Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa
File:                     34352e3137322e36382e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          O88F3IAYv9bRjCLcZzT4fw8mDR71Ietsv2Z1L4B1oGw=
Subject key identifier:   F3:DF:8F:6A:B2:7C:1A:8B:9B:49:EC:F1:12:89:F4:FF:5E:E3:83:88
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       757A251343D683D78BE717715751080A183849C1
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa
Signing time:             Fri 06 Feb 2026 19:00:01 +0000
ROA not before:           Fri 06 Feb 2026 18:55:01 +0000
ROA not after:            Sat 06 Feb 2027 19:00:01 +0000
asID:                     265234
IP address blocks:        45.172.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:25:13:43:d6:83:d7:8b:e7:17:71:57:51:08:0a:18:38:49:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Feb  6 18:55:01 2026 GMT
            Not After : Feb  6 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:44:5d:10:89:a3:42:e2:ee:db:69:43:e6:
                    e4:7e:a7:68:74:a0:e6:cf:fc:10:7f:83:bf:4a:6a:
                    47:a0:83:d4:63:a5:6f:49:73:da:5c:b0:7d:42:85:
                    cd:88:36:4b:8c:54:d6:76:b8:70:88:68:4b:d8:9f:
                    f3:4b:8f:e5:86:1e:8e:f3:dc:87:8c:f1:a9:20:60:
                    16:53:52:ef:b1:3d:b7:dd:bb:86:41:ad:ec:3c:3e:
                    a2:4e:38:9a:48:25:43:ad:eb:56:75:de:de:e9:57:
                    03:01:bf:24:7f:14:78:12:63:f9:bc:3f:43:a0:d2:
                    34:e0:c1:40:d6:8b:27:d5:68:e8:ee:8b:e1:5e:bb:
                    9d:bf:bb:ee:c1:91:bf:af:3a:95:34:8d:2b:6f:d7:
                    b1:81:ab:b1:ca:ca:37:82:d1:91:75:28:82:21:43:
                    eb:fb:73:b7:99:63:25:44:41:ea:cd:ad:49:4c:0c:
                    13:29:22:55:13:18:87:cf:68:2c:02:d2:79:50:eb:
                    58:d2:a9:06:fd:1f:9c:16:19:b1:5a:2c:2f:77:95:
                    7c:4f:4b:a0:bb:13:4d:b5:31:a8:03:dd:1e:bd:57:
                    c0:c2:31:cb:a0:aa:28:be:02:3e:a5:ed:83:74:8c:
                    f7:5c:db:f5:b3:a5:fd:3b:b4:66:f6:1d:89:98:9c:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:8F:6A:B2:7C:1A:8B:9B:49:EC:F1:12:89:F4:FF:5E:E3:83:88
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/34352e3137322e36382e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:eb:69:dc:12:98:ed:48:c3:1a:47:42:8c:15:80:c6:15:8f:
         d8:67:a1:6e:33:61:a6:b4:f3:24:16:32:c9:6a:e1:a6:13:6f:
         cb:24:d3:98:27:d3:e7:ba:16:fa:45:74:a8:29:a8:b2:f6:ce:
         01:98:ef:b2:a6:b7:18:9c:17:06:2b:5d:dc:ba:fc:b0:bc:16:
         85:ef:c2:9e:8a:1f:4c:de:8e:15:86:ba:7f:1f:9b:07:1f:db:
         5f:b2:3b:02:7c:c2:88:0c:33:51:37:12:30:40:82:eb:e6:75:
         7f:0e:cc:8c:63:a5:71:0a:7f:65:6d:71:c0:cd:60:d1:99:fc:
         b6:4b:8b:3a:5b:06:42:e4:00:27:34:e3:58:fd:63:69:6f:17:
         10:99:8a:4f:18:95:87:f3:2c:41:7b:a3:dd:ad:fc:c9:fb:46:
         8c:c8:fc:61:0f:81:7f:71:d9:65:e2:ef:20:b3:71:14:eb:24:
         77:4b:5b:c0:fd:88:ef:3c:83:16:56:7c:a4:63:5c:21:16:bb:
         53:7d:82:6c:fe:ff:39:9b:3c:a5:b3:a8:6b:74:89:2d:65:d9:
         2f:39:85:79:f7:51:0c:50:15:86:ea:d2:c2:d5:d2:3e:8f:84:
         b8:40:13:28:5b:65:c5:84:ab:2f:d8:8c:d9:68:b9:20:1a:b7:
         f5:1c:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:15 2026 by rpki-client