Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
File:                     34352e37312e38342e302f32322d3234203d3e20323637363032.roa (raw, json)
Hash identifier:          s/6BsoFV6DlEj43A1uUgBuwsEY01eiulnkS4P6GXEro=
Subject key identifier:   40:B9:95:73:C2:5D:35:94:ED:8E:98:4F:3D:7C:4B:B0:1E:0F:9E:71
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       42A09BA24AC64DE219700F0A8809C1AF43F48D9D
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
Signing time:             Thu 05 Feb 2026 08:56:25 +0000
ROA not before:           Thu 05 Feb 2026 08:51:25 +0000
ROA not after:            Thu 04 Feb 2027 08:56:25 +0000
asID:                     267602
IP address blocks:        45.71.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
                          rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a0:9b:a2:4a:c6:4d:e2:19:70:0f:0a:88:09:c1:af:43:f4:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Feb  5 08:51:25 2026 GMT
            Not After : Feb  4 08:56:25 2027 GMT
        Subject: CN=40B99573C25D3594ED8E984F3D7C4BB01E0F9E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:0e:d3:c7:3a:be:70:73:59:9a:34:4f:2a:
                    7b:27:4f:51:1c:db:a7:01:3b:f2:2a:7d:c2:1e:13:
                    59:c2:f6:35:e7:70:97:5b:0f:11:2f:98:21:1a:42:
                    5c:bc:cc:9b:26:90:58:4f:13:78:26:80:ee:55:c4:
                    ee:12:9f:9f:a4:04:01:be:a5:bc:be:0b:34:ed:a7:
                    1e:bd:62:38:c6:27:47:c8:93:9d:ff:9f:d9:16:b9:
                    7a:4c:e1:12:19:7c:25:78:99:82:b0:73:0e:bf:9b:
                    76:8a:a5:9e:e1:70:47:5d:a4:31:9b:ea:2b:3b:ff:
                    c2:a2:7b:90:1c:48:ad:5d:9f:d5:49:a2:23:0f:37:
                    fc:c3:79:3f:a7:e1:d0:dd:31:8c:ba:e6:c4:36:bd:
                    1e:0c:52:48:22:e1:0d:50:ec:b4:64:22:83:c0:3b:
                    c4:67:d8:48:71:00:53:6f:31:9c:cf:88:15:a8:e0:
                    f8:b4:6f:d9:6f:b6:99:84:bc:3a:7a:28:b5:30:5e:
                    ed:ed:81:eb:a5:63:7a:da:02:c9:b3:85:5d:f0:50:
                    65:a5:89:54:58:1e:0a:1a:60:f6:6a:ae:81:16:54:
                    5e:2e:09:ba:af:72:86:b2:98:ff:a7:7d:5e:b6:4e:
                    76:02:1d:9c:4f:a6:2a:e1:61:53:bb:19:60:ab:79:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B9:95:73:C2:5D:35:94:ED:8E:98:4F:3D:7C:4B:B0:1E:0F:9E:71
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:e6:e7:24:af:ad:fe:72:00:9e:a1:65:f3:e5:24:9d:94:
         e5:37:0f:11:64:19:e1:1c:b6:a8:09:bc:19:35:de:d1:ae:20:
         69:0f:19:fb:64:fa:46:ae:38:bd:f6:dc:03:b9:f1:5e:79:0c:
         4a:bf:80:aa:79:8b:de:d0:da:ba:40:ef:36:6e:3e:80:87:5d:
         26:86:ae:ae:ff:7e:38:7f:ba:27:94:44:88:f1:48:34:fd:cb:
         0a:74:99:c9:8f:8b:39:7c:b0:38:10:10:dc:9e:cd:11:0d:b9:
         1d:58:a3:e1:96:5e:f2:cc:98:90:1c:66:46:f2:ac:1c:c0:02:
         d9:23:44:0b:b5:cf:2c:2c:c1:71:04:66:77:fb:98:c4:d6:88:
         cc:57:ee:37:7a:3b:e4:4d:03:29:65:49:2e:a0:5d:ff:11:ab:
         ad:44:c2:8b:d2:eb:4f:6b:e2:6d:98:46:d6:48:8b:54:4a:6a:
         a0:15:cf:6a:b4:10:c1:ed:ad:54:1b:c8:53:19:e2:8c:12:56:
         0c:14:e2:d6:8c:03:9a:3d:09:d8:2c:a6:b4:f5:a4:4d:36:6d:
         4f:1d:a5:3b:f3:32:59:37:e0:94:8b:ad:81:ed:c2:5c:fb:e3:
         c5:79:a4:95:38:36:da:fa:97:36:7b:cc:0f:bb:98:db:11:0a:
         d7:4b:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:53:47 2026 by rpki-client