Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39352e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          hducqS2ZdGZm+SE5GdXxUznr8Wm7+DXWX3dd+MnB8yI=
Subject key identifier:   0A:C5:95:82:D0:5C:31:33:56:62:6F:B4:CE:F3:FC:72:DE:AB:B5:D1
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       75B0900E52A64B9BF5DF3EDFA2B38791B28D7867
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39352e302f32342d3234203d3e20323637343130.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     267410
IP address blocks:        45.235.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
                          rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b0:90:0e:52:a6:4b:9b:f5:df:3e:df:a2:b3:87:91:b2:8d:78:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=0AC59582D05C313356626FB4CEF3FC72DEABB5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:12:34:1a:f1:4f:82:66:20:03:43:bc:fd:
                    78:f9:12:12:d4:cf:93:28:ec:bb:23:86:27:bc:06:
                    21:8c:2d:ca:87:75:c4:ae:ac:cd:fc:f3:ff:1c:2a:
                    16:91:f9:be:22:ee:ce:1b:a1:b1:4a:c5:b6:24:36:
                    96:71:55:83:92:5f:b6:39:8b:00:6c:08:cf:31:ca:
                    e8:b3:65:ec:31:04:51:b8:af:1d:3c:95:68:d0:98:
                    91:af:52:69:ca:83:f5:29:da:3f:9b:06:40:95:b1:
                    30:7d:39:b0:d9:ec:10:69:b4:74:2e:c8:b5:2b:06:
                    79:82:eb:89:3a:ac:23:a8:65:dc:ee:f7:2c:61:d8:
                    11:79:93:a6:f2:c3:8a:aa:44:b5:a2:06:29:20:34:
                    de:61:58:53:7c:a1:4c:13:fb:b9:59:e9:72:c8:76:
                    64:88:0b:71:4c:fa:1f:75:53:3d:7e:51:88:49:b2:
                    82:97:c3:d2:4f:3d:17:d9:f6:72:bd:b3:56:2e:04:
                    cc:a6:9c:18:75:1e:01:29:c0:97:22:58:b7:b5:42:
                    b0:13:ee:8f:48:f4:b2:8f:05:da:c5:d5:01:55:45:
                    f4:b5:6e:08:82:55:cf:a3:1e:37:2f:5f:92:33:a8:
                    1e:7b:f0:03:fa:68:36:c7:44:8a:ee:e5:24:d0:15:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:95:82:D0:5C:31:33:56:62:6F:B4:CE:F3:FC:72:DE:AB:B5:D1
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39352e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:e0:bf:de:d4:b3:89:59:ac:2f:5c:3d:de:d0:9f:0f:30:
         2d:04:88:19:7e:bc:06:85:4a:36:f7:71:21:5b:17:09:85:0d:
         2e:7b:57:9b:6c:ec:93:fc:b1:53:83:5e:1a:bc:7e:35:0f:dd:
         a6:d1:dc:5d:2e:b6:19:91:18:7a:95:84:3a:92:2d:6f:53:13:
         60:b0:91:ca:de:38:75:54:30:bd:0a:63:43:ab:cb:db:0d:9e:
         7d:f6:36:85:a2:c7:73:a5:87:7e:51:8d:46:6e:e7:07:9f:17:
         11:53:91:b7:0d:fa:41:b8:4d:39:4f:0a:1d:e9:86:f9:62:b2:
         16:d6:35:29:06:28:03:db:ef:0f:d4:9c:7b:78:e4:6c:f2:c4:
         01:c4:4a:30:da:90:06:b7:86:df:86:87:0a:a2:26:37:16:93:
         82:d3:ce:59:09:b1:16:a2:e4:7c:6c:1d:29:64:dd:89:70:12:
         e2:7b:14:f9:cc:33:48:d5:af:8e:f0:98:18:87:23:d3:18:22:
         86:46:ed:f6:fc:a8:62:ba:77:11:47:a5:03:f4:ee:c4:27:42:
         45:e4:bd:0a:e4:2d:f7:95:6a:4b:3c:f4:df:04:0f:ea:d6:59:
         7d:bb:cd:6c:ff:d5:e7:25:06:43:82:be:50:79:8a:0e:df:5e:
         31:0c:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:20:03 2026 by rpki-client