Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
File:                     34352e352e38382e302f32322d3232203d3e20323636303834.roa (raw, json)
Hash identifier:          wlYX9LT4oAF2XaLjWHRwh1BF2XSf3RHpXlcHZvG8Qf8=
Subject key identifier:   E3:60:9C:09:4D:D6:A0:07:F2:40:8A:6F:CE:A3:ED:90:72:54:00:1E
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       405E4DBEE28DA7BC9A0CA23348D778D871F0E346
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
Signing time:             Thu 05 Feb 2026 11:00:12 +0000
ROA not before:           Thu 05 Feb 2026 10:55:12 +0000
ROA not after:            Thu 04 Feb 2027 11:00:12 +0000
asID:                     266084
IP address blocks:        45.5.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:4d:be:e2:8d:a7:bc:9a:0c:a2:33:48:d7:78:d8:71:f0:e3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Feb  5 10:55:12 2026 GMT
            Not After : Feb  4 11:00:12 2027 GMT
        Subject: CN=E3609C094DD6A007F2408A6FCEA3ED907254001E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e7:40:29:24:71:d3:03:cd:ec:28:60:e4:9a:
                    dc:4f:57:b9:2b:03:65:50:39:d4:cc:30:af:34:d8:
                    18:1b:e6:d5:bb:5b:f5:8a:ab:2d:86:4a:13:d8:1c:
                    6e:a2:e7:4e:56:69:de:bd:48:5a:ba:22:0d:e9:d6:
                    7f:58:d9:f0:82:76:82:91:cf:17:8a:10:64:75:50:
                    be:26:78:e1:1a:4c:33:a7:eb:4c:76:4e:5c:85:1f:
                    f2:ba:4b:49:29:fc:4b:f7:6f:90:04:c2:51:e8:b2:
                    00:5e:b9:95:ce:3a:0b:f8:0b:9d:1f:90:cc:32:25:
                    c7:c6:16:ce:99:af:6d:e0:ba:85:61:4d:2f:12:4a:
                    a2:ea:c9:74:7c:44:7e:9c:a5:2a:f6:ed:cb:1e:d1:
                    e5:b4:3e:21:c0:93:d4:c2:64:aa:f5:d8:d0:b2:1d:
                    9e:ba:ad:29:a0:7d:9c:b6:84:ba:48:8d:ae:52:07:
                    05:60:48:74:1b:07:14:d8:30:72:68:4e:30:e2:06:
                    13:13:20:0f:79:d1:69:13:28:2a:72:8f:2e:2a:ec:
                    1d:fa:7e:c5:3c:49:9d:f1:13:89:a5:bc:68:bf:56:
                    3c:74:44:5b:8e:55:a7:3b:7d:29:e2:01:43:2e:4f:
                    5a:96:14:40:45:27:69:9b:eb:5a:fb:84:ee:03:21:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:9C:09:4D:D6:A0:07:F2:40:8A:6F:CE:A3:ED:90:72:54:00:1E
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:14:fd:66:9f:91:d9:ba:e8:92:1c:76:65:d2:d1:c6:b5:
         f2:f5:c4:72:3c:15:44:c0:6f:d2:48:3f:e7:3e:3b:69:31:37:
         41:bf:21:93:57:ca:7f:e8:52:5d:9e:e3:ef:8c:dd:e8:b9:0b:
         e1:8d:0a:8e:15:96:36:53:a9:f3:13:79:4f:2c:79:8b:5e:16:
         d3:56:f4:a2:d3:e9:49:42:b7:f6:f0:71:1b:06:a9:d4:35:99:
         ad:59:63:fe:71:f3:6a:46:7f:05:a5:65:53:89:76:c3:0a:19:
         67:d5:71:b5:71:52:d2:b1:a9:21:61:f5:ef:7a:c6:db:0f:6e:
         e9:a3:e3:e3:b2:e4:90:91:44:e7:25:2f:cf:b6:f0:10:ce:43:
         19:3c:b6:25:4a:e5:0a:fd:08:82:27:49:5f:d5:18:8a:c6:bc:
         67:7c:bb:2c:29:bd:66:d3:9e:00:05:18:42:f1:c1:f0:32:c6:
         7a:e7:1d:1f:1a:e9:e9:36:1e:39:e8:cc:2b:6a:3c:60:a1:5d:
         56:60:72:7f:d8:ae:af:dc:3a:d9:dd:75:e0:aa:a0:0b:ba:35:
         78:91:41:b1:9a:8a:cb:20:1f:64:70:50:cc:86:0b:61:e0:f8:
         80:73:f7:60:35:6c:aa:47:c3:09:03:ee:57:f1:e1:26:3e:14:
         35:16:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:33 2026 by rpki-client