Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          iL8XLYncXiYWqu+lj4V4L53veMNeIOP1d6bwvkVpJlQ=
Subject key identifier:   B2:AD:D0:74:38:08:66:8A:D3:5F:A5:CA:AF:AD:83:55:57:4B:07:D4
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       7F19761E497C976CA585958FA56874A1349ACB46
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
Signing time:             Wed 04 Feb 2026 21:43:21 +0000
ROA not before:           Wed 04 Feb 2026 21:38:21 +0000
ROA not after:            Wed 03 Feb 2027 21:43:21 +0000
asID:                     268181
IP address blocks:        45.171.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:19:76:1e:49:7c:97:6c:a5:85:95:8f:a5:68:74:a1:34:9a:cb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Feb  4 21:38:21 2026 GMT
            Not After : Feb  3 21:43:21 2027 GMT
        Subject: CN=B2ADD0743808668AD35FA5CAAFAD8355574B07D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:c4:c9:b7:44:85:fe:ba:02:61:ba:50:bb:
                    e0:0d:80:f4:a2:be:b9:e8:31:26:bc:ed:56:07:63:
                    ef:ce:2c:51:69:59:4b:95:50:25:f0:eb:f3:41:5d:
                    68:01:01:d8:90:87:67:f3:ce:dd:ae:8d:c9:38:33:
                    a2:4e:53:24:5d:79:c7:b6:38:f9:d4:0a:e8:96:86:
                    b8:bf:73:88:8d:12:27:35:e7:6e:f8:6c:aa:3f:69:
                    29:0e:45:bd:66:bc:e0:e7:08:49:51:09:4d:fb:f3:
                    3e:4e:f2:4b:24:0b:db:d6:49:ff:17:cd:7d:4a:25:
                    16:b7:98:5e:38:d6:89:30:56:92:33:4d:be:c6:3e:
                    60:ed:a2:ee:5d:f7:4e:c9:61:83:13:22:68:3c:0b:
                    f5:74:fb:30:31:9b:77:31:72:77:37:65:fd:34:03:
                    5a:60:b5:ad:9f:6c:dd:eb:78:c9:92:03:5b:01:11:
                    d2:83:28:03:ed:0a:45:12:f5:d1:fc:ad:e2:2c:31:
                    ba:0a:d4:d2:4c:8c:5a:6e:25:49:9b:b3:57:b3:fc:
                    e3:c5:8d:6a:67:0a:d5:2a:53:a7:7c:71:cf:58:4f:
                    52:3d:9a:1b:7d:24:b3:c7:66:9f:48:25:a7:ad:ac:
                    97:04:7f:a9:81:7c:4f:51:71:29:62:39:c7:a0:f2:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:D0:74:38:08:66:8A:D3:5F:A5:CA:AF:AD:83:55:57:4B:07:D4
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:3f:a3:9a:68:a6:70:04:0c:71:d1:a7:b2:26:21:e2:ea:
         70:eb:a6:eb:c9:72:9f:cc:ee:99:f4:c6:4a:fb:56:2a:14:e4:
         be:f2:1d:1f:09:f3:7b:9a:a5:05:f8:1a:69:db:9e:b8:42:98:
         7a:f1:03:e7:b5:77:a3:77:8a:88:f3:81:af:41:7b:43:62:c9:
         d2:2f:46:a1:cc:2c:2c:ae:6a:8a:8f:81:90:84:bd:a3:ed:79:
         7a:eb:17:5d:1f:af:b9:47:8e:aa:db:7f:3c:11:f6:a8:e7:a8:
         64:5b:46:89:91:ea:1c:08:35:b2:c8:cc:fc:3e:30:a3:4d:fb:
         6a:80:7e:e4:5e:ac:09:51:85:77:f4:db:f6:4a:eb:cc:77:6b:
         1b:52:b7:53:ea:00:4d:a7:14:bb:ea:64:6b:13:25:b0:73:bb:
         2d:14:22:1f:1b:1c:ef:e7:ea:e3:b5:de:43:2b:93:ba:53:3a:
         67:82:a4:d1:d1:c6:60:70:28:fd:29:bd:b2:eb:c0:67:68:31:
         2e:9e:62:50:cc:19:2c:e9:5a:57:c7:10:85:2c:37:34:32:78:
         db:6c:f5:74:c5:06:37:6e:b4:d3:78:d8:11:0e:78:f1:de:46:
         77:92:f9:75:94:39:7e:77:ae:65:8b:c9:55:e8:35:90:64:a7:
         66:b0:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:42 2026 by rpki-client