Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
File:                     34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (raw, json)
Hash identifier:          N3eL2aeWVdktkofBaT6E9gkeG3ajWvnfGJnt+5rzKyQ=
Subject key identifier:   8A:2E:A0:15:58:EB:92:F2:3B:77:24:93:5F:69:87:10:7A:0D:4F:D9
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       4D9FA987C299E20382E9BB4EDCC30D01042457AE
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     269449
IP address blocks:        45.186.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9f:a9:87:c2:99:e2:03:82:e9:bb:4e:dc:c3:0d:01:04:24:57:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:12:28:ac:f4:3b:7c:53:0a:98:3b:3f:96:
                    e0:ec:49:a7:9e:e3:5e:86:85:fd:ba:fa:e2:d3:1f:
                    73:3d:dd:ff:f3:65:01:f5:29:f5:2e:b7:b3:32:61:
                    ea:bf:11:42:da:b4:a3:54:6a:8d:03:78:1a:10:b1:
                    ec:77:00:50:d1:8c:cb:d8:69:08:67:b1:34:ea:e7:
                    8b:ba:f4:7c:46:fb:46:ed:fd:27:56:d6:1b:2e:7f:
                    72:bd:8d:bd:c6:cb:7b:30:79:57:79:93:0b:f6:3c:
                    d9:36:5a:91:bb:58:17:3a:8a:1e:b6:0d:ae:02:e9:
                    81:07:3a:55:d9:42:90:78:41:28:d6:26:49:3e:9a:
                    14:a3:ef:bb:21:49:f2:36:ce:bf:a9:94:df:f2:6a:
                    b2:13:9a:2f:16:aa:5a:98:5b:02:3b:1b:ae:1c:08:
                    6d:bb:78:41:06:d4:fb:b8:ef:77:0d:f9:5b:a4:77:
                    de:50:6e:99:80:1e:46:78:12:8d:30:a8:b0:96:61:
                    0c:cf:77:78:21:40:7f:42:51:15:cb:82:5e:54:5f:
                    b1:79:86:7a:fa:de:c3:97:bc:8c:d4:92:8c:2f:2c:
                    8a:bc:ca:ee:0b:19:b0:07:aa:2e:24:b3:87:43:47:
                    15:08:8b:49:a2:ad:86:03:57:64:3b:34:ab:c6:6d:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:A0:15:58:EB:92:F2:3B:77:24:93:5F:69:87:10:7A:0D:4F:D9
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:c2:bf:de:cd:92:a4:5b:ad:3b:22:b5:92:e1:e6:b0:64:
         89:5c:e8:d6:f4:e8:7f:0a:e8:ef:e7:72:ca:63:86:67:ef:6c:
         d9:0f:06:0e:fb:a9:80:84:5e:b7:2a:64:f0:af:29:24:2d:35:
         71:49:d2:77:e1:e3:0c:9a:c5:a3:a8:d1:6b:7b:a1:92:3e:b0:
         ea:9c:60:76:e1:34:66:5f:ae:a5:49:f8:38:ec:d9:c1:ca:e5:
         12:d4:75:f8:ec:c0:ed:e1:8b:5e:35:0f:2f:db:37:dc:a5:08:
         f2:e7:78:da:ea:74:56:31:10:66:da:ea:3f:38:30:70:ea:ce:
         a8:f3:e8:0c:61:a0:6c:27:35:33:d3:38:9f:a1:1c:98:a2:28:
         b7:25:b6:ba:da:8d:fe:7e:8e:4e:88:47:3f:ed:23:28:64:e9:
         18:8d:c1:01:0b:2c:b6:04:10:ef:90:fc:da:82:bc:7e:fa:b2:
         82:4f:3d:e9:fd:9e:83:3c:d5:6a:02:72:ae:23:57:2f:d6:4e:
         57:b0:6d:8e:92:ed:22:bc:98:f3:49:28:e4:da:5f:1f:22:f5:
         a0:dc:0c:4a:57:37:d0:f1:11:ab:3e:93:18:a6:18:fe:8e:c2:
         59:bb:66:9b:8e:6d:18:3a:a7:94:13:a0:d4:9c:99:a7:5e:ae:
         35:7a:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:29 2026 by rpki-client