Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa
File:                     34352e37302e3138382e302f32322d3234203d3e20323637353934.roa (raw, json)
Hash identifier:          SMrZQD8pkOLP2g6pC4U+IOrjkNVqJPXpx3u9kxz+2/g=
Subject key identifier:   96:E5:17:4B:A9:66:A4:12:28:DF:C0:60:F0:5A:14:7A:6A:A2:56:36
Certificate issuer:       /CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
Certificate serial:       121A8F0B2089B7EBCF7E5E72115025305B6B2B68
Authority key identifier: 1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa
Signing time:             Thu 05 Feb 2026 05:06:30 +0000
ROA not before:           Thu 05 Feb 2026 05:01:30 +0000
ROA not after:            Thu 04 Feb 2027 05:06:30 +0000
asID:                     267594
IP address blocks:        45.70.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl
                          rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:8f:0b:20:89:b7:eb:cf:7e:5e:72:11:50:25:30:5b:6b:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
        Validity
            Not Before: Feb  5 05:01:30 2026 GMT
            Not After : Feb  4 05:06:30 2027 GMT
        Subject: CN=96E5174BA966A41228DFC060F05A147A6AA25636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:79:11:a8:b6:d5:2f:89:f4:14:a9:af:5f:
                    f8:ea:20:cf:10:f4:9c:24:f2:e0:4e:47:64:46:d4:
                    b6:6e:71:e0:53:8c:a4:1b:ec:15:10:97:62:fc:cc:
                    ec:46:da:e5:94:b2:ba:d6:1f:28:c2:b2:81:36:57:
                    de:a1:34:9c:11:23:2b:51:0a:81:6a:e2:ce:2d:e6:
                    6e:5b:a2:5f:3a:68:93:f0:87:1d:ca:72:dc:4e:50:
                    45:16:7f:0d:1e:37:99:33:f9:8b:b3:9b:78:8d:89:
                    cf:87:10:58:d8:c9:99:6a:de:e9:75:a9:4f:4a:cf:
                    30:bb:24:8d:2e:b8:93:6e:90:8e:ad:d0:e7:79:1f:
                    aa:7f:9a:96:8e:d7:9b:72:7a:4f:3b:89:ed:28:3d:
                    a4:e2:d0:cc:96:90:46:33:1c:26:34:d7:02:ea:f6:
                    7e:07:e7:e4:4d:4e:61:d0:71:6e:be:ba:b5:f8:f3:
                    52:ab:43:30:65:4c:ec:85:ae:ac:16:2b:e1:c6:f4:
                    07:27:92:49:82:ef:9c:d7:1d:fe:a7:2a:d4:4a:58:
                    7d:90:1b:d3:56:1e:99:e2:ab:79:be:db:20:8b:24:
                    90:a6:d1:d0:17:83:62:44:47:a2:72:b1:1b:d1:35:
                    f1:68:97:f9:2b:03:06:af:2d:32:8a:64:ca:ca:02:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E5:17:4B:A9:66:A4:12:28:DF:C0:60:F0:5A:14:7A:6A:A2:56:36
            X509v3 Authority Key Identifier:
                keyid:1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:94:ca:a7:72:67:e6:aa:bb:c0:df:ba:bd:21:82:d5:01:
         f5:43:b7:ba:5c:88:c8:f9:37:1c:7e:8e:0b:92:0c:59:91:70:
         1b:23:31:b9:f3:59:4b:83:27:1c:72:70:92:0a:f7:e6:12:c0:
         5a:15:f2:2a:0a:d6:3a:dc:61:b3:54:63:c7:6f:7d:d7:35:b6:
         72:3e:39:69:2f:78:dd:2a:4c:d3:d4:21:82:03:38:e0:aa:74:
         25:79:b9:29:70:9f:5b:e6:f7:67:50:ac:87:57:5d:32:53:9c:
         36:22:1d:d7:fb:e0:dc:e4:25:d1:eb:e3:87:95:76:74:13:d9:
         9c:31:eb:7a:18:2c:fe:e5:a9:e5:0c:99:64:f8:15:9c:02:05:
         29:2b:5b:44:6a:44:a7:2f:1e:1c:37:1c:8e:9d:17:c8:de:49:
         d1:09:50:97:a1:3e:80:c0:95:8d:b5:47:b9:82:0d:19:25:a0:
         17:e3:19:c6:80:18:11:c6:91:6b:ca:99:bb:b4:d0:76:7d:9c:
         d8:7a:e8:8c:ca:88:f7:0a:73:1d:b9:d5:b8:69:1a:e7:71:f4:
         ba:fd:6f:27:7f:c7:25:b2:1f:09:37:c3:7b:44:12:6a:cd:03:
         7d:dd:93:43:84:55:96:40:f2:e2:72:5a:2a:b6:80:52:30:9c:
         c6:6e:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:15 2026 by rpki-client