Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa
File:                     34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa (raw, json)
Hash identifier:          hEbvnPTSrU8b817m9fV0z3b9W2xo+EDFWZTzJPyfnRk=
Subject key identifier:   EB:5F:B7:F5:9F:8C:A0:FC:B9:70:79:81:FD:0C:66:C8:A2:70:60:2E
Certificate issuer:       /CN=E6BB3427C16E46B4B4CCFA033D4EB241714F97D1
Certificate serial:       45E3EA56E14C37886E08F4A7C7A009D580BB61A1
Authority key identifier: E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa
Signing time:             Thu 05 Feb 2026 23:18:44 +0000
ROA not before:           Thu 05 Feb 2026 23:13:44 +0000
ROA not after:            Thu 04 Feb 2027 23:18:44 +0000
asID:                     269490
IP address blocks:        45.187.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.crl
                          rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e3:ea:56:e1:4c:37:88:6e:08:f4:a7:c7:a0:09:d5:80:bb:61:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6BB3427C16E46B4B4CCFA033D4EB241714F97D1
        Validity
            Not Before: Feb  5 23:13:44 2026 GMT
            Not After : Feb  4 23:18:44 2027 GMT
        Subject: CN=EB5FB7F59F8CA0FCB9707981FD0C66C8A270602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:fb:de:b0:5c:3d:a5:dc:34:3d:1b:a7:b4:
                    b2:4c:29:6e:bf:71:ef:2c:dc:eb:86:0c:0d:ea:e3:
                    0f:d4:60:fb:92:85:85:53:a2:4d:ee:8e:28:bd:19:
                    a9:4a:5d:43:e2:d1:bb:b2:c7:c5:05:95:7c:f6:10:
                    d2:d3:9f:6c:c9:68:83:dc:7f:24:72:dd:48:c8:72:
                    9b:ce:43:c0:c7:35:58:52:5c:0b:2f:6a:41:f7:9c:
                    b0:39:2b:fb:9f:0a:0f:c7:b2:eb:a7:86:c8:71:ce:
                    14:65:c1:f8:c6:0e:3a:b1:3f:70:e5:79:c0:24:da:
                    1b:67:d5:b2:91:9f:89:41:57:fc:24:15:3a:64:59:
                    c8:5f:de:32:f0:4a:24:02:d6:a7:87:72:12:94:83:
                    56:ac:e7:8a:46:4e:59:a0:ad:a4:37:a7:6c:85:ee:
                    21:77:80:21:f9:33:ec:51:2e:f5:bd:c2:44:85:78:
                    65:1a:9a:31:25:a5:b0:78:8a:a6:fb:09:da:00:ef:
                    86:76:ea:e4:d8:60:b5:a7:78:fc:fd:5b:09:60:a2:
                    3b:33:e6:0a:9c:c7:a6:5c:b8:87:14:f6:87:71:cb:
                    47:21:35:af:a6:07:be:54:75:74:53:b1:70:f8:95:
                    d0:c8:dc:65:a6:18:f8:9f:fe:87:35:cd:0f:03:1b:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:B7:F5:9F:8C:A0:FC:B9:70:79:81:FD:0C:66:C8:A2:70:60:2E
            X509v3 Authority Key Identifier:
                keyid:E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:e2:8c:01:47:69:17:af:8b:50:4b:d4:d3:cd:79:d4:98:
         26:93:45:a4:b1:76:67:87:e6:da:8c:9f:bb:82:e4:8a:a1:ce:
         0c:38:e4:12:cc:d1:94:a7:19:fd:88:1e:b4:df:72:7c:0b:75:
         df:50:28:21:ab:3a:e5:e9:d7:8a:2e:54:38:d6:81:15:ec:ca:
         36:78:45:b6:4a:15:9d:e1:de:d0:d7:fa:93:74:dd:ae:f6:4a:
         f5:03:b0:26:f5:44:af:08:34:b1:86:88:ad:ba:58:59:31:ec:
         33:37:50:11:3f:b2:15:04:70:e4:fa:26:fb:ce:4f:a2:cc:d6:
         4f:16:17:27:a0:8a:99:90:c5:a9:6b:03:6b:63:56:ef:33:73:
         1d:d7:7e:21:7b:c0:b9:4a:5e:25:9d:a9:73:ff:32:b7:5a:eb:
         96:8d:4e:69:19:71:b7:b0:72:e7:8e:c3:0b:4b:0b:d4:8c:01:
         b1:80:b9:c3:17:22:1a:e7:0d:c7:1a:f3:70:35:a1:13:f2:76:
         7f:bc:91:ef:5b:47:e3:c4:ac:c7:87:ce:f1:1e:02:e2:da:a3:
         2e:74:c0:c0:9a:8a:81:1d:33:5f:36:96:9d:ed:29:80:2c:9a:
         1b:35:87:f6:46:e3:26:89:95:2e:b8:d1:e0:89:43:e7:c5:d2:
         99:ff:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:57 2026 by rpki-client