Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (raw, json)
Hash identifier:          oka1py52Ubkft0HyVyy3TssVuDg8vM1+GBo0BALSOGc=
Subject key identifier:   24:C9:38:75:01:99:58:27:68:D3:D6:F9:4C:EC:DF:28:01:73:A5:18
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       2DA593E7EDBB97972E3242D7B375607BF8C88A0B
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa
Signing time:             Thu 05 Feb 2026 16:54:09 +0000
ROA not before:           Thu 05 Feb 2026 16:49:09 +0000
ROA not after:            Thu 04 Feb 2027 16:54:09 +0000
asID:                     268261
IP address blocks:        45.236.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:93:e7:ed:bb:97:97:2e:32:42:d7:b3:75:60:7b:f8:c8:8a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Feb  5 16:49:09 2026 GMT
            Not After : Feb  4 16:54:09 2027 GMT
        Subject: CN=24C938750199582768D3D6F94CECDF280173A518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:93:e2:78:df:c9:4b:71:02:ed:90:8b:1f:
                    fa:ee:14:6b:0e:a3:34:74:3e:11:56:d2:d0:04:47:
                    60:8d:35:11:e0:37:69:3e:12:cf:71:cb:af:f4:cf:
                    4a:a6:dc:ab:04:06:ee:25:96:e3:ad:3b:54:05:21:
                    01:bf:b9:b9:d9:ff:4b:ba:d6:57:e6:56:df:dd:54:
                    02:ce:b4:27:4a:75:7c:6c:5e:a8:19:15:a4:39:e6:
                    27:3f:07:f7:d4:ef:80:8e:61:28:32:8a:18:02:32:
                    e8:9e:20:cf:22:5e:a1:19:64:ac:9a:5b:6d:75:aa:
                    73:8d:17:12:db:9f:c8:75:a9:41:7e:9e:a5:7b:b4:
                    8e:98:ff:48:52:2a:8f:bb:a4:be:c3:f7:ec:81:72:
                    34:e4:43:8b:28:4d:2c:12:26:e2:c4:c8:65:4f:c3:
                    80:9f:5d:10:74:e0:97:f0:0f:50:fe:3c:d0:e6:87:
                    e8:00:20:6a:2b:16:52:3c:03:20:d4:94:79:2b:2d:
                    3d:7d:2a:f3:b6:29:d8:bc:02:9a:62:0b:15:e6:59:
                    2e:bd:50:32:d7:dc:25:eb:81:c8:ed:4e:e1:6a:a7:
                    3a:a1:a3:9b:90:ba:57:c7:da:2c:94:7a:5e:08:af:
                    17:51:ee:ad:50:af:f6:78:b7:8f:86:7a:68:1f:2a:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:38:75:01:99:58:27:68:D3:D6:F9:4C:EC:DF:28:01:73:A5:18
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:1e:1a:d9:50:33:6f:7f:19:2c:6d:1c:59:a6:3b:7d:e1:
         92:04:9b:1f:e8:e0:a9:5a:e7:8c:4b:32:35:d7:37:09:21:be:
         ea:9b:81:22:f6:0c:d4:2a:d8:6c:1d:0a:90:d8:62:c0:2f:c6:
         19:df:6e:36:39:62:af:bd:52:ea:bc:57:67:5e:aa:47:75:8b:
         53:60:73:a5:06:17:cc:1e:2c:44:10:f2:11:c3:7f:2b:54:c4:
         e0:07:03:77:53:31:20:e6:01:7f:09:b9:e8:f1:30:d6:91:ed:
         3e:ff:29:b6:87:c6:17:97:f7:eb:2f:f2:02:f1:12:9c:4e:2c:
         22:84:91:f7:78:a7:7f:5b:54:58:47:fe:ed:0d:e8:71:0a:22:
         34:b7:5c:74:d7:1c:cc:89:ad:8c:dd:38:ae:cb:d6:a4:85:bb:
         da:32:0a:b1:64:37:f4:f1:1e:c2:76:3c:0d:56:9e:86:a0:e5:
         51:f1:28:24:4f:ac:a6:ff:d2:e7:9b:74:ce:aa:23:d4:fc:4e:
         c7:24:73:1b:e6:98:c7:00:44:18:69:7b:4b:e0:5a:7d:1e:be:
         2c:03:17:72:6a:52:b1:71:61:29:52:59:65:e5:22:8d:28:e4:
         3d:54:0f:53:75:12:6c:ea:a9:1f:4b:dd:d6:a1:8f:0e:cf:44:
         4b:11:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:15 2026 by rpki-client