Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
File:                     34352e3138362e35362e302f32322d3332203d3e20323639343132.roa (raw, json)
Hash identifier:          5IrLaPhDLN5v6NobpPuZ3NCV337nLo5P3hg4CHutqqk=
Subject key identifier:   8A:7A:1C:6D:1C:8C:5C:19:DF:77:B3:F0:83:D1:11:AA:59:D8:B0:3C
Certificate issuer:       /CN=EC1910123F7F6AC855834D3BED8883627192021E
Certificate serial:       5B82D40F97BA2C18F3B2B5C671F0276C4797EA1E
Authority key identifier: EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
Signing time:             Thu 05 Feb 2026 21:00:31 +0000
ROA not before:           Thu 05 Feb 2026 20:55:31 +0000
ROA not after:            Thu 04 Feb 2027 21:00:31 +0000
asID:                     269412
IP address blocks:        45.186.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl
                          rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:d4:0f:97:ba:2c:18:f3:b2:b5:c6:71:f0:27:6c:47:97:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1910123F7F6AC855834D3BED8883627192021E
        Validity
            Not Before: Feb  5 20:55:31 2026 GMT
            Not After : Feb  4 21:00:31 2027 GMT
        Subject: CN=8A7A1C6D1C8C5C19DF77B3F083D111AA59D8B03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:fa:37:e7:d5:06:be:97:1b:28:48:14:18:
                    47:37:65:31:1c:c5:03:bd:fb:60:53:21:4c:87:af:
                    72:be:de:11:5d:06:e4:61:f5:12:da:6e:4a:11:60:
                    4d:4b:b5:5a:c5:74:21:b8:76:23:bc:99:c4:17:6f:
                    a1:29:f8:3b:0d:8a:f3:8f:78:fb:78:14:e6:31:cd:
                    14:0f:7a:e0:90:93:f6:94:18:38:2f:fc:26:7d:d3:
                    6b:5f:83:31:e8:6f:24:0f:71:87:44:09:91:97:3b:
                    85:df:1c:1d:5f:c7:61:22:7c:9f:9b:6e:de:ac:4d:
                    76:bf:e4:4d:4d:8c:4d:86:dc:b1:72:7c:7a:2d:e8:
                    0e:4d:70:65:e9:08:9e:95:66:e0:0a:1a:31:1b:76:
                    83:3b:74:4a:cf:ae:67:db:75:3b:fc:be:54:48:8e:
                    78:31:63:1c:7b:66:ec:c9:89:5d:0d:96:fd:b6:ec:
                    26:d8:04:c5:88:ef:ed:92:87:05:ab:69:95:eb:cc:
                    b7:bf:7c:f3:1d:12:15:27:2d:33:5c:ba:fb:f0:5a:
                    7e:9c:f3:56:83:d3:ce:77:0e:e4:65:2e:45:08:3b:
                    ab:e6:b7:26:a2:81:41:ee:d0:71:e4:45:d5:af:b3:
                    89:0a:37:32:ed:a2:d1:11:7e:74:d5:14:81:3f:08:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7A:1C:6D:1C:8C:5C:19:DF:77:B3:F0:83:D1:11:AA:59:D8:B0:3C
            X509v3 Authority Key Identifier:
                keyid:EC:19:10:12:3F:7F:6A:C8:55:83:4D:3B:ED:88:83:62:71:92:02:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/EC1910123F7F6AC855834D3BED8883627192021E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC1910123F7F6AC855834D3BED8883627192021E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/1/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:6d:41:33:ee:f7:e4:11:d7:04:1a:3d:cb:ea:e5:9b:94:
