:05:fb:39:6d:a1:51:85:19:88:b8:
                    16:46:19:60:9c:4f:37:dc:e4:7b:8e:4d:8b:05:bf:
                    e6:93:e5:e0:c3:c1:c3:4c:af:7b:4f:ba:3a:ca:f0:
                    b3:9d:46:0d:a7:05:6d:a5:2e:61:a7:cc:11:64:bb:
                    19:c7:84:eb:b5:18:2f:dd:e9:7b:f6:26:6e:bb:8f:
                    ab:9a:5a:13:47:03:ab:5c:db:08:62:1f:96:b2:c6:
                    71:a8:b8:13:28:dc:bd:27:96:a4:b9:18:96:dd:90:
                    ed:97:6f:9c:c4:5e:8f:29:12:b5:8d:f8:b9:53:41:
                    0f:a7:96:d2:72:a5:92:8b:16:79:f5:33:f8:a7:62:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:6B:39:BF:D5:68:96:B1:90:8C:52:44:07:FB:84:96:A4:12:8E
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:df:e2:f8:9f:a7:16:85:7d:4e:58:2c:e5:93:af:bd:bb:14:
         91:ce:1e:a5:15:6a:d2:2b:60:b2:16:91:e9:99:10:dc:13:f7:
         c6:9e:b5:c5:8b:88:92:aa:0b:97:70:50:86:35:7f:b6:7f:c6:
         36:19:38:b6:b8:94:21:b4:82:1c:a8:3a:c2:8b:da:4b:da:1a:
         91:e7:79:40:d0:27:92:fa:29:43:19:7f:01:c0:d8:6c:7a:47:
         f4:91:b6:d6:d5:24:78:64:eb:7a:c6:f2:fb:d1:96:36:a7:24:
         49:24:b5:8d:c4:28:63:af:23:1a:19:e5:1a:5b:87:39:55:4a:
         86:59:c6:22:06:10:d4:bc:23:36:a6:ff:c6:88:b3:ec:c0:17:
         26:f3:43:36:17:d0:d4:a1:f5:e1:f1:96:8d:57:d7:2b:2f:49:
         39:a5:ac:36:2a:b7:f3:23:00:bd:9c:79:51:6d:c1:2f:b3:ce:
         92:86:96:4a:95:85:3b:43:52:57:3a:3f:7c:92:70:11:ec:65:
         e7:02:fa:c8:2d:63:c9:d8:20:54:6f:a9:ce:2d:7b:84:c9:28:
         ec:1b:03:d6:e7:a2:3b:90:c1:34:78:39:44:5c:20:71:df:51:
         cc:a0:22:16:3e:04:54:3e:b3:6b:80:e1:15:a1:51:40:6d:19:
         48:86:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:16:51 2026 by rpki-client