Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa
File:                     34352e3232362e39362e302f32322d3234203d3e20323637303230.roa (raw, json)
Hash identifier:          twkYg9d4e2KxMNXw0rO5sefaIjTbvdWh0zYyHZVGOvQ=
Subject key identifier:   E8:4F:7A:02:FD:4F:5A:28:F6:DF:2C:C4:9F:53:E9:A0:54:5B:AA:A2
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       31473C54692304081158B64B6D890F69EF8E4357
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa
Signing time:             Thu 05 Feb 2026 20:43:19 +0000
ROA not before:           Thu 05 Feb 2026 20:38:19 +0000
ROA not after:            Thu 04 Feb 2027 20:43:19 +0000
asID:                     267020
IP address blocks:        45.226.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:3c:54:69:23:04:08:11:58:b6:4b:6d:89:0f:69:ef:8e:43:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Feb  5 20:38:19 2026 GMT
            Not After : Feb  4 20:43:19 2027 GMT
        Subject: CN=E84F7A02FD4F5A28F6DF2CC49F53E9A0545BAAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:b9:3a:6c:23:32:0a:3b:25:1c:ac:27:44:
                    bc:3f:36:97:39:3d:83:88:5b:b1:d1:e6:74:a4:20:
                    0d:c2:2f:35:73:68:f5:54:c0:fb:c5:c9:2e:ea:43:
                    a0:2e:ba:c4:dd:97:0a:35:f4:c4:e9:2e:7a:82:62:
                    24:14:e2:60:aa:43:53:cb:ea:de:16:3b:70:cf:16:
                    24:ca:0a:c2:87:86:04:e2:0f:a9:8a:73:d1:79:d1:
                    ba:81:1a:ce:73:39:27:b9:46:16:3f:28:d5:ec:64:
                    69:a0:ea:8a:d6:5a:65:d0:99:ea:fb:bb:1f:87:cb:
                    40:97:bc:98:26:4e:36:2d:14:a0:9c:5d:75:9b:26:
                    2a:35:6b:44:fb:dc:12:38:6e:3a:14:30:ed:73:5d:
                    43:86:44:4c:b7:20:ab:49:11:ac:09:28:4f:ad:30:
                    c4:f9:a6:13:eb:a4:fb:8d:23:4d:f9:ec:a5:53:18:
                    d5:c0:5b:1e:ed:a6:9d:df:ef:e8:96:5a:f4:1a:4c:
                    37:8e:fe:dc:06:02:ac:c5:7a:24:26:a7:99:b0:33:
                    de:78:a2:89:8f:c4:70:2f:6d:42:7c:f1:b8:5e:dd:
                    e7:65:62:65:e9:c8:6b:e6:a0:d2:43:8c:b4:6d:8f:
                    f7:d9:97:48:d4:0e:6e:15:4f:9f:40:e1:da:89:6c:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4F:7A:02:FD:4F:5A:28:F6:DF:2C:C4:9F:53:E9:A0:54:5B:AA:A2
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:0d:fd:c5:0a:20:1b:f0:54:06:48:7d:b7:5f:f4:ca:e2:
         f6:bc:29:14:17:8f:4d:48:c4:b6:67:81:95:78:e5:a4:3b:b9:
         8c:27:d1:2e:73:a3:71:4e:8e:bc:e0:d0:f5:98:68:49:1f:f6:
         b5:ec:79:bb:46:f8:38:e6:33:cc:b1:d7:d7:37:35:87:5a:1d:
         2a:f9:55:10:18:9f:a8:5b:fa:9f:4f:19:de:48:3a:b3:4c:03:
         85:84:ba:8d:a2:b7:78:76:bd:f3:20:fd:81:f7:d7:a1:52:46:
         7f:0d:f1:78:93:3c:08:6f:02:af:f0:cc:f2:11:b8:74:69:c2:
         a4:67:62:aa:86:01:30:0c:4c:71:f0:d3:c6:c7:5e:f6:5b:7d:
         8a:bc:ef:e6:a7:a1:62:7f:4b:f8:82:22:80:40:88:8f:22:49:
         8a:fe:a5:d0:8c:43:2c:32:35:31:a6:27:ee:a3:69:b8:9c:f8:
         c8:49:1a:b0:ed:f5:ed:99:d6:e9:35:9c:8a:9d:b7:4b:a0:82:
         de:b6:70:18:94:e3:7b:2e:ee:b4:00:18:19:91:de:b0:d4:19:
         e6:af:68:b6:66:62:da:8b:f4:35:4c:39:f7:15:88:32:fa:03:
         7b:ea:4d:a3:1d:e4:8b:03:87:79:6b:39:2c:bc:50:8d:9d:b4:
         f5:ef:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:29 2026 by rpki-client