Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa
File:                     34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa (raw, json)
Hash identifier:          dywGetQdE1WFQNAS2dULdvegjJOGbgfB+yYjWLIIwNw=
Subject key identifier:   9B:F2:B4:F7:66:A2:85:99:61:82:90:09:A1:5F:40:DE:C5:64:9E:F3
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       11D48E545D59800B51C8BD228628BE9050B03196
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa
Signing time:             Thu 05 Feb 2026 01:25:59 +0000
ROA not before:           Thu 05 Feb 2026 01:20:59 +0000
ROA not after:            Thu 04 Feb 2027 01:25:59 +0000
asID:                     268781
IP address blocks:        45.172.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d4:8e:54:5d:59:80:0b:51:c8:bd:22:86:28:be:90:50:b0:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Feb  5 01:20:59 2026 GMT
            Not After : Feb  4 01:25:59 2027 GMT
        Subject: CN=9BF2B4F766A2859961829009A15F40DEC5649EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:c2:42:14:58:9b:ce:24:e7:7c:67:bb:de:
                    3f:52:13:68:b6:b1:b5:82:e6:ea:7b:2c:aa:47:85:
                    17:dc:82:50:ed:c5:81:b5:f1:4e:2e:e8:b6:d4:0a:
                    03:b1:09:46:f1:dd:41:15:a6:c7:4b:13:f2:46:ad:
                    b6:56:31:76:7f:6b:f1:cf:cf:97:4e:b8:21:71:b6:
                    0e:e7:ac:03:96:70:a1:44:40:7e:2c:8d:5d:a8:ae:
                    5a:75:6d:fc:50:a2:50:00:8c:7e:c1:2b:ad:25:ad:
                    30:ee:4c:68:c4:69:36:fa:b2:80:6a:5d:37:05:33:
                    3e:87:da:08:e1:47:60:15:f5:95:c1:d8:71:d2:7a:
                    9b:c2:9f:6b:80:b3:a4:9c:23:d6:57:95:cc:ae:e9:
                    4b:47:48:b4:58:69:52:13:35:ac:53:3c:23:5a:1f:
                    b9:b5:6f:75:25:a0:d7:86:e1:6e:d8:90:5e:0e:f7:
                    db:5d:12:e4:ac:89:f3:6e:03:ce:af:fe:c2:04:92:
                    42:e1:c8:1e:9e:d1:f3:31:cf:73:a1:f9:9b:09:56:
                    b5:27:c2:9d:94:32:47:11:30:32:fc:7c:09:11:17:
                    1e:e5:b4:38:4a:b9:f6:6e:a0:2c:7d:d5:20:fe:07:
                    f7:b3:27:d2:33:c7:8e:4d:9d:9d:46:59:24:88:88:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:B4:F7:66:A2:85:99:61:82:90:09:A1:5F:40:DE:C5:64:9E:F3
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:7d:c1:1b:ab:7b:fc:dc:52:81:b8:4a:13:a0:85:ae:9c:bb:
         fa:32:b0:91:13:28:58:2b:78:0d:cc:6e:b5:76:b0:b8:67:8a:
         f6:e5:1d:59:d2:40:6e:5c:8f:7f:36:5e:fc:d4:74:a0:98:96:
         60:53:42:81:73:16:f3:bd:35:a5:27:e8:79:47:50:f7:37:6c:
         0a:83:d6:a2:0d:4b:19:8a:6b:3e:c8:ae:ac:5c:92:10:21:e9:
         3c:89:91:63:85:67:aa:a3:e1:18:7c:ce:bb:ce:c7:05:af:3a:
         a5:f3:1c:98:cb:7f:99:e1:a0:8f:8f:95:1e:54:68:a9:55:5c:
         ca:c4:4d:3e:32:0e:bd:66:03:3f:1c:59:be:71:3e:bd:de:7f:
         18:83:c5:5b:93:57:a9:0d:41:2a:53:65:3a:e9:42:50:4e:58:
         0e:1a:52:a7:bc:46:cd:b3:ed:fd:ed:2c:eb:bf:d7:d2:23:6b:
         02:41:6a:2a:37:aa:5f:56:5c:a7:b5:56:15:27:29:d1:bc:28:
         92:01:95:7e:cf:7f:4d:2f:f5:80:db:92:f4:cb:9b:f3:4d:0f:
         7d:ba:f8:a7:c1:92:70:2d:b5:a8:29:7c:de:bf:2d:a4:04:7c:
         05:29:00:e4:b6:b2:b8:5f:87:3f:ca:cd:78:cf:06:63:59:d5:
         7e:fc:41:83
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEdSOVF1ZgAtRyL0ihii+kFCwMZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAz
MDVBQUI0NjAeFw0yNjAyMDUwMTIwNTlaFw0yNzAyMDQwMTI1NTlaMDMxMTAvBgNV
BAMTKDlCRjJCNEY3NjZBMjg1OTk2MTgyOTAwOUExNUY0MERFQzU2NDlFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiwsJCFFibziTnfGe73j9SE2i2
sbWC5up7LKpHhRfcglDtxYG18U4u6LbUCgOxCUbx3UEVpsdLE/JGrbZWMXZ/a/HP
z5dOuCFxtg7nrAOWcKFEQH4sjV2orlp1bfxQolAAjH7BK60lrTDuTGjEaTb6soBq
XTcFMz6H2gjhR2AV9ZXB2HHSepvCn2uAs6ScI9ZXlcyu6UtHSLRYaVITNaxTPCNa
H7m1b3UloNeG4W7YkF4O99tdEuSsifNuA86v/sIEkkLhyB6e0fMxz3Oh+ZsJVrUn
wp2UMkcRMDL8fAkRFx7ltDhKufZuoCx91SD+B/ezJ9Izx45NnZ1GWSSIiCDJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUm/K092aihZlhgpAJoV9A3sVknvMwHwYDVR0j
BBgwFoAUpU372NEG67J4C/jQMxrxIDBaq0YwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XWWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNy
LzEvQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAzMDVBQUI0Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTRERkJEOEQxMDZFQkIyNzgw
QkY4RDAzMzFBRjEyMDMwNUFBQjQ2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
WWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNyLzEvMzQz
NTJlMzEzNzMyMmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItrOwwDQYJKoZIhvcNAQELBQADggEBAJx9wRure/zc
UoG4ShOgha6cu/oysJETKFgreA3MbrV2sLhnivblHVnSQG5cj382XvzUdKCYlmBT
QoFzFvO9NaUn6HlHUPc3bAqD1qINSxmKaz7IrqxckhAh6TyJkWOFZ6qj4Rh8zrvO
xwWvOqXzHJjLf5nhoI+PlR5UaKlVXMrETT4yDr1mAz8cWb5xPr3efxiDxVuTV6kN
QSpTZTrpQlBOWA4aUqe8Rs2z7f3tLOu/19IjawJBaio3ql9WXKe1VhUnKdG8KJIB
lX7Pf00v9YDbkvTLm/NND326+KfBknAttagpfN6/LaQEfAUpAOS2srhfhz/KzXjP
BmNZ1X78QYM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:29 2026 by rpki-client