Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa
File:                     34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (raw, json)
Hash identifier:          b1bWqdl1nl0hK/R0pp2vlvzY1ea1GeSNUD1Voulpm7c=
Subject key identifier:   10:EE:54:09:96:77:2D:F7:4A:A6:94:7A:FF:FC:B7:78:28:B9:16:A2
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       58878F2580314ABAB39A40450EAB9D28410F8407
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa
Signing time:             Thu 05 Feb 2026 04:26:02 +0000
ROA not before:           Thu 05 Feb 2026 04:21:02 +0000
ROA not after:            Thu 04 Feb 2027 04:26:02 +0000
asID:                     269382
IP address blocks:        45.184.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:8f:25:80:31:4a:ba:b3:9a:40:45:0e:ab:9d:28:41:0f:84:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Feb  5 04:21:02 2026 GMT
            Not After : Feb  4 04:26:02 2027 GMT
        Subject: CN=10EE540996772DF74AA6947AFFFCB77828B916A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:5e:fa:65:ea:1c:84:37:1a:86:0c:e2:58:
                    f2:c4:5e:ef:7b:44:be:65:f1:91:11:a2:54:5f:93:
                    c3:ed:fe:6d:ec:69:f9:65:1d:d0:02:61:f5:c0:07:
                    2c:03:bd:51:c6:f4:41:b8:e0:2e:f3:af:0d:41:c9:
                    4b:0d:42:c2:12:99:19:5e:16:d6:ec:91:ab:5a:d0:
                    d8:2f:30:47:80:e7:b0:e9:55:be:5c:f2:65:dc:16:
                    15:47:2d:6b:97:f2:8c:19:5f:48:ee:9b:6d:2d:76:
                    31:2e:b8:52:b1:9e:bc:3c:2b:dd:0b:ab:29:57:64:
                    28:b4:09:77:87:02:bf:fd:5e:07:d4:ff:34:4c:72:
                    12:6e:d8:00:23:0e:fd:6d:9e:a2:8a:52:24:51:c7:
                    d0:c7:8d:b5:0d:8d:80:64:f6:af:e2:98:29:41:43:
                    f2:97:1b:3e:d3:ad:93:35:96:87:14:8f:76:98:56:
                    92:e5:c4:15:f2:96:0a:4c:4e:d0:be:6f:1a:f5:68:
                    67:ff:76:17:21:37:f0:f2:5f:c9:af:fa:36:ca:d6:
                    13:54:46:b6:1d:f5:9b:c0:fc:e3:5d:58:77:a8:50:
                    6a:e0:dc:92:71:ec:31:ff:21:b2:89:77:f4:96:62:
                    18:c5:f5:e8:66:9b:f9:98:15:c8:a6:09:cf:0d:9c:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:54:09:96:77:2D:F7:4A:A6:94:7A:FF:FC:B7:78:28:B9:16:A2
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:4b:3a:be:f8:a2:b2:a3:e4:d7:ee:44:1e:e8:e3:af:7a:
         07:1a:72:ce:b0:65:7c:eb:ec:d8:84:43:24:9f:f9:b7:be:b9:
         e4:46:7a:c0:48:be:16:66:6d:c1:1d:c9:b3:9c:4e:1a:f3:48:
         29:f5:de:a8:3c:47:22:a3:62:99:e2:43:82:5d:99:5d:ed:23:
         1e:70:44:58:1c:39:61:70:79:63:6f:3c:77:6a:5e:22:f1:b6:
         bf:38:43:09:9e:9b:b6:35:1e:bf:2f:0d:00:d7:f0:d6:9e:f3:
         0e:33:08:c0:74:73:56:f5:d7:b9:20:1b:54:b5:ae:eb:b2:bf:
         30:20:22:bb:11:ce:01:e5:21:5b:2f:7a:a0:3a:b8:0c:84:99:
         74:74:cf:4b:eb:b6:77:58:85:ab:6f:91:c5:94:e2:43:a6:8c:
         ba:1e:d0:58:b6:73:ac:fa:d6:dd:60:ed:e4:76:03:f1:08:da:
         76:89:6b:6a:7c:df:b8:12:12:f4:80:4d:49:7b:ba:12:c5:9d:
         02:19:48:45:44:37:08:13:c8:b7:9d:9a:85:b4:12:f3:da:90:
         51:27:7b:61:b1:24:18:17:1e:ee:de:63:75:a1:a4:ab:d3:1c:
         95:b4:2d:bb:35:6a:ee:3a:e4:38:18:e2:52:97:96:47:26:d7:
         db:22:26:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWIePJYAxSrqzmkBFDqudKEEPhAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVFOUIxNTZFMEY1ODdDOUJBMDczOTI4NkY3OUE5RkI4
NUM4MEJDMzAeFw0yNjAyMDUwNDIxMDJaFw0yNzAyMDQwNDI2MDJaMDMxMTAvBgNV
BAMTKDEwRUU1NDA5OTY3NzJERjc0QUE2OTQ3QUZGRkNCNzc4MjhCOTE2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgV76ZeochDcahgziWPLEXu97
RL5l8ZERolRfk8Pt/m3safllHdACYfXABywDvVHG9EG44C7zrw1ByUsNQsISmRle
Ftbskata0NgvMEeA57DpVb5c8mXcFhVHLWuX8owZX0jum20tdjEuuFKxnrw8K90L
qylXZCi0CXeHAr/9XgfU/zRMchJu2AAjDv1tnqKKUiRRx9DHjbUNjYBk9q/imClB
Q/KXGz7TrZM1locUj3aYVpLlxBXylgpMTtC+bxr1aGf/dhchN/DyX8mv+jbK1hNU
RrYd9ZvA/ONdWHeoUGrg3JJx7DH/IbKJd/SWYhjF9ehmm/mYFcimCc8NnIBfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEO5UCZZ3LfdKppR6//y3eCi5FqIwHwYDVR0j
BBgwFoAUvumxVuD1h8m6Bzkob3mp+4XIC8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnpBYVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25M
TG8vMS9CRUU5QjE1NkUwRjU4N0M5QkEwNzM5Mjg2Rjc5QTlGQjg1QzgwQkMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRTlCMTU2RTBGNTg3QzlC
QTA3MzkyODZGNzlBOUZCODVDODBCQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z6QWFWS0tmUEMzRnpXRkxWdlNvQ0VFV0tNU3pNTThGSzF3R3ljRnduTExvLzEv
MzQzNTJlMzEzODM0MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuIgwDQYJKoZIhvcNAQELBQADggEBAJ7BSzq+
+KKyo+TX7kQe6OOvegcacs6wZXzr7NiEQySf+be+ueRGesBIvhZmbcEdybOcThrz
SCn13qg8RyKjYpniQ4JdmV3tIx5wRFgcOWFweWNvPHdqXiLxtr84Qwmem7Y1Hr8v
DQDX8Nae8w4zCMB0c1b117kgG1S1ruuyvzAgIrsRzgHlIVsveqA6uAyEmXR0z0vr
tndYhatvkcWU4kOmjLoe0Fi2c6z61t1g7eR2A/EI2naJa2p837gSEvSATUl7uhLF
nQIZSEVENwgTyLedmoW0EvPakFEne2GxJBgXHu7eY3WhpKvTHJW0Lbs1au465DgY
4lKXlkcm19siJqI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:11 2026 by rpki-client