Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
File:                     34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa (raw, json)
Hash identifier:          fhEoHBxCHuonQ62Pcm/57kc0Fy1PVAPqW66MDFB18/0=
Subject key identifier:   A5:15:6B:2C:D5:3D:22:CB:77:1A:7C:44:13:59:B9:B4:1B:41:95:C9
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       43994E339D70A7F111F0BFA8CD9FBFA7AF0960DE
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
Signing time:             Thu 05 Feb 2026 11:54:00 +0000
ROA not before:           Thu 05 Feb 2026 11:49:00 +0000
ROA not after:            Thu 04 Feb 2027 11:54:00 +0000
asID:                     267209
IP address blocks:        45.230.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:99:4e:33:9d:70:a7:f1:11:f0:bf:a8:cd:9f:bf:a7:af:09:60:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Feb  5 11:49:00 2026 GMT
            Not After : Feb  4 11:54:00 2027 GMT
        Subject: CN=A5156B2CD53D22CB771A7C441359B9B41B4195C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:4d:24:a1:07:cb:4b:d9:8a:6b:a0:e6:7d:
                    ef:aa:bf:5f:cf:e8:d2:35:c5:28:ea:ef:9e:0a:5b:
                    15:4f:e8:17:d2:21:de:44:f1:a3:3d:72:92:07:c9:
                    b6:89:1e:d8:ae:7c:84:ae:42:86:cb:c0:09:8f:a7:
                    37:ed:11:af:79:31:8c:9c:e4:f5:06:26:1c:15:ff:
                    f4:6e:b4:50:01:e9:77:ea:ff:10:ed:fb:27:6e:7d:
                    f8:af:05:da:ec:50:15:1e:01:9e:37:27:e1:86:a1:
                    af:73:41:0d:61:09:23:d3:88:76:69:98:25:d8:ec:
                    0a:15:2b:49:33:bc:e7:8d:cf:46:1e:1c:ed:de:4e:
                    0c:ec:94:ec:2b:c9:13:0e:b3:4d:eb:38:84:89:65:
                    94:4d:f2:16:78:e1:5b:23:79:c6:a5:79:39:71:03:
                    08:a2:c5:b6:0a:f9:82:b9:83:63:08:b3:e1:da:fd:
                    a7:65:ea:75:8c:d3:d1:6f:3d:cc:94:b6:0d:20:d5:
                    b3:4a:d0:db:53:d2:32:11:e0:23:92:5d:0e:ae:7a:
                    f8:93:cc:c2:68:18:ba:14:14:55:90:f4:86:d2:ff:
                    3b:47:fa:02:eb:66:b8:b1:f8:24:3b:07:fc:89:b2:
                    3b:ba:ee:6d:37:31:d8:2e:18:c1:13:41:53:e1:78:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:6B:2C:D5:3D:22:CB:77:1A:7C:44:13:59:B9:B4:1B:41:95:C9
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f4:99:fe:e5:91:59:55:ab:ce:41:61:31:f3:7e:bb:cf:35:
         e2:a3:3e:ce:b7:14:58:d8:a9:a4:a3:0a:2d:1f:d4:28:81:dc:
         91:c7:28:33:9a:60:ec:cb:66:30:44:87:11:4c:0f:73:7a:01:
         3a:b2:21:80:b6:47:c4:ac:1f:66:4c:76:9d:68:49:4c:4b:a4:
         84:5f:4e:0a:dd:71:1a:5e:88:d8:ee:83:33:ab:a6:95:f3:a9:
         0c:de:89:08:b7:f9:ba:a3:58:5a:83:50:11:7f:40:32:67:50:
         01:87:8f:68:98:e0:c8:8d:16:68:45:7d:fd:f6:1f:1e:08:83:
         08:a3:30:6e:8e:b0:67:71:f6:e0:51:e0:ce:96:2a:cf:58:2d:
         c4:1a:df:b7:3e:f9:76:0b:b1:de:4f:0e:14:3c:b6:92:85:56:
         d2:77:e6:3e:b4:d3:c2:e7:f2:69:f0:2e:5e:05:84:eb:b2:77:
         b6:52:c3:3a:bf:ab:9f:af:a4:3c:b6:76:a5:27:3c:78:58:dc:
         ad:bc:82:7f:39:0d:b2:71:ea:af:ca:ce:74:8f:00:83:29:e6:
         fc:41:75:55:6a:ca:0f:6b:2f:bc:19:8d:b4:09:2c:7f:81:67:
         58:e0:2d:81:4c:ce:62:c2:06:83:e1:72:7a:fd:c6:61:e2:fe:
         7e:e5:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:48 2026 by rpki-client