Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
File:                     34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (raw, json)
Hash identifier:          03Mqs/VxX4YlEDgZyihTQwdg0wG9WA4K0cWVShPcQ/0=
Subject key identifier:   90:FC:20:26:6B:97:C8:D3:86:91:62:2C:73:90:9E:45:B1:6B:A6:7A
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       08DA9ABD1DA2A85F49EC3D042C96BAB401F9A48F
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     267410
IP address blocks:        45.235.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
                          rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:da:9a:bd:1d:a2:a8:5f:49:ec:3d:04:2c:96:ba:b4:01:f9:a4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=90FC20266B97C8D38691622C73909E45B16BA67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:9f:a5:c4:d0:6d:fe:58:7b:b4:2a:a7:ae:
                    47:bd:39:49:84:73:03:92:a5:0a:6d:20:76:7a:d2:
                    04:ef:e1:d7:f1:5b:99:44:e3:15:1f:35:1c:5c:2e:
                    a4:fd:52:f8:c2:c1:81:61:75:a6:93:9b:c9:e7:7c:
                    f6:7e:35:6e:59:ca:ac:03:5c:aa:f4:91:c8:1b:46:
                    44:f1:c9:8c:c7:2f:f0:a8:4d:2e:85:27:56:e8:99:
                    2e:d1:20:dc:36:e4:49:de:27:58:7f:94:a9:e2:d7:
                    88:dc:a5:39:67:4c:10:2c:1f:db:78:83:02:1d:25:
                    5c:5f:d9:53:16:11:e5:85:d1:8f:34:e2:df:9c:50:
                    de:0f:34:b7:74:98:7e:76:2f:4f:7a:b1:80:92:33:
                    4a:bf:c4:09:d0:6c:98:69:01:6e:6e:4f:6b:be:8e:
                    a2:0e:c5:62:e8:42:37:7f:f2:6d:5c:75:70:d3:90:
                    11:6c:49:7a:7d:11:33:43:5a:9d:19:d5:1e:a7:4d:
                    13:78:11:7a:d4:20:14:cd:d8:26:b1:d8:13:d0:31:
                    c1:ef:64:81:5a:72:8d:84:ca:94:42:9a:e6:7b:07:
                    8d:51:34:08:f1:3e:03:f0:86:58:2f:75:2a:78:e6:
                    08:f4:4b:dd:4c:07:c2:85:0c:33:2b:f6:77:06:c0:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:20:26:6B:97:C8:D3:86:91:62:2C:73:90:9E:45:B1:6B:A6:7A
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:f9:85:22:89:9d:a7:81:cd:d7:bc:ab:b7:64:3d:26:23:
         63:d4:d8:0a:0f:cf:8b:05:af:f1:e4:d6:6a:ab:08:37:b2:17:
         fb:85:e0:ca:b5:9e:49:b4:79:e4:73:ac:ca:da:9f:bb:97:47:
         4e:36:a8:a4:8c:08:fe:6d:4c:f3:e7:56:b1:f6:59:be:62:6f:
         66:7b:64:da:42:ac:a5:9e:59:1e:0a:31:86:38:88:b1:3e:fe:
         83:0a:79:ae:5a:aa:fa:52:f2:8c:0b:87:53:e5:8d:80:a3:7a:
         48:01:24:60:98:44:18:26:d2:19:bb:a4:30:5f:2c:b1:34:82:
         bd:3d:40:24:be:4a:b3:17:b4:83:f1:c6:5c:f5:77:e7:44:f9:
         27:47:84:bb:85:2f:6b:85:a1:e6:12:b7:82:3a:d0:31:3d:3b:
         cb:78:1d:0f:1f:63:1f:be:15:c9:b7:7f:79:3f:d0:a5:22:60:
         d9:09:dd:d6:b8:db:3d:b3:92:fa:1f:6a:23:9b:64:25:80:91:
         55:2b:e1:ce:54:4c:2e:48:fa:b0:58:96:9a:b2:e4:75:df:36:
         a9:1c:ca:45:a3:41:9d:ab:1c:57:0a:3d:13:a5:bf:fc:b0:a6:
         ad:4f:46:bc:51:f0:0f:2c:7f:57:4f:dc:fe:f5:47:97:13:ce:
         2c:0b:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:20:24 2026 by rpki-client