Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
File:                     34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (raw, json)
Hash identifier:          C+gMF8lR3dvR8vTd8qNvjw4RVU0dpwxHmuV+a5uGA+w=
Subject key identifier:   1E:F8:4B:F4:F1:BA:96:6E:46:69:DF:E8:33:A9:20:F6:4B:2D:69:63
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       71F9B20CB9E17B573EF0296AF84F6330D6C43897
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
Signing time:             Wed 04 Feb 2026 22:00:08 +0000
ROA not before:           Wed 04 Feb 2026 21:55:08 +0000
ROA not after:            Wed 03 Feb 2027 22:00:08 +0000
asID:                     268533
IP address blocks:        45.162.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:b2:0c:b9:e1:7b:57:3e:f0:29:6a:f8:4f:63:30:d6:c4:38:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Feb  4 21:55:08 2026 GMT
            Not After : Feb  3 22:00:08 2027 GMT
        Subject: CN=1EF84BF4F1BA966E4669DFE833A920F64B2D6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:fa:b5:ba:95:a4:4d:cd:4e:44:6a:e5:92:
                    eb:d2:cb:82:0f:55:13:23:b5:00:f7:19:36:b9:1e:
                    65:19:c2:00:9a:71:f7:d3:6c:8b:9a:e4:83:48:d3:
                    57:c6:6c:1d:f6:db:97:0b:7e:9a:de:72:94:db:59:
                    a1:da:81:53:da:65:a0:de:09:67:36:d4:c5:34:0c:
                    f5:67:d1:c0:6a:37:b9:79:98:8c:2d:5a:88:b3:bc:
                    30:8c:32:ee:29:21:7e:de:c8:81:fd:17:6e:55:3d:
                    83:2c:86:68:fc:88:d2:3b:99:cf:e7:35:d2:00:ab:
                    57:f6:7b:15:0d:1d:7c:ed:a4:63:95:7c:f1:34:07:
                    f7:37:d3:f7:cb:6b:8c:11:e0:1e:53:96:05:f6:a6:
                    5d:f8:81:25:75:46:21:36:ce:ad:15:2e:0e:3d:46:
                    e7:d5:61:88:a7:e6:6c:9d:78:8d:06:06:8a:5d:96:
                    9c:d0:ef:67:66:12:a6:4a:d2:2d:2e:e2:22:b9:3d:
                    6d:07:1c:f1:6e:2a:4f:a0:d1:2d:73:d5:46:a0:c3:
                    cd:7c:20:d5:b9:ff:b2:82:1e:57:41:35:ed:7f:cb:
                    8b:dc:98:98:ce:f3:eb:de:13:e6:2e:a8:43:3a:56:
                    e1:d3:7e:16:67:42:34:bd:43:d2:bf:35:55:55:16:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F8:4B:F4:F1:BA:96:6E:46:69:DF:E8:33:A9:20:F6:4B:2D:69:63
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:62:c5:a5:fa:d5:e6:cc:1b:52:ae:e9:6a:01:bb:70:44:
         27:d4:7a:d0:a7:63:9b:6e:03:82:ab:64:7b:77:05:9a:19:34:
         18:57:78:a8:60:34:bb:d0:fd:6e:ac:2e:b4:16:c7:fa:02:1b:
         03:bc:bc:e5:4d:8a:43:5f:fd:12:1e:72:4d:91:bd:3e:b2:82:
         84:71:ba:9c:d6:ff:5a:cf:4f:59:20:a3:21:17:ab:14:c1:2b:
         f0:5f:f3:f8:54:57:cb:20:3c:7b:0b:25:91:48:fe:bb:5f:f8:
         57:0f:e2:fe:be:52:f0:00:6e:eb:60:4d:ce:85:56:20:2f:f5:
         12:f2:73:89:d7:b9:e8:92:07:1d:5e:87:d5:06:df:e1:a6:3b:
         aa:2a:0e:b9:71:5a:be:0b:ab:f9:f6:75:9f:a6:e2:e2:4c:c1:
         b3:40:9f:38:1a:b4:46:b5:f6:ad:8b:51:57:2b:3e:4d:95:aa:
         78:85:14:bc:c0:e5:29:af:8d:52:31:3a:82:73:fa:a4:87:ad:
         26:87:4d:d9:59:b6:17:bc:2e:df:b0:e1:be:2b:ad:42:6d:8c:
         ae:83:43:a3:c7:e5:62:20:b7:34:80:e3:19:97:ee:e4:a8:d3:
         a1:c2:13:98:af:47:16:eb:c6:d9:36:62:8f:de:da:89:4b:2b:
         bb:5b:36:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcfmyDLnhe1c+8Clq+E9jMNbEOJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy
QjUxQ0IxQzAeFw0yNjAyMDQyMTU1MDhaFw0yNzAyMDMyMjAwMDhaMDMxMTAvBgNV
BAMTKDFFRjg0QkY0RjFCQTk2NkU0NjY5REZFODMzQTkyMEY2NEIyRDY5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpfPq1upWkTc1ORGrlkuvSy4IP
VRMjtQD3GTa5HmUZwgCacffTbIua5INI01fGbB3225cLfprecpTbWaHagVPaZaDe
CWc21MU0DPVn0cBqN7l5mIwtWoizvDCMMu4pIX7eyIH9F25VPYMshmj8iNI7mc/n
NdIAq1f2exUNHXztpGOVfPE0B/c30/fLa4wR4B5TlgX2pl34gSV1RiE2zq0VLg49
RufVYYin5mydeI0GBopdlpzQ72dmEqZK0i0u4iK5PW0HHPFuKk+g0S1z1Uagw818
INW5/7KCHldBNe1/y4vcmJjO8+veE+YuqEM6VuHTfhZnQjS9Q9K/NVVVFoXFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHvhL9PG6lm5Gad/oM6kg9kstaWMwHwYDVR0j
BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0
S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD
QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dkZWhlNjhLMnVlUjRoV1E1VTVicENnWmNYMjdwUkpSSllQRkRuQTJkNEtSLzEv
MzQzNTJlMzEzNjMyMmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItouAwDQYJKoZIhvcNAQELBQADggEBAGnMYsWl
+tXmzBtSrulqAbtwRCfUetCnY5tuA4KrZHt3BZoZNBhXeKhgNLvQ/W6sLrQWx/oC
GwO8vOVNikNf/RIeck2RvT6ygoRxupzW/1rPT1kgoyEXqxTBK/Bf8/hUV8sgPHsL
JZFI/rtf+FcP4v6+UvAAbutgTc6FViAv9RLyc4nXueiSBx1eh9UG3+GmO6oqDrlx
Wr4Lq/n2dZ+m4uJMwbNAnzgatEa19q2LUVcrPk2VqniFFLzA5SmvjVIxOoJz+qSH
rSaHTdlZthe8Lt+w4b4rrUJtjK6DQ6PH5WIgtzSA4xmX7uSo06HCE5ivRxbrxtk2
Yo/e2olLK7tbNp8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:44 2026 by rpki-client