Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa
File:                     3136382e302e3132382e302f32322d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          u6HsISJiV5Dhkxib3ODLad/d9l8x3lm9B8rS8mivPGI=
Subject key identifier:   33:29:96:51:CD:A9:B7:EE:FF:DB:3A:D7:8B:38:6E:C9:43:FD:64:37
Certificate issuer:       /CN=45FC107BB0B6654452677B1D69CD570ED537BDB4
Certificate serial:       7055EE043267FFF960E20ED23EE48BB486852B73
Authority key identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa
Signing time:             Thu 05 Feb 2026 16:02:45 +0000
ROA not before:           Thu 05 Feb 2026 15:57:45 +0000
ROA not after:            Thu 04 Feb 2027 16:02:45 +0000
asID:                     263069
IP address blocks:        168.0.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl
                          rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:55:ee:04:32:67:ff:f9:60:e2:0e:d2:3e:e4:8b:b4:86:85:2b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4
        Validity
            Not Before: Feb  5 15:57:45 2026 GMT
            Not After : Feb  4 16:02:45 2027 GMT
        Subject: CN=33299651CDA9B7EEFFDB3AD78B386EC943FD6437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:57:14:1c:7a:3d:96:4c:f8:ac:3b:d7:99:
                    63:a7:c8:48:13:16:51:80:9e:da:e9:f3:21:cc:7c:
                    be:1f:c7:96:d8:8d:31:a7:65:b2:61:02:1c:fc:fc:
                    e5:cf:c4:8d:51:ec:f9:d7:8b:82:05:d9:61:33:12:
                    49:85:d9:dc:32:74:66:2f:e6:c1:cf:3f:70:78:ab:
                    d4:16:7b:0e:6c:ff:5f:8d:e4:73:19:40:d7:53:d6:
                    af:1e:84:52:ef:f6:94:ab:9e:0d:b3:37:2b:3b:cc:
                    95:47:e7:37:4e:53:35:e2:6b:2d:0c:22:cb:90:44:
                    20:87:eb:e1:66:2e:4d:e2:5a:3a:66:5b:4b:0b:5f:
                    c3:83:e4:5c:e9:24:40:fd:57:42:90:f2:a6:33:2a:
                    78:ab:31:0f:50:c8:b9:60:8b:3f:95:8f:e1:9e:d4:
                    44:23:e5:36:e2:1d:e7:1b:2e:e8:76:84:7b:b2:32:
                    51:e3:6f:32:30:3b:3a:d6:41:c9:c2:b3:05:39:17:
                    c3:22:c3:02:e7:8e:b0:b7:c4:60:87:6d:a2:50:24:
                    ea:56:78:e4:52:33:22:a1:2c:40:3d:3b:8e:3d:fb:
                    95:2b:e5:e3:4b:3f:4c:55:ca:bb:7a:da:98:1d:09:
                    92:4f:7e:12:5a:ca:e0:43:05:c4:c4:b0:b6:49:39:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:96:51:CD:A9:B7:EE:FF:DB:3A:D7:8B:38:6E:C9:43:FD:64:37
            X509v3 Authority Key Identifier:
                keyid:45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:f6:4d:7d:bc:b7:ac:ba:0a:4a:93:ad:69:70:4e:3e:29:
         33:a9:c4:6d:23:1d:88:1e:6d:ac:8b:07:d8:56:1c:e2:72:75:
         22:bb:39:2a:ac:27:38:31:7e:c0:c0:21:2e:9f:5a:ab:69:5b:
         c0:d0:e6:68:0c:5d:f4:82:2b:a5:36:bc:ea:4d:83:2e:42:f3:
         fd:e9:21:3c:d4:8a:49:01:e4:8e:09:0e:87:4d:18:bb:b4:70:
         74:3c:68:d8:d8:91:41:f4:10:61:a1:bc:67:37:6b:97:e0:e8:
         75:04:24:07:f9:19:b1:9c:92:51:4c:1b:0f:c2:23:37:f1:02:
         c0:c2:66:4e:1b:69:ae:ea:b2:f7:03:7e:c9:29:69:c3:19:41:
         18:93:af:0a:d7:1e:d1:4d:59:ca:aa:44:c5:8a:25:bc:be:f6:
         cf:5d:6b:57:8e:d8:ac:88:c1:6c:e5:3a:0e:67:8f:d0:b7:b6:
         89:1d:87:c6:54:20:7d:81:77:c2:f6:c1:fb:a1:7c:f2:67:10:
         a2:79:55:ef:41:5c:10:95:14:78:f4:9b:27:e8:c8:7b:b1:d6:
         5b:c6:67:ab:d5:96:9c:35:b0:4f:b8:76:65:92:cd:00:eb:bd:
         e9:03:d6:20:03:a8:e0:ad:b4:87:85:02:28:25:9d:f6:1f:14:
         94:38:4b:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcFXuBDJn//lg4g7SPuSLtIaFK3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVGQzEwN0JCMEI2NjU0NDUyNjc3QjFENjlDRDU3MEVE
NTM3QkRCNDAeFw0yNjAyMDUxNTU3NDVaFw0yNzAyMDQxNjAyNDVaMDMxMTAvBgNV
BAMTKDMzMjk5NjUxQ0RBOUI3RUVGRkRCM0FENzhCMzg2RUM5NDNGRDY0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcFcUHHo9lkz4rDvXmWOnyEgT
FlGAntrp8yHMfL4fx5bYjTGnZbJhAhz8/OXPxI1R7PnXi4IF2WEzEkmF2dwydGYv
5sHPP3B4q9QWew5s/1+N5HMZQNdT1q8ehFLv9pSrng2zNys7zJVH5zdOUzXiay0M
IsuQRCCH6+FmLk3iWjpmW0sLX8OD5FzpJED9V0KQ8qYzKnirMQ9QyLlgiz+Vj+Ge
1EQj5TbiHecbLuh2hHuyMlHjbzIwOzrWQcnCswU5F8MiwwLnjrC3xGCHbaJQJOpW
eORSMyKhLEA9O449+5Ur5eNLP0xVyrt62pgdCZJPfhJayuBDBcTEsLZJORmfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMymWUc2pt+7/2zrXizhuyUP9ZDcwHwYDVR0j
BBgwFoAURfwQe7C2ZURSZ3sdac1XDtU3vbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2da
WDEvMS80NUZDMTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RkMxMDdCQjBCNjY1NDQ1
MjY3N0IxRDY5Q0Q1NzBFRDUzN0JEQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZXQVlqVzFVTXpZQzRUcGp6TjZ0V3ZTMzdIMmJpcEtmd1U3S0RCM0dnWlgxLzEv
MzEzNjM4MmUzMDJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqACAMA0GCSqGSIb3DQEBCwUAA4IBAQCjSfZNfby3
rLoKSpOtaXBOPikzqcRtIx2IHm2siwfYVhzicnUiuzkqrCc4MX7AwCEun1qraVvA
0OZoDF30giulNrzqTYMuQvP96SE81IpJAeSOCQ6HTRi7tHB0PGjY2JFB9BBhobxn
N2uX4Oh1BCQH+RmxnJJRTBsPwiM38QLAwmZOG2mu6rL3A37JKWnDGUEYk68K1x7R
TVnKqkTFiiW8vvbPXWtXjtisiMFs5ToOZ4/Qt7aJHYfGVCB9gXfC9sH7oXzyZxCi
eVXvQVwQlRR49Jsn6Mh7sdZbxmer1ZacNbBPuHZlks0A673pA9YgA6jgrbSHhQIo
JZ32HxSUOEtF
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:21 2026 by rpki-client