Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa
File:                     34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          XZlt5w/U7MaOwGMaRmj+ZiNVZ7acSS3ko+Nto591FiY=
Subject key identifier:   7B:7A:56:54:0F:68:7E:9B:E7:14:C3:33:3A:66:59:7A:5C:CE:E5:4E
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       3FF72507F38A972399A8F111D33D7834B1F55F71
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 05 Feb 2026 05:29:19 +0000
ROA not before:           Thu 05 Feb 2026 05:24:19 +0000
ROA not after:            Thu 04 Feb 2027 05:29:19 +0000
asID:                     262616
IP address blocks:        45.185.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:25:07:f3:8a:97:23:99:a8:f1:11:d3:3d:78:34:b1:f5:5f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Feb  5 05:24:19 2026 GMT
            Not After : Feb  4 05:29:19 2027 GMT
        Subject: CN=7B7A56540F687E9BE714C3333A66597A5CCEE54E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:f6:50:5f:fd:5a:2f:94:03:88:a2:a9:8f:
                    42:8c:66:51:ec:2b:64:54:bf:39:81:3c:c2:41:41:
                    d5:aa:78:5c:c3:29:96:6a:c0:45:8f:fc:2d:85:d3:
                    d6:de:91:5c:ad:ec:dc:be:ef:3f:0e:38:72:d0:55:
                    bf:1d:65:11:e0:40:88:f6:14:a7:19:f1:81:70:79:
                    64:23:f9:1d:7b:52:2a:bb:cf:ec:dc:6f:1c:ff:20:
                    d0:b7:ac:5a:34:18:d6:40:98:a6:20:69:f7:a8:28:
                    88:06:7a:8c:39:b1:a2:26:e3:a0:db:fd:7c:10:31:
                    43:19:50:fe:81:e7:79:4a:49:e6:7b:5b:fb:40:d3:
                    07:d6:d3:e1:3f:f0:c6:bf:27:f9:92:7d:fe:57:b5:
                    74:ef:9f:3d:4a:54:a5:35:75:b1:49:cb:f7:ad:03:
                    ac:2c:09:da:51:f7:e6:bf:83:65:5a:16:e6:c8:e7:
                    8d:f6:b4:80:e2:f3:05:d1:01:77:33:e8:74:e4:f0:
                    c6:b6:de:af:9b:e3:f9:c6:66:99:69:0e:c8:73:ed:
                    4d:5b:6e:35:9f:ee:33:b8:ad:f3:00:39:63:57:0c:
                    5e:69:4c:f3:c6:28:53:d0:a5:44:93:df:6e:d3:c4:
                    73:bd:a6:81:ea:2b:b4:26:1a:31:ca:2b:96:48:31:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:56:54:0F:68:7E:9B:E7:14:C3:33:3A:66:59:7A:5C:CE:E5:4E
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:62:77:50:9a:05:ce:02:0f:b4:12:82:4f:fc:4d:f9:6d:
         3e:c1:e4:29:34:cd:c7:f6:5c:01:73:9d:7b:1f:2b:17:9c:69:
         45:eb:63:04:f2:89:83:b0:f6:a4:85:29:05:07:4d:3a:af:db:
         6f:a4:7e:52:f3:e5:9b:2f:17:4a:9e:ce:c8:6f:9f:6e:72:2a:
         93:12:b6:89:56:5e:fd:d6:f9:00:f2:c9:6d:bf:31:63:c0:32:
         3f:b4:0f:25:d7:49:40:07:f7:25:82:b9:41:61:f4:ec:89:b4:
         ac:57:67:55:d1:69:73:2a:38:30:a8:61:61:d0:70:f8:8d:3c:
         83:89:cb:84:d5:3f:8e:ca:70:36:fc:77:37:56:e0:b5:d5:f1:
         4a:c1:32:6a:03:56:7c:88:20:e1:93:84:d1:f3:d5:59:9a:39:
         d1:6f:ef:0a:6f:ad:22:24:aa:f3:18:20:06:f3:89:1e:55:fc:
         9a:b6:6a:4a:7f:ef:5b:f5:64:44:92:5d:8b:ea:d8:28:76:e8:
         d6:d5:b8:d2:7e:01:21:cc:d1:74:89:a1:41:2e:6c:c7:82:f1:
         03:88:3c:cd:a3:a4:9e:da:90:62:5b:14:1d:50:9c:ac:e7:85:
         c5:ac:ff:4e:18:62:b8:4f:cb:e1:44:0f:cd:4a:6b:52:4c:b5:
         4a:a1:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:32 2026 by rpki-client