Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa
File:                     34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (raw, json)
Hash identifier:          wZ3FKrk16KxWrlfyyvwprkQ3rDHWEeBjvNQpTwjKSvg=
Subject key identifier:   C6:2F:69:25:74:55:71:B2:01:E8:2F:50:C6:D1:13:AD:8B:50:25:A2
Certificate issuer:       /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Certificate serial:       542AEF1D5AFC1A0C1ADB4D4227613528CADA46A8
Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa
Signing time:             Thu 05 Feb 2026 05:26:05 +0000
ROA not before:           Thu 05 Feb 2026 05:21:05 +0000
ROA not after:            Thu 04 Feb 2027 05:26:05 +0000
asID:                     268281
IP address blocks:        45.237.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
                          rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2a:ef:1d:5a:fc:1a:0c:1a:db:4d:42:27:61:35:28:ca:da:46:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
        Validity
            Not Before: Feb  5 05:21:05 2026 GMT
            Not After : Feb  4 05:26:05 2027 GMT
        Subject: CN=C62F6925745571B201E82F50C6D113AD8B5025A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:d9:5d:59:62:eb:9d:f8:e4:d6:3b:b7:d3:
                    70:df:f6:36:e1:ca:23:94:f1:aa:69:2f:f9:61:78:
                    a0:30:7b:d0:ff:94:3b:a0:9c:e0:84:15:fa:db:6f:
                    af:f5:3a:fb:42:1f:d0:ce:d0:e0:35:4c:d4:b4:7e:
                    81:72:5b:ed:34:c1:4e:0e:f4:d4:a2:08:b9:75:a4:
                    ec:eb:94:d2:bd:f8:09:15:4d:ee:77:15:df:3c:bb:
                    0c:60:e0:a7:2e:35:22:4d:0d:c6:12:98:f7:0d:86:
                    76:8e:87:10:f1:09:c8:e1:1c:0c:97:30:06:ca:ae:
                    cc:d1:4c:6b:14:46:be:67:22:3a:40:7a:44:35:4b:
                    f3:ea:91:f8:90:91:3c:14:4c:66:0c:a4:2a:57:37:
                    c5:5a:93:2f:7c:23:17:94:8a:34:5b:c4:90:be:74:
                    07:2a:02:6e:d4:4e:92:56:b7:5a:81:ee:c7:71:04:
                    be:c0:aa:d7:90:22:7e:6d:b1:3e:90:9b:6f:fd:3e:
                    89:eb:2f:b4:08:b0:8c:49:1c:5a:c5:ec:fc:5a:03:
                    30:14:be:75:7f:87:0f:c1:1a:66:82:c0:c2:c6:77:
                    55:9e:e6:d1:27:84:1e:5c:af:4d:39:05:b9:07:c5:
                    ce:e9:98:16:83:18:fb:5b:ad:54:63:78:21:28:98:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:69:25:74:55:71:B2:01:E8:2F:50:C6:D1:13:AD:8B:50:25:A2
            X509v3 Authority Key Identifier:
                keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:15:ff:50:65:e8:1f:c5:ad:e6:d4:97:72:10:c5:f6:b9:
         b4:b1:f7:29:a5:42:b3:57:25:52:2d:ce:b6:1b:f5:32:73:95:
         e0:c1:a4:52:3d:6a:84:8e:88:0a:bc:94:72:b5:07:66:45:90:
         2b:56:e7:17:d5:c6:ba:ba:9a:3e:c8:64:74:9b:f9:9f:a0:4c:
         46:c1:e5:26:69:f7:69:65:4e:71:fb:73:c5:25:89:75:bf:6b:
         a6:ce:32:ff:ba:f9:16:56:28:73:11:90:6c:b8:49:bc:fa:3d:
         fd:1f:ef:aa:0e:6e:06:74:04:d8:4e:20:8e:40:cf:07:06:e3:
         3b:c2:27:52:2b:bc:a2:23:18:63:73:73:9e:a8:1b:39:77:70:
         6d:18:52:44:52:ad:82:d8:e3:36:f3:fc:ad:fc:67:80:ad:19:
         db:53:33:be:1a:95:2c:0e:e4:ec:b4:18:f3:c7:86:c9:02:e3:
         b4:03:e2:2a:4b:55:8f:1a:64:c8:1c:61:68:c4:0a:60:77:ea:
         c4:b2:35:d6:9c:1b:3a:fe:cb:05:9c:49:6d:89:00:cd:54:25:
         3a:cc:f2:16:44:aa:e8:33:78:ec:f4:8f:90:e7:55:c6:ea:c6:
         56:d4:77:57:43:4a:af:15:d4:74:b5:5f:09:d0:24:e7:f1:ac:
         5f:b2:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:26 2026 by rpki-client