Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa
File:                     34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (raw, json)
Hash identifier:          zs1U/dpsSdlf0woX0P4m5qL0hh/rIYcnS9XLa19Elu4=
Subject key identifier:   94:52:E2:8F:26:26:1C:2D:0B:A0:CE:36:1E:70:55:FB:C5:28:C7:4E
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       23A0611018F9ED7279F5463BBA4B80169225F3B1
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa
Signing time:             Thu 05 Feb 2026 05:00:06 +0000
ROA not before:           Thu 05 Feb 2026 04:55:06 +0000
ROA not after:            Thu 04 Feb 2027 05:00:06 +0000
asID:                     269373
IP address blocks:        45.185.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:61:10:18:f9:ed:72:79:f5:46:3b:ba:4b:80:16:92:25:f3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Feb  5 04:55:06 2026 GMT
            Not After : Feb  4 05:00:06 2027 GMT
        Subject: CN=9452E28F26261C2D0BA0CE361E7055FBC528C74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:bc:5d:4d:9e:3b:c8:4a:1e:57:57:0c:48:
                    26:8e:73:56:a4:13:23:61:44:40:7a:37:cc:f4:9d:
                    a1:01:6e:63:2d:3a:bb:11:08:ea:17:39:00:4c:7b:
                    85:48:38:6f:4a:c8:08:81:d0:b9:73:bf:60:5f:6b:
                    20:99:59:43:71:95:02:26:14:e6:f9:70:10:77:50:
                    ae:86:c2:97:09:1b:8b:75:ff:0b:a0:43:73:92:08:
                    5f:cc:e3:90:43:1f:18:10:81:50:91:f4:3f:61:ca:
                    dc:c5:b8:87:b8:f7:e0:aa:26:39:97:2d:37:2d:09:
                    64:0e:59:f5:13:7a:b3:1b:9e:a8:ac:fb:f7:54:ae:
                    71:54:a3:f8:b3:0b:f9:16:a3:7d:08:b8:0f:65:c8:
                    b0:33:a8:73:48:dc:19:1f:71:e5:29:02:51:c6:c2:
                    d4:82:55:6e:ee:76:21:13:bf:68:78:13:59:9f:fc:
                    3b:3f:e8:d6:07:cb:80:e0:fe:e5:30:6f:94:b4:4a:
                    06:38:2e:f2:26:1b:1b:91:a5:c6:24:d7:5f:b1:a7:
                    9e:71:22:bf:a1:f6:69:42:97:6a:d6:3e:12:36:66:
                    ad:a8:10:2f:64:7c:7e:fd:b1:ac:93:06:70:79:c4:
                    4a:a9:22:50:ac:19:9d:1d:59:bf:3e:ff:13:51:ea:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:52:E2:8F:26:26:1C:2D:0B:A0:CE:36:1E:70:55:FB:C5:28:C7:4E
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:23:2c:52:a2:5d:25:aa:2c:91:9a:13:31:db:4b:d3:a3:5f:
         0f:53:c4:77:a3:83:94:13:53:5a:81:a6:5c:a4:c6:6a:d5:8b:
         7c:5e:6a:76:56:fd:7f:5e:b2:77:18:de:06:4a:5f:3c:b3:c3:
         d4:b4:be:0e:a6:af:cb:bc:95:1b:93:e7:f7:7b:06:75:73:4f:
         8b:69:3a:8b:7c:5d:96:67:03:06:41:72:76:2f:03:8e:f1:21:
         46:78:2b:15:5e:22:75:c8:6b:c2:90:32:3b:73:74:b2:b1:86:
         fb:aa:7a:25:a1:fb:62:4c:e1:7a:67:91:fa:7b:48:14:f6:f2:
         a3:a3:0d:b6:30:f5:51:b9:6f:b7:92:19:ba:91:d3:a1:47:50:
         32:bd:b2:cc:94:ef:99:7c:11:52:fb:3b:5d:31:21:06:2e:39:
         50:c7:25:e8:f3:bf:c4:9e:c3:66:e6:9f:04:b2:cd:35:26:c4:
         cc:ac:94:9c:3a:85:e0:26:7e:c1:cb:04:df:08:f3:e4:c8:9e:
         69:df:d3:62:9d:64:a2:56:61:ff:72:cb:c0:2a:2a:00:83:f8:
         f4:77:1c:8c:ce:e5:7c:08:93:da:db:fa:5f:c7:1a:57:5e:82:
         8b:89:9b:53:9c:64:98:a4:59:40:f1:16:dd:cb:42:2c:55:0c:
         ff:39:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:45 2026 by rpki-client