Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa
File:                     34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          DSIAOHHDtH4HWsBWPwzaFHzBlDruo55nJLmhdype5tA=
Subject key identifier:   FB:F8:B8:31:6D:9B:08:4A:48:63:2F:B3:41:C4:08:2C:8E:B5:67:55
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       0DCC3F7F23CDFC7E66D0267E6FF6C463B91E314E
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     262595
IP address blocks:        45.179.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cc:3f:7f:23:cd:fc:7e:66:d0:26:7e:6f:f6:c4:63:b9:1e:31:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=FBF8B8316D9B084A48632FB341C4082C8EB56755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:f0:7c:9e:9c:75:2a:bf:4c:29:3d:eb:6d:
                    47:2c:fa:f2:13:ca:9d:ac:ad:85:19:67:5f:56:6f:
                    07:7f:d7:0d:b5:35:95:78:28:e9:5e:f9:d5:53:db:
                    bb:0f:f8:a6:59:90:4d:f8:60:bf:19:9a:34:21:b8:
                    e1:cb:de:31:10:08:f8:8f:6e:df:58:6a:6d:c8:16:
                    b7:b5:e6:c7:6a:50:82:47:7b:1c:7a:55:42:5c:57:
                    0a:6e:12:84:7d:14:3b:b2:11:1b:f1:9d:87:b3:aa:
                    6d:12:db:f4:05:77:e6:f6:07:99:93:13:73:0a:2d:
                    67:8e:b7:53:b7:cb:76:19:a4:44:2e:72:4f:c2:c5:
                    df:ae:d5:73:7a:88:bc:5e:0a:a1:ee:80:be:f2:8c:
                    ef:ef:ac:53:86:04:84:a8:f2:b1:3c:be:6b:fd:89:
                    be:d3:c9:68:24:7f:56:4c:ac:87:21:c2:60:fb:ae:
                    99:b9:1c:fc:fd:42:6a:fc:c8:ae:7a:10:ff:1d:57:
                    56:4b:17:f4:ea:e2:23:78:6b:fa:70:20:90:a4:ba:
                    a9:66:af:fa:a2:a2:02:af:70:60:36:0a:1e:9e:eb:
                    d6:4c:1b:56:82:f9:e2:96:cb:4e:4a:49:79:81:ef:
                    f9:e2:4a:5b:93:ec:bc:e0:41:6f:8b:bd:16:c5:c2:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:B8:31:6D:9B:08:4A:48:63:2F:B3:41:C4:08:2C:8E:B5:67:55
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:95:8e:61:13:d6:03:1a:1c:19:d2:2d:c0:ef:18:69:67:
         8d:34:97:6c:90:64:45:d4:b8:7f:c1:17:03:f0:31:7c:fe:76:
         5f:78:ff:4f:b1:cd:5d:f5:54:37:04:f0:d9:08:cd:95:f0:b5:
         2a:9b:5f:e4:4f:d2:e2:2a:19:60:53:42:1a:d6:2d:a7:ee:86:
         a0:4a:81:8c:54:83:60:8b:34:cf:47:0c:48:db:a8:60:8e:80:
         5e:7e:eb:9a:b8:4f:a4:58:23:09:c2:03:bb:dd:ed:c4:d9:14:
         b9:2a:4e:c8:30:84:73:1e:6f:3d:8f:80:4c:44:ea:5b:ec:33:
         9a:76:99:49:fc:52:85:7b:24:77:b3:fe:11:37:25:77:41:bb:
         c7:0d:07:34:78:7a:ca:8c:cb:ef:20:27:c1:98:d5:b0:38:25:
         66:55:52:3d:fa:72:87:81:0f:bd:b0:b9:05:0c:0e:d1:87:ec:
         94:e4:32:98:0b:e6:62:60:98:be:15:7e:ec:96:c2:42:d2:99:
         a2:87:f3:1e:f2:c7:df:24:77:37:74:0d:fa:fd:09:10:ed:01:
         a4:89:ff:95:af:d6:68:f7:74:ac:9e:45:8b:46:a9:6c:db:14:
         db:3e:d2:96:e8:ef:c7:11:f9:b4:23:7b:43:36:a2:37:ce:63:
         5c:ea:21:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDcw/fyPN/H5m0CZ+b/bEY7keMU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKEZCRjhCODMxNkQ5QjA4NEE0ODYzMkZCMzQxQzQwODJDOEVCNTY3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCavfB8npx1Kr9MKT3rbUcs+vIT
yp2srYUZZ19Wbwd/1w21NZV4KOle+dVT27sP+KZZkE34YL8ZmjQhuOHL3jEQCPiP
bt9Yam3IFre15sdqUIJHexx6VUJcVwpuEoR9FDuyERvxnYezqm0S2/QFd+b2B5mT
E3MKLWeOt1O3y3YZpEQuck/Cxd+u1XN6iLxeCqHugL7yjO/vrFOGBISo8rE8vmv9
ib7TyWgkf1ZMrIchwmD7rpm5HPz9Qmr8yK56EP8dV1ZLF/Tq4iN4a/pwIJCkuqlm
r/qiogKvcGA2Ch6e69ZMG1aC+eKWy05KSXmB7/niSluT7LzgQW+LvRbFwv3jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+/i4MW2bCEpIYy+zQcQILI61Z1UwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzQzNTJlMzEzNzM5MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIts7QwDQYJKoZIhvcNAQELBQADggEBAH5blY5h
E9YDGhwZ0i3A7xhpZ400l2yQZEXUuH/BFwPwMXz+dl94/0+xzV31VDcE8NkIzZXw
tSqbX+RP0uIqGWBTQhrWLafuhqBKgYxUg2CLNM9HDEjbqGCOgF5+65q4T6RYIwnC
A7vd7cTZFLkqTsgwhHMebz2PgExE6lvsM5p2mUn8UoV7JHez/hE3JXdBu8cNBzR4
esqMy+8gJ8GY1bA4JWZVUj36coeBD72wuQUMDtGH7JTkMpgL5mJgmL4VfuyWwkLS
maKH8x7yx98kdzd0Dfr9CRDtAaSJ/5Wv1mj3dKyeRYtGqWzbFNs+0pbo78cR+bQj
e0M2ojfOY1zqIRM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:10 2026 by rpki-client