Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
File:                     34352e37302e31362e302f32322d3234203d3e20323637353433.roa (raw, json)
Hash identifier:          UCfCYcfqXwUL1le+yP17n88i9noijD5swRdCB1oMKmE=
Subject key identifier:   74:C6:1E:BF:EB:E6:DA:12:48:E4:F3:E6:F7:33:47:1C:B1:B6:C6:39
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       583BD1362AEA8A34EFC161BC9DF0568C13F1992B
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
Signing time:             Thu 05 Feb 2026 05:43:06 +0000
ROA not before:           Thu 05 Feb 2026 05:38:06 +0000
ROA not after:            Thu 04 Feb 2027 05:43:06 +0000
asID:                     267543
IP address blocks:        45.70.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:d1:36:2a:ea:8a:34:ef:c1:61:bc:9d:f0:56:8c:13:f1:99:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Feb  5 05:38:06 2026 GMT
            Not After : Feb  4 05:43:06 2027 GMT
        Subject: CN=74C61EBFEBE6DA1248E4F3E6F733471CB1B6C639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:83:17:e3:00:73:64:ec:7d:b5:aa:9a:b8:
                    56:e3:a4:08:3b:a8:39:e3:cb:24:1e:e0:8d:4a:18:
                    15:86:6e:a7:5c:8f:26:48:db:a3:6c:79:cd:09:40:
                    71:80:5a:3c:41:e7:8b:b6:08:d6:5f:2d:16:db:a1:
                    c2:0e:5e:e1:5e:26:9a:52:07:56:9c:61:c5:d5:ea:
                    93:39:dd:4d:1e:55:43:2e:5c:28:3f:c2:74:f3:74:
                    fa:5e:5d:72:72:88:8f:dc:e7:1e:5e:33:2f:b3:46:
                    13:1e:72:4d:82:0b:ed:72:52:74:76:3a:0d:ba:e1:
                    43:f3:84:46:dd:fd:81:72:06:43:ab:21:95:e1:91:
                    95:05:aa:1d:63:41:42:b2:0b:8e:79:aa:ca:90:fa:
                    22:9c:97:05:76:23:63:28:61:8d:9a:92:a6:b5:66:
                    b0:84:c6:a3:66:9b:74:5a:bd:00:f0:55:d7:d6:a3:
                    79:c0:ff:22:ae:a7:42:05:e9:20:58:85:1b:ee:fb:
                    fa:2f:a1:c5:f8:64:da:4f:65:e2:ee:a5:40:ff:5d:
                    29:a6:93:dd:d3:16:88:96:d3:7a:a0:9b:9d:f8:e2:
                    ce:e6:51:d5:02:84:68:18:4e:20:d6:b0:96:2d:00:
                    49:a9:09:9c:b6:28:c3:1e:0c:c7:6b:e8:0e:af:fa:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:1E:BF:EB:E6:DA:12:48:E4:F3:E6:F7:33:47:1C:B1:B6:C6:39
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:21:b6:af:c6:73:84:db:21:2f:b1:ac:c6:7f:85:4a:48:90:
         db:32:44:48:da:0f:94:44:7c:41:ef:78:c2:9f:ba:bf:a5:0b:
         0f:73:92:83:9b:0b:9d:9b:44:3b:57:9d:5b:14:f4:97:e0:bb:
         4c:b0:61:88:e6:52:82:f8:8c:6b:12:39:3a:be:45:4c:a4:ec:
         b2:e3:80:04:6e:7d:2a:39:24:aa:9d:af:03:30:68:63:a5:b5:
         e3:3e:c1:7b:d7:ab:7f:ff:80:87:ca:58:f6:4f:64:e3:32:04:
         9b:bc:cd:a2:87:0f:12:32:ed:81:27:a3:83:ee:04:55:4e:b1:
         70:e8:ab:5e:c9:dc:37:8b:5a:d1:a1:bd:06:df:01:37:8f:d2:
         4a:e7:25:3c:65:50:5e:c8:fd:38:f3:27:e8:b3:44:a7:7f:dc:
         95:64:85:c4:b9:e9:9a:7f:40:2f:f3:2b:12:af:eb:26:e4:ba:
         e3:8e:62:c5:3c:6f:6f:8d:e7:41:a3:c9:2b:60:56:86:dc:03:
         fb:e7:b3:bf:57:62:55:6a:04:e5:c5:68:1b:f5:da:72:0d:c8:
         b9:f7:b4:77:d5:f0:46:9c:07:e7:4c:c3:30:83:ca:4a:c1:9e:
         96:cd:45:ee:73:fb:0c:cb:48:8c:b2:98:e4:8d:d5:42:35:ef:
         e4:5f:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:31 2026 by rpki-client