Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (raw, json)
Hash identifier:          0IUjkVy3rrKEDK4mq+JETmt5fLI+OEhRLOlYtvzDAXY=
Subject key identifier:   83:38:C7:B9:48:2C:68:88:A5:05:EA:51:03:0D:B9:A7:BE:0C:E4:7C
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       2C5D71C7A33DEBD1C9F0827070DF9C8C3EA3F1E2
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa
Signing time:             Thu 05 Feb 2026 14:48:51 +0000
ROA not before:           Thu 05 Feb 2026 14:43:51 +0000
ROA not after:            Thu 04 Feb 2027 14:48:51 +0000
asID:                     268134
IP address blocks:        45.169.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5d:71:c7:a3:3d:eb:d1:c9:f0:82:70:70:df:9c:8c:3e:a3:f1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Feb  5 14:43:51 2026 GMT
            Not After : Feb  4 14:48:51 2027 GMT
        Subject: CN=8338C7B9482C6888A505EA51030DB9A7BE0CE47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:f4:70:67:c6:a4:08:1f:de:f5:09:cd:51:
                    2c:40:fe:9a:39:c5:75:26:d7:a1:6d:4d:21:96:91:
                    7d:a8:56:90:b6:f6:74:1b:34:92:ff:2b:93:b9:07:
                    c9:8c:ad:9e:9b:81:b2:86:6d:48:bd:64:a8:cc:04:
                    6c:13:35:66:03:cc:03:aa:0c:27:dc:4b:5b:ad:ff:
                    c3:52:5b:58:d1:36:eb:93:ef:49:dc:4c:c2:68:e9:
                    d5:04:5b:b0:13:24:81:d8:83:55:90:48:0b:59:19:
                    e9:37:46:ed:a2:31:09:f0:58:2f:63:dd:3f:7b:eb:
                    14:95:29:43:2a:db:a6:70:45:be:73:c4:8e:20:de:
                    22:57:72:84:91:f8:f4:b6:41:5c:08:69:a8:7e:18:
                    46:d4:cd:e4:a7:bf:e9:c6:2e:02:d3:fe:70:4c:e9:
                    47:6c:20:a3:f1:97:25:ab:7d:18:7e:74:5f:19:46:
                    23:e5:9f:88:0c:4c:9d:da:d1:f6:ec:da:4f:84:8c:
                    3d:62:7b:67:d5:00:80:f3:2c:e0:4e:da:37:06:b1:
                    77:4f:a9:90:da:65:56:6e:bc:62:72:a0:31:a8:6d:
                    51:e1:5d:6b:77:85:81:aa:5f:79:21:68:f7:ce:14:
                    4e:ac:42:ae:fc:c7:07:4e:cc:3f:9a:ef:03:56:c4:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:C7:B9:48:2C:68:88:A5:05:EA:51:03:0D:B9:A7:BE:0C:E4:7C
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:cd:69:ed:a4:40:ff:f0:d7:78:d4:2b:fb:6e:79:84:7d:
         49:c1:1e:4c:e1:0b:6a:5f:25:f4:d4:3c:81:43:1b:e3:bc:02:
         63:bf:dc:87:5e:cf:73:81:35:21:40:3e:f6:eb:d1:a9:b4:7a:
         c9:3c:4d:3c:67:e0:c6:66:1d:af:83:e7:ac:c7:db:94:0c:29:
         3b:9c:7a:6f:59:81:52:9f:1f:39:ac:01:42:65:29:b7:8e:4b:
         f1:01:99:a5:03:cb:f1:f7:82:f5:e1:8b:1d:b5:80:c9:fa:db:
         5e:33:07:fe:da:4d:66:47:92:a1:8c:ff:14:66:21:de:e8:f7:
         cd:f9:1f:59:cc:3f:7d:1d:8e:fb:e5:2c:74:77:94:c6:ed:b6:
         8f:c4:2c:5c:0b:36:bb:50:4c:3a:a9:7f:dc:e3:d3:3c:bb:2c:
         d1:3a:a3:25:79:fd:d9:e1:5d:14:ba:56:b9:dd:ff:d9:dc:9b:
         95:5c:4e:a0:3d:77:c0:d3:93:7c:0e:fd:bf:a9:39:06:c1:a0:
         51:58:64:72:3b:cb:64:cf:0d:26:f8:a1:58:fc:ec:e8:81:b5:
         b9:f7:5c:92:84:1d:a5:8b:1b:25:32:a9:69:ef:21:cf:f7:4c:
         0c:e0:24:70:a9:b7:f0:75:e7:f7:11:2e:32:94:02:36:bf:8d:
         cb:fa:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:32 2026 by rpki-client