Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa
File:                     34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (raw, json)
Hash identifier:          E27vs+GAWSDObmR9Obk/OsX4UMjydHaznQQcHH8601E=
Subject key identifier:   2D:F0:6B:67:82:B7:96:00:DE:EB:D6:23:76:0F:F2:78:02:C4:8E:90
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       3FE768E45F5C19EEC9EC2C38AF3D59D04AAE60CB
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa
Signing time:             Wed 04 Feb 2026 22:00:08 +0000
ROA not before:           Wed 04 Feb 2026 21:55:08 +0000
ROA not after:            Wed 03 Feb 2027 22:00:08 +0000
asID:                     268533
IP address blocks:        45.162.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e7:68:e4:5f:5c:19:ee:c9:ec:2c:38:af:3d:59:d0:4a:ae:60:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Feb  4 21:55:08 2026 GMT
            Not After : Feb  3 22:00:08 2027 GMT
        Subject: CN=2DF06B6782B79600DEEBD623760FF27802C48E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:bd:79:d5:52:21:5d:90:7c:d7:83:27:85:
                    dd:ab:9e:e1:4e:dc:cc:4e:6d:da:53:84:22:17:98:
                    b7:a2:b0:1d:4b:15:2a:51:ed:76:ca:92:44:43:c7:
                    97:d4:6b:a5:8e:33:a6:7c:01:e6:ad:23:5f:e0:c9:
                    a5:38:7f:57:9c:43:d4:ed:0b:a5:a4:b0:d7:e8:e9:
                    fa:37:aa:95:c8:f8:f1:8f:39:75:e3:c1:fa:bd:2f:
                    b8:9c:da:71:76:5e:c2:38:6d:e3:07:9a:07:66:93:
                    1d:25:cd:11:8e:98:54:d6:db:c0:e7:5e:e2:f9:69:
                    0f:57:df:e7:b0:7b:d8:48:ca:fa:04:a1:78:c8:ec:
                    8c:ba:95:85:4e:ad:87:87:9e:3d:6b:c8:89:62:73:
                    64:f4:25:70:74:e8:be:7c:33:05:75:7d:c6:4a:b7:
                    fc:2b:3f:7f:98:3a:3f:70:20:17:0a:c8:c1:3f:c1:
                    27:c1:01:41:d9:26:a5:35:4d:0b:f3:c0:21:70:cf:
                    42:60:aa:11:58:0a:a4:39:85:6f:6b:46:94:38:36:
                    34:a1:43:2b:09:55:00:d0:0a:7c:27:fb:c8:e6:27:
                    5f:13:70:f8:3d:1c:b6:40:8f:3d:be:d9:19:01:1a:
                    5a:ec:8b:09:71:cb:24:21:80:24:b2:a9:d1:74:f2:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:6B:67:82:B7:96:00:DE:EB:D6:23:76:0F:F2:78:02:C4:8E:90
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:b8:5f:3c:23:61:ba:2f:43:33:f6:dc:74:66:d3:5f:b3:
         1d:7f:eb:72:23:08:f7:89:95:65:9e:c5:9b:f0:5d:18:ae:4c:
         0f:11:b6:a2:d6:7a:3b:e3:49:2e:2a:11:13:84:e1:27:bd:01:
         6c:11:8f:91:a6:ac:d9:9e:ee:92:f2:d7:fd:21:d2:f5:d0:f5:
         d4:6a:2a:1a:d4:a0:e4:d5:6c:1f:44:67:7e:fd:41:6f:38:1d:
         d5:89:40:bd:51:7c:bb:d0:1a:df:f0:85:16:43:ff:51:c6:ab:
         76:4c:36:91:1e:ec:b3:9b:25:73:9e:91:9a:5b:87:2d:76:23:
         ec:6b:ef:44:5f:da:40:61:c4:39:8f:cc:78:ef:74:8f:73:30:
         2b:ee:77:59:ff:b0:b3:0f:e0:fc:40:bc:e6:90:fc:bb:52:d5:
         a0:8d:7e:5f:ea:12:39:a1:e2:4c:1b:50:71:ff:87:1d:0f:a8:
         e2:af:e3:ee:ac:47:77:b3:04:0f:76:aa:ef:e0:b8:78:59:97:
         4f:3d:47:87:19:90:1d:38:ca:9a:f7:82:dc:cc:43:65:35:bd:
         c3:f7:ae:53:f0:d9:57:42:62:10:4d:13:7e:cb:53:ff:4f:ec:
         44:1e:a7:17:23:05:b3:37:32:74:c7:6a:ae:69:da:e0:5c:a6:
         39:c1:71:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP+do5F9cGe7J7Cw4rz1Z0EquYMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy
QjUxQ0IxQzAeFw0yNjAyMDQyMTU1MDhaFw0yNzAyMDMyMjAwMDhaMDMxMTAvBgNV
BAMTKDJERjA2QjY3ODJCNzk2MDBERUVCRDYyMzc2MEZGMjc4MDJDNDhFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbL151VIhXZB814Mnhd2rnuFO
3MxObdpThCIXmLeisB1LFSpR7XbKkkRDx5fUa6WOM6Z8AeatI1/gyaU4f1ecQ9Tt
C6WksNfo6fo3qpXI+PGPOXXjwfq9L7ic2nF2XsI4beMHmgdmkx0lzRGOmFTW28Dn
XuL5aQ9X3+ewe9hIyvoEoXjI7Iy6lYVOrYeHnj1ryIlic2T0JXB06L58MwV1fcZK
t/wrP3+YOj9wIBcKyME/wSfBAUHZJqU1TQvzwCFwz0JgqhFYCqQ5hW9rRpQ4NjSh
QysJVQDQCnwn+8jmJ18TcPg9HLZAjz2+2RkBGlrsiwlxyyQhgCSyqdF08tUPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULfBrZ4K3lgDe69Yjdg/yeALEjpAwHwYDVR0j
BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0
S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD
QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dkZWhlNjhLMnVlUjRoV1E1VTVicENnWmNYMjdwUkpSSllQRkRuQTJkNEtSLzEv
MzQzNTJlMzEzNjMyMmUzMjMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtouAwDQYJKoZIhvcNAQELBQADggEBAF3LuF88
I2G6L0Mz9tx0ZtNfsx1/63IjCPeJlWWexZvwXRiuTA8RtqLWejvjSS4qEROE4Se9
AWwRj5GmrNme7pLy1/0h0vXQ9dRqKhrUoOTVbB9EZ379QW84HdWJQL1RfLvQGt/w
hRZD/1HGq3ZMNpEe7LObJXOekZpbhy12I+xr70Rf2kBhxDmPzHjvdI9zMCvud1n/
sLMP4PxAvOaQ/LtS1aCNfl/qEjmh4kwbUHH/hx0PqOKv4+6sR3ezBA92qu/guHhZ
l089R4cZkB04ypr3gtzMQ2U1vcP3rlPw2VdCYhBNE37LU/9P7EQepxcjBbM3MnTH
aq5p2uBcpjnBcdQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:41 2026 by rpki-client