Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
File:                     34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier:          diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=
Subject key identifier:   A1:8B:A6:39:A7:89:73:ED:CD:B2:3B:57:D5:55:91:BB:70:77:39:EC
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       6C60BB5E06B032010C6EA9008329473B2FF72097
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:51 +0000
ROA not before:           Thu 05 Feb 2026 05:48:51 +0000
ROA not after:            Thu 04 Feb 2027 05:53:51 +0000
asID:                     269698
IP address blocks:        45.191.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:60:bb:5e:06:b0:32:01:0c:6e:a9:00:83:29:47:3b:2f:f7:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:51 2026 GMT
            Not After : Feb  4 05:53:51 2027 GMT
        Subject: CN=A18BA639A78973EDCDB23B57D55591BB707739EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:d9:29:74:39:62:2b:f9:81:c3:53:31:d7:
                    c1:dc:cc:4d:58:a2:1f:5e:69:b5:6d:e7:68:1b:a3:
                    26:22:39:d0:eb:bc:65:0c:06:ef:67:68:bd:12:3c:
                    da:88:b1:71:e1:1a:ca:9e:bd:a8:1a:68:ae:cb:d8:
                    34:e6:cd:f5:18:b4:7e:f3:b8:38:2c:15:88:3c:f2:
                    44:d8:ac:67:c7:e1:44:7a:b7:cc:3c:60:f7:7c:93:
                    2d:47:9f:1a:61:90:38:f8:ae:a7:63:2b:83:79:1f:
                    c3:e9:ca:00:5d:42:82:cf:90:4f:7b:e5:bf:78:4a:
                    8f:06:70:0f:ed:b7:ff:ea:56:2d:ee:47:25:ae:ac:
                    12:ff:8c:61:10:31:c9:32:cd:0d:35:68:8c:d3:33:
                    68:bd:c8:f6:4e:4f:f8:cb:d8:79:e3:43:bf:fe:76:
                    f5:f7:83:4c:24:2f:38:ec:e8:19:23:39:8f:dd:b1:
                    c3:72:85:b1:02:fd:5a:bb:eb:6a:ec:a5:cc:ed:af:
                    9f:34:f9:67:15:e8:13:7b:cf:de:12:23:0e:3b:98:
                    e5:4b:95:a2:4d:4e:02:dd:42:29:5c:64:78:76:0d:
                    c8:09:87:98:18:ae:7e:be:9c:92:3d:29:40:41:38:
                    7a:95:17:a7:dd:a1:0c:fa:ce:4e:fc:d3:3d:b2:5e:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:A6:39:A7:89:73:ED:CD:B2:3B:57:D5:55:91:BB:70:77:39:EC
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:20:53:d8:26:0b:24:7d:89:fb:65:1b:18:37:28:17:16:
         40:25:b8:2a:c7:d1:bf:1b:40:68:59:7d:53:88:4e:e7:74:cc:
         79:66:61:8c:8c:fd:81:e8:ce:8b:62:f9:4f:49:ae:b8:6d:dc:
         5a:47:eb:e6:2f:76:1c:8c:3d:45:4e:f1:29:09:46:b3:53:c9:
         e3:df:b2:da:5a:c2:74:a8:d1:3a:d2:c4:38:3d:04:cb:9f:d2:
         42:34:61:a0:6c:3e:85:78:e0:5f:2e:04:b5:bd:ac:b1:58:b6:
         c6:c2:32:89:f0:de:aa:a1:e6:37:e3:72:cc:5e:24:31:d7:d8:
         62:e0:2a:92:5e:9c:02:12:53:18:8c:3c:55:a0:3b:6c:7c:70:
         94:76:96:e0:09:e5:ef:5c:5a:16:a4:9c:12:0f:66:ed:e0:d8:
         db:f4:71:b2:f9:b5:85:b9:c1:a3:82:c2:fe:a5:3c:05:5f:13:
         55:fb:2a:ec:96:7a:b0:fd:fd:ac:53:4a:5e:79:78:be:dd:2f:
         fc:55:f8:cf:9b:d3:6f:db:e6:e7:4d:78:50:1a:3d:54:2d:c6:
         31:67:b9:3e:f3:f5:91:92:ae:e3:ac:37:69:69:0e:dc:13:95:
         a2:79:ff:dc:98:e3:b3:4c:3f:65:d8:d5:24:ca:f8:68:f7:c3:
         59:8e:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:47 2026 by rpki-client