Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          LnmAUOJOzaxLeqNpln8ZqiD2odPL5FpG70+UJavV3tY=
Subject key identifier:   95:CB:CC:D8:1F:30:51:25:B2:F8:A3:F9:33:1B:63:99:3C:00:77:22
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       0E5FEAC492FA8DF6EAB543C738F9F6D3DE745446
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
Signing time:             Thu 05 Feb 2026 14:48:51 +0000
ROA not before:           Thu 05 Feb 2026 14:43:51 +0000
ROA not after:            Thu 04 Feb 2027 14:48:51 +0000
asID:                     268134
IP address blocks:        45.169.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5f:ea:c4:92:fa:8d:f6:ea:b5:43:c7:38:f9:f6:d3:de:74:54:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Feb  5 14:43:51 2026 GMT
            Not After : Feb  4 14:48:51 2027 GMT
        Subject: CN=95CBCCD81F305125B2F8A3F9331B63993C007722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:cf:1c:66:d0:d2:fa:58:d8:54:67:ef:8e:
                    91:38:ff:db:29:68:3b:ca:95:46:78:a8:1c:77:00:
                    7b:ef:a6:ca:4b:43:72:15:9f:3e:59:26:15:1a:ba:
                    59:d5:3f:e3:6a:fd:02:4f:4e:ac:ed:93:93:1e:41:
                    71:f6:54:89:56:4a:86:12:2e:89:7c:40:f5:4d:2f:
                    af:52:c2:d5:66:f9:fc:7f:dd:40:9e:32:62:4d:29:
                    fc:cc:a5:de:59:b6:81:37:4a:5e:29:f5:31:f7:dc:
                    44:25:1f:85:c5:6c:7f:32:6f:2d:54:42:94:cb:45:
                    c5:9c:60:c6:14:ac:94:55:94:5a:49:72:11:d2:49:
                    b7:54:66:70:5e:2e:84:68:6f:0f:d4:52:49:23:4a:
                    c0:45:a5:d9:cf:0c:44:1e:27:85:95:4a:76:bc:cf:
                    07:d0:c7:af:2a:bb:b6:3a:f8:b8:e0:c3:10:b1:ab:
                    15:14:f3:ff:fb:0b:bb:0c:c0:ef:49:f7:7f:35:dc:
                    14:a2:8b:69:16:2e:1b:07:63:99:c1:06:fe:39:6d:
                    4b:13:52:18:c8:f5:72:14:4b:f7:57:54:58:3c:21:
                    ce:f8:25:42:d6:5d:71:9c:e2:ff:4b:32:52:f7:bd:
                    6c:79:d2:83:a3:cd:a1:0c:5a:05:79:85:38:e1:47:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:CC:D8:1F:30:51:25:B2:F8:A3:F9:33:1B:63:99:3C:00:77:22
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:56:9d:40:85:8c:9e:8f:a4:29:92:c8:21:52:dc:7b:41:
         8d:b0:ba:78:4c:fa:0e:15:41:f7:03:6f:7d:da:94:df:1f:d4:
         b1:53:26:29:b2:f8:42:18:f6:5a:45:49:03:65:f6:86:9a:79:
         7a:4e:d8:d9:46:2e:11:35:61:5d:f7:ba:22:bd:ae:26:6f:4e:
         56:2d:89:11:02:ea:21:12:9f:f9:4c:0f:50:26:a8:da:74:3d:
         6d:04:8c:0a:12:1f:8d:ee:bf:3d:f6:30:bc:89:b9:24:26:6f:
         33:cd:dd:2a:7d:54:6f:63:b2:8b:1b:fc:d0:69:5f:85:09:75:
         69:a3:51:10:76:0a:c7:7c:89:4a:95:99:18:f2:3f:a4:5a:bd:
         29:39:1d:20:4f:93:f9:cb:d0:82:95:e1:82:d3:d7:a6:7d:15:
         fe:bb:d8:82:6f:b5:1b:f7:16:0c:ed:c3:03:9f:13:3d:3d:83:
         07:43:cf:2b:fa:36:d1:85:45:c7:b1:d9:b7:61:2f:a8:ee:30:
         a2:c2:f3:9d:3e:39:44:ac:4a:bc:77:48:ef:3d:63:62:ff:7b:
         f6:12:e7:83:d8:a8:d9:09:61:c2:4a:7d:b7:e7:b3:fb:e4:cd:
         21:a0:8f:2f:58:17:3f:96:17:70:38:e6:b5:d6:98:ae:1d:4e:
         0f:92:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:34 2026 by rpki-client