Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          bf/O8ThUR/sxxfb+3RnCJKyXL2K/OaMkDOc8hSaDklY=
Subject key identifier:   89:FB:CF:85:D3:6C:34:CF:39:03:29:E8:C0:59:0B:74:04:7B:23:F9
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       45886DBF55E9E59963FD179641A9A4AB22493009
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     267410
IP address blocks:        45.235.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
                          rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:88:6d:bf:55:e9:e5:99:63:fd:17:96:41:a9:a4:ab:22:49:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=89FBCF85D36C34CF390329E8C0590B74047B23F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:2d:5d:52:08:10:8e:b3:4a:af:be:65:e2:
                    9d:9f:d3:ae:44:de:f8:03:87:6d:2c:67:ef:6d:05:
                    f0:b2:87:3d:4e:39:08:39:c1:7c:68:2c:66:d8:ea:
                    9e:f2:0f:25:81:66:a9:c2:0c:1e:0e:52:81:f6:ab:
                    89:9e:d6:49:0f:4e:3f:ff:95:7e:fa:40:e9:a9:78:
                    7c:53:a9:9e:2d:25:f3:40:74:65:45:a1:99:f0:d2:
                    d8:2f:50:e8:57:c0:d6:f0:1e:bf:97:80:79:f9:f2:
                    7f:df:79:fa:1d:66:4a:a0:44:68:8d:b3:83:3a:97:
                    f3:10:74:02:8a:43:a5:4e:e5:6c:08:91:0e:8e:e5:
                    20:b0:1d:d9:26:14:ee:c7:f9:02:ce:c8:2d:d1:6e:
                    e5:78:12:02:74:32:cb:26:db:95:0e:42:21:c2:0d:
                    51:8e:00:88:ec:25:e6:e9:8e:c3:e2:e8:43:87:a5:
                    f1:e3:35:26:fc:f4:3f:26:2e:99:c1:d1:e0:39:1e:
                    13:2e:5b:90:3c:7e:a0:36:81:85:33:78:bd:84:89:
                    9a:c7:30:7d:21:7d:95:52:79:96:3f:84:f5:2c:e2:
                    99:3d:54:03:50:38:73:2e:d0:b9:e2:f5:23:57:47:
                    6b:94:0d:1d:e0:21:63:66:d1:07:42:ef:b9:dd:d1:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:CF:85:D3:6C:34:CF:39:03:29:E8:C0:59:0B:74:04:7B:23:F9
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:04:26:79:8f:5c:cb:26:1a:94:3c:bc:9b:1e:15:43:73:41:
         3c:54:35:15:f0:55:54:f5:6e:1b:ba:13:31:72:7a:7a:3e:6b:
         eb:6b:16:03:21:84:de:2f:61:42:d5:02:8e:44:73:f0:cb:f3:
         c5:c5:18:be:b0:59:3d:95:9d:04:a2:49:88:8e:87:3c:51:2d:
         7f:02:cf:4c:91:c4:82:39:6c:d1:95:27:d3:ef:41:ca:4b:a2:
         11:24:42:3a:e7:dc:9b:7a:e5:2d:b7:6a:f4:a5:b7:6f:b8:6b:
         4a:c6:19:4c:31:53:8f:00:ad:93:3f:b4:69:40:0b:b0:80:f3:
         ce:c4:25:de:cf:0e:15:c2:0c:85:18:41:d5:96:5e:27:07:b6:
         08:de:65:29:61:70:a4:12:39:2e:79:bc:f8:f9:d8:7f:0d:04:
         02:3e:d9:6f:63:9c:24:a2:44:34:9c:53:37:d3:eb:4e:3b:26:
         f9:82:ba:26:fa:42:31:13:c9:37:10:94:73:34:f6:9c:d3:d2:
         60:79:fc:4d:2a:3d:62:44:dd:dd:c4:08:a4:71:7a:29:7d:69:
         7e:7c:8e:bc:88:0f:56:83:68:dd:70:95:67:67:3c:22:90:15:
         ec:90:02:c8:a6:5b:5f:bd:85:95:6b:7d:a2:64:68:dd:db:d6:
         bc:3e:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:42 2026 by rpki-client