Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
File:                     34352e3139312e382e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier:          tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=
Subject key identifier:   F7:B8:07:03:A8:A2:73:36:F2:19:68:8D:8B:6F:F3:0D:C2:2F:72:27
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       4E79215F7B120A5AC61ECC307C4A6E4AD3FBFAEF
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:50 +0000
ROA not before:           Thu 05 Feb 2026 05:48:50 +0000
ROA not after:            Thu 04 Feb 2027 05:53:50 +0000
asID:                     269698
IP address blocks:        45.191.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:79:21:5f:7b:12:0a:5a:c6:1e:cc:30:7c:4a:6e:4a:d3:fb:fa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:50 2026 GMT
            Not After : Feb  4 05:53:50 2027 GMT
        Subject: CN=F7B80703A8A27336F219688D8B6FF30DC22F7227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:86:87:6e:a8:3a:f4:9a:21:d4:29:df:48:
                    69:62:9a:01:e9:c6:60:f0:ac:a0:80:47:8f:c1:87:
                    b1:00:42:04:11:73:0e:2c:f8:45:91:ef:28:fa:a9:
                    a0:49:4c:da:84:1c:2c:e2:e8:3a:60:9e:dd:f1:7e:
                    aa:53:5f:b2:13:be:f4:23:e2:32:28:63:6d:89:21:
                    b8:00:5f:ec:57:5c:02:b3:95:8d:02:38:89:67:21:
                    a4:27:44:fa:92:1c:22:9e:79:d9:c9:d7:d4:b6:c7:
                    be:ac:5e:3f:87:f7:26:76:c0:32:ea:ed:73:15:a9:
                    38:b7:b9:92:ec:30:50:08:d6:f6:19:f7:6d:62:13:
                    fe:e1:3d:6a:b7:ff:4f:14:19:a8:c8:ff:b7:2c:41:
                    51:e6:ad:76:50:b8:c3:0b:e2:67:6d:68:8a:57:24:
                    be:5f:19:21:e0:5c:0e:9f:dd:6e:38:9d:57:d2:6d:
                    4c:69:e4:49:31:c3:64:4c:3e:4d:5d:9d:16:84:35:
                    a3:9d:e9:7a:72:c4:db:45:df:1f:5f:fb:11:7a:52:
                    be:57:b6:4b:72:00:1b:25:74:97:a9:87:d9:2a:35:
                    44:bf:39:37:55:de:fe:2d:04:86:00:c0:96:37:6f:
                    b9:17:5c:64:90:74:53:3d:be:bd:30:64:97:22:c9:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:07:03:A8:A2:73:36:F2:19:68:8D:8B:6F:F3:0D:C2:2F:72:27
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:96:0e:68:19:7c:83:05:c2:1a:95:69:b2:57:65:57:4b:20:
         6c:21:d4:22:89:13:6a:d1:d9:48:85:69:db:ed:c4:43:ba:a8:
         8a:6a:5a:08:db:93:a1:f9:78:d9:db:64:6a:62:04:a7:c8:e6:
         8f:87:20:a5:2f:61:69:3e:07:87:5e:f8:e2:79:4b:39:6b:38:
         6c:69:68:ae:ae:58:7f:76:53:f7:ae:ae:39:ba:f3:df:26:f2:
         0e:1d:01:93:6f:16:eb:62:e8:5d:d2:df:bf:61:ce:5d:24:3f:
         e0:4c:d0:16:67:cd:2e:a1:86:0b:0a:4d:f1:13:bf:9a:98:48:
         f3:8e:10:34:53:d3:73:1f:b0:64:44:3e:05:82:03:c7:f5:9c:
         ab:21:0f:21:b2:58:de:04:81:b1:7a:86:9c:cf:c2:12:3e:49:
         b7:46:3d:8f:57:b7:6a:cc:8d:f6:6f:d6:11:44:a3:b5:89:f4:
         af:60:c2:4e:3d:45:44:e5:17:99:97:ab:74:eb:8e:a9:99:aa:
         e0:93:09:45:62:00:f6:87:34:20:06:09:c8:48:53:7b:b4:82:
         a2:74:ae:ea:25:c5:e6:85:5c:67:fa:a9:77:72:a1:48:5c:bd:
         2d:5f:f9:35:59:c3:c3:f2:2f:73:41:ad:b9:cb:52:d0:92:15:
         d8:aa:a1:b5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTnkhX3sSClrGHswwfEpuStP7+u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIyMUMzMUJEMkFEOUQwNTEzMDNFMUU3REU5OTFEQzAw
OTg3QTcyMjAeFw0yNjAyMDUwNTQ4NTBaFw0yNzAyMDQwNTUzNTBaMDMxMTAvBgNV
BAMTKEY3QjgwNzAzQThBMjczMzZGMjE5Njg4RDhCNkZGMzBEQzIyRjcyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq4aHbqg69Joh1CnfSGlimgHp
xmDwrKCAR4/Bh7EAQgQRcw4s+EWR7yj6qaBJTNqEHCzi6Dpgnt3xfqpTX7ITvvQj
4jIoY22JIbgAX+xXXAKzlY0COIlnIaQnRPqSHCKeednJ19S2x76sXj+H9yZ2wDLq
7XMVqTi3uZLsMFAI1vYZ921iE/7hPWq3/08UGajI/7csQVHmrXZQuMML4mdtaIpX
JL5fGSHgXA6f3W44nVfSbUxp5Ekxw2RMPk1dnRaENaOd6XpyxNtF3x9f+xF6Ur5X
tktyABsldJeph9kqNUS/OTdV3v4tBIYAwJY3b7kXXGSQdFM9vr0wZJciyRv3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU97gHA6iiczbyGWiNi2/zDcIvcicwHwYDVR0j
BBgwFoAU8iHDG9KtnQUTA+Hn3pkdwAmHpyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx
VEsvMS9GMjIxQzMxQkQyQUQ5RDA1MTMwM0UxRTdERTk5MURDMDA5ODdBNzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMjFDMzFCRDJBRDlEMDUx
MzAzRTFFN0RFOTkxREMwMDk4N0E3MjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoYlBrdkREazZBa0FQOGtnZGFOdVQ2V3VoaWJGMVBMUVFoNERkUzV3cVRLLzEv
MzQzNTJlMzEzOTMxMmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM2
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2/CDANBgkqhkiG9w0BAQsFAAOCAQEAVpYOaBl8gwXC
GpVpsldlV0sgbCHUIokTatHZSIVp2+3EQ7qoimpaCNuTofl42dtkamIEp8jmj4cg
pS9haT4Hh1744nlLOWs4bGlorq5Yf3ZT966uObrz3ybyDh0Bk28W62LoXdLfv2HO
XSQ/4EzQFmfNLqGGCwpN8RO/mphI844QNFPTcx+wZEQ+BYIDx/WcqyEPIbJY3gSB
sXqGnM/CEj5Jt0Y9j1e3asyN9m/WEUSjtYn0r2DCTj1FROUXmZerdOuOqZmq4JMJ
RWIA9oc0IAYJyEhTe7SConSu6iXF5oVcZ/qpd3KhSFy9LV/5NVnDw/Ivc0GtuctS
0JIV2KqhtQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:50:46 2026 by rpki-client