         a1:d4:c0:a8:7d:a1:60:39:66:b5:56:56:df:eb:d8:76:e9:af:
         f5:4b:57:99:f6:75:24:f9:a4:1c:6a:52:2d:26:d5:56:b0:27:
         44:e3:73:36:53:b6:aa:3b:1c:48:4d:a6:f7:dd:c0:fe:11:c6:
         68:9c:e3:7c:d1:30:5e:a7:b5:07:54:59:eb:29:25:b4:df:c4:
         27:9a:21:2d:da:1a:f2:84:63:d3:a5:d8:3c:1a:78:90:4d:79:
         cf:b3:f5:d1:d2:e2:3d:a3:0f:79:51:3c:af:62:06:45:53:1a:
         d8:f1:4e:8d:9f:56:f2:90:4d:c5:22:a7:93:5e:1f:e4:a3:b4:
         c5:3e:37:40:b1:61:f3:64:80:f6:5f:09:57:54:3f:0f:88:c3:
         09:ad:44:ad:df:94:f0:fb:4b:7a:71:85:09:41:21:9d:e3:09:
         88:e4:09:dd:f3:02:24:77:2c:25:9c:f7:d7:fa:94:1b:14:78:
         03:bf:22:b6:c8:9b:fa:cc:38:1d:b2:4c:6a:aa:23:34:8f:5d:
         ab:6f:ab:de:40:b0:00:f2:45:3a:69:9d:3f:9e:fd:f5:dc:25:
         a4:cf:3a:f4:2a:9c:a5:a6:50:e1:b1:41:7e:10:c1:d9:5e:99:
         b1:cd:c7:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW4LUD5e6LBjzsrXGcfAnbEeX6h4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxOTEwMTIzRjdGNkFDODU1ODM0RDNCRUQ4ODgzNjI3
MTkyMDIxRTAeFw0yNjAyMDUyMDU1MzFaFw0yNzAyMDQyMTAwMzFaMDMxMTAvBgNV
BAMTKDhBN0ExQzZEMUM4QzVDMTlERjc3QjNGMDgzRDExMUFBNTlEOEIwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+fo359UGvpcbKEgUGEc3ZTEc
xQO9+2BTIUyHr3K+3hFdBuRh9RLabkoRYE1LtVrFdCG4diO8mcQXb6Ep+DsNivOP
ePt4FOYxzRQPeuCQk/aUGDgv/CZ902tfgzHobyQPcYdECZGXO4XfHB1fx2EifJ+b
bt6sTXa/5E1NjE2G3LFyfHot6A5NcGXpCJ6VZuAKGjEbdoM7dErPrmfbdTv8vlRI
jngxYxx7ZuzJiV0Nlv227CbYBMWI7+2ShwWraZXrzLe/fPMdEhUnLTNcuvvwWn6c
81aD0853DuRlLkUIO6vmtyaigUHu0HHkRdWvs4kKNzLtotERfnTVFIE/CHofAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUinocbRyMXBnfd7Pwg9ERqlnYsDwwHwYDVR0j
BBgwFoAU7BkQEj9/ashVg0077YiDYnGSAh4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVlXZVRrcld3b3AxTGI0RFlQNmtVbWVWa3J3V2RIWG5RNHZtQzJGdDNh
MXQvMS9FQzE5MTAxMjNGN0Y2QUM4NTU4MzREM0JFRDg4ODM2MjcxOTIwMjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMTkxMDEyM0Y3RjZBQzg1
NTgzNEQzQkVEODg4MzYyNzE5MjAyMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VZV2VUa3JXd29wMUxiNERZUDZrVW1lVmtyd1dkSFhuUTR2bUMyRnQzYTF0LzEv
MzQzNTJlMzEzODM2MmUzNTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbo4MA0GCSqGSIb3DQEBCwUAA4IBAQBemm1BM+73
5BHXBBo9y+rlm5Sh1MCofaFgOWa1Vlbf69h26a/1S1eZ9nUk+aQcalItJtVWsCdE
43M2U7aqOxxITab33cD+EcZonON80TBep7UHVFnrKSW038QnmiEt2hryhGPTpdg8
GniQTXnPs/XR0uI9ow95UTyvYgZFUxrY8U6Nn1bykE3FIqeTXh/ko7TFPjdAsWHz
ZID2XwlXVD8PiMMJrUSt35Tw+0t6cYUJQSGd4wmI5And8wIkdywlnPfX+pQbFHgD
vyK2yJv6zDgdskxqqiM0j12rb6veQLAA8kU6aZ0/nv313CWkzzr0KpylplDhsUF+
EMHZXpmxzcc1
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:19:18 2026 by rpki-client