Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
File:                     34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (raw, json)
Hash identifier:          kaQkIH3dA24K40XdrSSyWWg5X0geQdfCCtZ4po418DQ=
Subject key identifier:   64:F2:F8:FA:D1:45:2A:8E:D9:54:06:99:F9:03:AB:C4:3B:28:CD:CE
Certificate issuer:       /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
Certificate serial:       019A46F30C6975A2F59D48B462132CADB115EABC
Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
Signing time:             Thu 05 Feb 2026 16:06:30 +0000
ROA not before:           Thu 05 Feb 2026 16:01:30 +0000
ROA not after:            Thu 04 Feb 2027 16:06:30 +0000
asID:                     269153
IP address blocks:        45.180.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl
                          rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:46:f3:0c:69:75:a2:f5:9d:48:b4:62:13:2c:ad:b1:15:ea:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
        Validity
            Not Before: Feb  5 16:01:30 2026 GMT
            Not After : Feb  4 16:06:30 2027 GMT
        Subject: CN=64F2F8FAD1452A8ED9540699F903ABC43B28CDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:dc:73:db:14:ba:16:e8:30:a2:19:2c:28:
                    e6:ff:b4:b8:aa:a9:fb:30:ff:cc:78:43:77:15:a6:
                    6f:08:35:17:d7:ea:c1:a5:77:08:35:44:31:1d:e1:
                    25:0f:53:cd:8c:20:95:ac:6c:4b:36:97:6b:ed:f8:
                    50:ce:f1:d5:ea:c6:d1:25:f7:90:36:8b:86:7f:d9:
                    ff:9a:93:de:93:8b:07:8f:e1:3a:fa:b2:9c:16:59:
                    59:2e:d2:36:99:1b:5c:21:62:fe:11:67:cf:90:61:
                    96:76:86:a0:8e:fc:28:8e:be:a1:39:07:5d:cb:46:
                    84:7d:0f:25:67:df:7e:3e:f8:d1:4f:c4:49:e4:19:
                    18:6c:14:9f:c1:6f:25:d0:35:0f:80:d7:8f:c3:2d:
                    b6:d4:74:ce:95:85:fc:b7:5d:37:0b:c6:87:60:f3:
                    7d:47:8e:d2:5a:65:c2:d8:a2:f3:8c:45:a6:42:44:
                    6d:6e:bd:ab:00:d2:1e:1f:35:54:3e:44:78:b4:f2:
                    83:fe:f1:58:fa:97:cb:7b:f7:c8:cf:69:0b:f8:1a:
                    57:5a:77:51:20:e8:76:24:df:d0:88:52:71:8c:88:
                    ea:b5:fd:f1:93:9f:d4:1a:a6:5d:d4:5c:b3:a9:31:
                    37:e9:84:e7:1b:6d:68:ab:ca:95:e4:e4:b7:e5:e7:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:F8:FA:D1:45:2A:8E:D9:54:06:99:F9:03:AB:C4:3B:28:CD:CE
            X509v3 Authority Key Identifier:
                keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:86:44:0a:6b:78:32:c0:b2:a7:73:53:0a:80:53:2e:2a:
         0f:48:31:02:6b:60:7d:2a:a5:69:43:6a:41:b0:ed:64:ed:c9:
         de:7d:63:fd:70:67:8f:26:2e:56:26:68:3e:64:af:48:c3:0e:
         4b:23:ba:47:17:6a:25:7d:42:48:58:4e:58:6d:f7:1b:81:d0:
         81:a6:3a:05:ff:81:f7:d5:ac:a2:93:46:3d:92:4a:4e:f0:2c:
         2c:e7:b6:3e:43:3b:ca:43:2d:0e:6a:fc:16:85:da:2a:15:ab:
         4b:12:cd:00:0d:38:98:cd:58:64:37:9e:53:ce:da:3e:b3:2e:
         ba:73:e6:a2:2d:ba:1b:9d:86:7c:63:18:64:71:06:3f:71:a7:
         6e:db:23:e6:5b:66:00:5d:a2:3c:df:c0:84:0f:b9:20:47:06:
         36:6c:1a:4f:9e:4e:33:30:23:87:20:02:8b:31:15:2f:4a:43:
         db:ca:43:64:f7:c6:de:b4:9a:08:c6:c5:c0:88:db:62:0e:c0:
         c0:20:05:6f:9e:e3:7a:05:08:ef:e2:14:cc:e4:e7:ff:da:b4:
         cf:79:e3:bc:9e:6b:37:ec:18:11:74:5d:2a:45:c4:5f:5e:63:
         4e:c5:a9:74:5d:6e:f8:97:d3:a0:11:96:fd:d6:f8:d0:20:cc:
         bb:c0:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:05:51 2026 by rpki-client