Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
File:                     34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier:          C7LlMSOX3EmZTherQ248oTM0k7XqTLQAhZLhl4hPH7E=
Subject key identifier:   1C:31:C3:27:61:BE:11:BC:98:D1:D8:CB:82:37:49:D9:A5:9C:C8:18
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       7A584A37453D1E03672B7335A15B41A3CAB1DC8A
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
Signing time:             Thu 05 Feb 2026 07:29:34 +0000
ROA not before:           Thu 05 Feb 2026 07:24:34 +0000
ROA not after:            Thu 04 Feb 2027 07:29:34 +0000
asID:                     263945
IP address blocks:        45.188.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:58:4a:37:45:3d:1e:03:67:2b:73:35:a1:5b:41:a3:ca:b1:dc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Feb  5 07:24:34 2026 GMT
            Not After : Feb  4 07:29:34 2027 GMT
        Subject: CN=1C31C32761BE11BC98D1D8CB823749D9A59CC818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:f7:fd:af:be:a5:3f:09:b2:8e:38:60:4a:
                    75:61:d4:13:60:5f:09:64:47:c5:2f:cd:65:48:bd:
                    bf:05:fc:c1:63:cc:2d:30:ef:09:77:25:b4:52:ab:
                    fd:4c:a2:f3:ab:bd:7e:fd:0a:25:83:e9:20:44:cb:
                    48:31:c2:9d:ce:5a:29:1e:3b:bf:a8:dc:9c:f9:fd:
                    5e:69:00:ae:a8:59:a1:92:8b:e1:ef:35:fb:2f:4b:
                    84:82:38:f4:bd:bd:dc:32:09:67:0b:5f:a8:6a:b0:
                    12:90:ce:eb:d9:d9:f0:91:f3:fc:e1:c2:a6:0d:f6:
                    51:e4:0e:11:da:f3:e7:ca:51:3e:62:93:ee:36:d5:
                    99:0c:81:45:dd:b9:eb:fa:59:92:39:9d:f8:d9:ee:
                    bc:0f:3b:52:c2:8a:e9:24:71:71:31:80:99:41:5d:
                    b2:c4:18:0a:e8:6d:72:ba:87:12:38:10:58:56:08:
                    df:89:91:65:6e:97:f7:c3:77:9c:5f:c9:b6:42:76:
                    e1:a3:e4:24:45:88:2c:7c:10:09:0a:dd:ab:59:c8:
                    e0:df:a3:ac:8a:e7:fa:52:5d:95:e1:bc:fa:4b:90:
                    40:ed:8b:ac:ae:99:65:39:66:86:db:2e:bb:88:34:
                    35:69:23:41:2e:4c:0e:12:6c:23:80:33:6d:22:a6:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:C3:27:61:BE:11:BC:98:D1:D8:CB:82:37:49:D9:A5:9C:C8:18
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:00:cf:d1:86:94:81:5c:26:69:b0:43:cd:9a:26:ad:e5:
         af:aa:a4:81:8f:45:69:ec:a9:04:55:50:32:6f:0b:ae:75:0c:
         85:e0:29:50:29:6d:72:e0:86:dd:dd:ed:e9:0a:c5:ff:cc:1b:
         1a:2b:01:3b:c5:11:da:6f:2e:16:0b:2b:7d:19:e4:5b:8a:82:
         34:fc:93:aa:79:4a:2a:4f:2e:8b:62:4a:a7:26:5b:25:f0:d8:
         b7:c6:92:e4:99:82:0f:34:f8:19:ca:c6:88:4e:00:c5:d0:61:
         a9:8a:92:94:81:86:01:31:90:97:cb:e8:3e:5c:b6:a4:18:7b:
         d8:6f:89:4e:04:59:49:d7:dd:9e:e1:b8:5d:43:3e:c6:ef:36:
         5a:f3:ae:90:ed:82:53:e2:e6:37:b5:b7:2b:76:34:47:25:cb:
         7b:4c:91:69:83:26:c7:46:bc:4c:ed:22:74:46:d4:1d:2e:6d:
         4a:85:0a:5c:0e:11:88:2c:b3:e8:38:cc:bc:37:cb:57:ea:ff:
         46:fd:bf:0d:12:ce:ae:74:41:b0:af:4a:64:4c:71:2f:62:14:
         0b:09:78:c3:00:ab:48:53:9b:07:fd:f7:15:89:e0:80:fc:fd:
         2e:fc:98:5e:9e:4f:a9:c9:cd:19:30:2a:dd:a4:12:bb:83:a5:
         13:5e:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:58 2026 by rpki-client