Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa
File:                     34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa (raw, json)
Hash identifier:          ks88TwymNN6nhT00hSvdt449Tz3BKgmluxaViQ7hU3k=
Subject key identifier:   30:DB:E0:24:08:DE:D0:7F:1D:91:38:AF:FF:2A:59:F1:D5:EA:22:AA
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       0E266BEE8D83F5F373CBF75BEE1385DCE643DA71
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa
Signing time:             Thu 05 Feb 2026 11:53:58 +0000
ROA not before:           Thu 05 Feb 2026 11:48:58 +0000
ROA not after:            Thu 04 Feb 2027 11:53:58 +0000
asID:                     267209
IP address blocks:        45.230.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:26:6b:ee:8d:83:f5:f3:73:cb:f7:5b:ee:13:85:dc:e6:43:da:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Feb  5 11:48:58 2026 GMT
            Not After : Feb  4 11:53:58 2027 GMT
        Subject: CN=30DBE02408DED07F1D9138AFFF2A59F1D5EA22AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:30:6c:57:7d:01:84:af:8a:e7:51:a5:2b:
                    e1:c7:69:c5:78:02:64:11:47:7d:5a:23:5f:01:fe:
                    62:91:ca:59:0a:e7:08:07:25:0b:39:2b:9c:ed:c4:
                    70:43:dd:e7:4c:26:0c:af:b6:b5:ad:5a:70:84:75:
                    c5:70:22:4d:2f:e1:a6:36:1f:74:e7:fd:d1:15:f0:
                    7a:a2:13:a9:c5:f9:41:e9:85:53:c7:4f:44:97:73:
                    3e:3f:4e:22:4b:e6:49:79:1c:01:c3:94:14:01:8c:
                    5d:68:56:fd:7f:12:20:9e:5e:13:9c:a6:04:57:14:
                    96:08:8a:9e:a1:0c:64:52:c6:6c:04:10:c3:43:8b:
                    0d:93:17:9e:75:41:3d:17:fc:5c:ee:af:8a:6a:d2:
                    ed:7f:03:87:75:80:aa:d6:f0:92:3d:48:ac:d3:75:
                    2a:b6:b6:bb:84:8d:22:b6:22:e1:c1:3e:ac:9f:bb:
                    d3:3c:da:51:18:b4:64:9a:6a:a9:4d:21:c5:07:e6:
                    27:21:ab:30:09:7c:ba:f5:61:a3:2d:b6:dd:ba:ec:
                    56:7a:2a:0c:bb:6a:88:26:8d:5d:18:6e:fa:19:60:
                    84:c8:40:35:55:d4:d4:19:e7:20:8d:57:de:39:2d:
                    9f:76:03:f5:9a:79:12:f8:9c:6d:21:28:18:c2:24:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DB:E0:24:08:DE:D0:7F:1D:91:38:AF:FF:2A:59:F1:D5:EA:22:AA
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232342e302f32332d3233203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:8a:cc:db:11:ca:0d:22:d0:9d:c6:31:a5:ea:44:f8:76:2e:
         cd:54:39:71:4f:01:dd:43:f9:aa:7d:81:ff:be:1d:e6:57:70:
         3b:af:cf:00:ee:d1:fc:6b:9e:b7:df:6c:e0:c3:cd:7b:b9:61:
         47:07:73:4c:67:17:81:99:dc:84:37:17:42:88:34:2e:09:ba:
         c6:79:a1:b1:4c:52:3f:f4:a4:1d:e3:03:fa:e8:bb:f4:3b:78:
         37:35:40:d8:5d:40:3f:be:b1:8f:44:e2:62:3c:92:35:ee:62:
         a5:e3:42:3b:51:de:27:98:c3:3e:31:54:ce:92:3a:b6:fb:24:
         2e:1d:cf:de:93:d6:43:1c:5d:40:a8:bf:5c:69:c8:de:b4:cc:
         42:4c:bd:d9:cd:e5:cf:86:56:16:6b:49:6d:29:4a:80:85:2a:
         ae:4c:39:25:47:15:7b:ff:ef:f4:e0:8e:d1:1b:39:ba:bc:8e:
         f9:a9:28:09:36:53:ec:a7:9a:28:51:b6:12:8e:86:1d:78:94:
         54:ce:96:f4:d3:71:67:3d:ca:6d:4b:f2:f9:4c:38:2c:ac:13:
         e1:cc:c7:fe:4b:66:1a:5f:f3:eb:46:ab:4f:c7:4c:52:53:5c:
         ef:63:d1:ca:0a:67:b4:56:44:51:52:d6:99:3c:a7:fe:40:dd:
         e7:08:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:46:31 2026 by rpki-client