Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
File:                     34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          U9s/Nkj+vk/WMqU2aGm3ThELfHhvZYWh/QnuA+dpo3U=
Subject key identifier:   05:4A:48:16:FF:9F:D2:93:FA:85:26:6E:3D:68:E7:A8:5C:A0:6A:93
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       279CBFE696732C03ED2AD188B9ADAA6F80F9AA3E
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
Signing time:             Thu 05 Feb 2026 04:23:05 +0000
ROA not before:           Thu 05 Feb 2026 04:18:05 +0000
ROA not after:            Thu 04 Feb 2027 04:23:05 +0000
asID:                     266539
IP address blocks:        45.65.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9c:bf:e6:96:73:2c:03:ed:2a:d1:88:b9:ad:aa:6f:80:f9:aa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Feb  5 04:18:05 2026 GMT
            Not After : Feb  4 04:23:05 2027 GMT
        Subject: CN=054A4816FF9FD293FA85266E3D68E7A85CA06A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:b3:75:80:85:ba:e5:a9:1a:fd:08:0a:7c:
                    8e:1f:84:e2:66:f3:94:78:33:13:72:2e:7e:ca:8c:
                    80:f4:65:29:3b:29:b5:e8:ab:db:2d:6e:bc:60:9b:
                    d1:f2:1a:08:c9:92:c1:34:eb:90:b6:26:ad:f6:e2:
                    f5:30:b3:eb:cb:e2:2e:c5:5c:fc:b0:06:97:ef:80:
                    e5:b8:3d:9b:cb:00:d0:1a:72:be:d1:7c:b4:85:30:
                    c7:6c:76:ea:24:6f:7d:f1:6e:db:5b:c6:d4:44:5c:
                    89:d8:42:0d:f2:2b:18:6a:a6:d8:21:81:d9:81:0a:
                    21:17:1e:84:84:46:a9:3f:0f:e8:28:a3:b9:76:f3:
                    1b:b4:aa:1e:5e:69:c6:c4:df:06:10:83:8a:e7:e4:
                    d2:69:b0:ce:62:d3:65:67:57:c7:5e:6d:f3:18:b3:
                    8d:aa:d9:16:b5:03:1b:88:c7:56:92:de:62:f3:c8:
                    c5:20:70:dc:40:21:fc:42:0c:0c:1a:d7:b7:a8:10:
                    72:bb:39:ea:f0:a9:16:6f:43:92:37:0c:49:3b:55:
                    74:1d:a4:1b:2e:dc:e1:2c:2b:75:cf:92:72:bf:82:
                    c6:66:7b:1e:70:f5:2d:7d:1c:01:ec:c4:b3:02:c8:
                    a2:13:f7:28:d8:bc:0c:1e:e9:0f:db:09:9a:71:89:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4A:48:16:FF:9F:D2:93:FA:85:26:6E:3D:68:E7:A8:5C:A0:6A:93
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:f0:dd:4a:55:ba:70:91:e9:a6:c9:02:0c:00:7a:ee:f7:
         fa:38:2a:63:29:64:2f:f8:0b:bd:52:21:29:ae:80:99:b7:98:
         4b:0c:eb:09:7b:f3:d3:ee:c2:9f:aa:16:e6:a2:3b:68:39:0d:
         14:96:5f:93:cf:2f:75:b1:77:ae:b9:59:67:87:0a:a5:9b:0f:
         b2:1a:1b:e8:a3:1c:d1:9b:cb:f0:51:db:a0:db:66:6b:90:70:
         1a:cc:0a:ba:9a:8b:f1:0e:4b:90:5b:4c:8f:5d:d4:43:a4:50:
         47:a8:b8:99:f7:ce:ce:5f:ac:cf:da:07:ff:a0:e3:7f:24:77:
         de:7b:d2:b7:ba:08:c5:95:3a:be:a6:64:1c:b3:f9:52:ad:d0:
         f6:98:47:af:da:ce:1c:08:24:77:8e:a2:aa:5f:3d:96:2e:d8:
         1f:82:c1:f8:1f:cc:a0:e9:9b:0c:c9:7d:51:26:87:8e:a9:98:
         86:07:46:60:bf:01:95:a1:cd:1f:45:d8:50:f4:6e:9a:27:d9:
         a8:ef:a3:99:4e:92:5b:fc:c7:17:ae:5c:d5:eb:1d:93:da:ed:
         9b:83:20:60:37:65:b6:b5:d1:b5:ce:a9:36:20:4c:cb:4a:35:
         03:da:8d:95:dd:f7:35:2c:4b:4c:9c:00:06:85:4a:20:bb:99:
         8c:dd:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:51 2026 by rpki-client