Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa
File:                     34352e3137362e35362e302f32322d3232203d3e20323638393639.roa (raw, json)
Hash identifier:          wL7eqKBu231dIxERv68mGi9uEdWXeOgQRxYzc89uu9Q=
Subject key identifier:   44:6E:0C:1E:88:D7:61:2F:98:DA:7B:04:AC:3B:2A:DE:6C:1A:FC:34
Certificate issuer:       /CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
Certificate serial:       788ABBEC6525C60B00155D5C4F1AC03EF7E0B67E
Authority key identifier: E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa
Signing time:             Thu 05 Feb 2026 06:00:10 +0000
ROA not before:           Thu 05 Feb 2026 05:55:10 +0000
ROA not after:            Thu 04 Feb 2027 06:00:10 +0000
asID:                     268969
IP address blocks:        45.176.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl
                          rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8a:bb:ec:65:25:c6:0b:00:15:5d:5c:4f:1a:c0:3e:f7:e0:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
        Validity
            Not Before: Feb  5 05:55:10 2026 GMT
            Not After : Feb  4 06:00:10 2027 GMT
        Subject: CN=446E0C1E88D7612F98DA7B04AC3B2ADE6C1AFC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:c0:1a:ef:46:70:8e:13:83:25:de:01:16:
                    96:07:58:17:35:ac:b8:3c:b1:52:ff:41:96:ee:5d:
                    38:2b:ab:9f:ba:ee:bd:3a:22:b0:54:cb:c2:e6:91:
                    c8:b2:1d:15:60:f1:01:60:5e:c1:63:ac:2c:7f:c5:
                    d6:20:0f:25:59:5c:38:e0:e0:73:3f:5e:8d:68:9e:
                    68:c1:94:82:9b:b3:53:96:27:b9:4f:bd:ee:2e:d1:
                    24:a0:50:1e:6d:3e:99:78:04:7e:70:bf:cc:05:14:
                    19:8d:87:95:be:d1:52:28:3e:6c:95:c8:7d:28:f0:
                    15:85:68:7f:3c:a5:4f:d7:e7:3c:54:e3:0f:e2:13:
                    0d:a3:35:cb:e2:7c:a6:9e:d4:88:7e:d0:22:a6:c7:
                    1d:80:58:5b:0e:a8:d7:36:11:7f:71:e4:c7:a3:9a:
                    7e:32:e7:45:2d:27:2f:2a:68:24:46:a2:66:9d:16:
                    d4:56:9d:68:a9:29:d8:da:03:cc:49:8d:7e:9d:35:
                    dc:b3:bf:a5:cd:91:f8:95:5f:6a:e4:fb:8a:e3:0a:
                    b6:f2:a8:29:b4:4b:53:5d:1b:55:4c:3f:bd:06:da:
                    63:56:2e:5a:0c:0f:e4:d7:a4:11:cf:dd:05:bf:58:
                    77:eb:bc:8d:0d:9f:49:e2:1e:7c:23:b0:c6:11:5a:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:0C:1E:88:D7:61:2F:98:DA:7B:04:AC:3B:2A:DE:6C:1A:FC:34
            X509v3 Authority Key Identifier:
                keyid:E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:75:77:31:64:c8:07:77:79:94:dd:27:88:56:55:31:36:19:
         aa:83:fb:dc:2c:59:91:fa:ec:78:8d:d8:5d:6f:62:3e:e2:f8:
         43:53:a3:23:03:9b:eb:af:e4:b2:a9:19:b1:fd:20:3e:67:f9:
         e8:ef:a8:4b:50:37:6c:19:bb:75:2f:79:35:44:ed:85:ac:bb:
         d9:25:fa:e5:41:47:53:81:9b:01:39:09:61:9f:f0:b6:ca:f0:
         a0:02:c0:0e:0b:15:17:98:ce:d0:39:47:d4:58:7f:25:5f:67:
         83:3d:0a:39:0f:33:bc:2b:79:9b:c4:e7:c4:41:56:7d:ea:bf:
         07:b4:a7:39:b6:28:c2:2f:26:aa:52:6c:ad:87:3a:5f:b8:d2:
         25:0b:6f:23:32:ac:ac:ea:fd:d8:ec:fd:4a:11:dc:88:4e:1d:
         39:ef:af:c8:cf:3e:79:89:97:ae:11:8c:25:82:d3:a1:d7:53:
         73:12:cd:93:05:20:b3:25:6f:e0:c1:85:31:3a:5b:0a:79:0e:
         ee:24:61:f6:15:c5:0a:dd:6c:fe:7b:d5:00:47:5a:4c:3a:35:
         91:5f:7b:95:b9:35:f2:96:25:28:7a:0b:2a:7e:e6:ee:8c:9d:
         8e:58:38:48:65:05:66:f3:94:ca:f5:9e:80:d0:ec:29:12:84:
         e9:e0:c3:ce
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUeIq77GUlxgsAFV1cTxrAPvfgtn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxMjFENzEzQzczMkE2QjQ1RDU3MDJGQ0RGRDU0NUZE
MEUxQjg2NjAeFw0yNjAyMDUwNTU1MTBaFw0yNzAyMDQwNjAwMTBaMDMxMTAvBgNV
BAMTKDQ0NkUwQzFFODhENzYxMkY5OERBN0IwNEFDM0IyQURFNkMxQUZDMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2MAa70ZwjhODJd4BFpYHWBc1
rLg8sVL/QZbuXTgrq5+67r06IrBUy8LmkciyHRVg8QFgXsFjrCx/xdYgDyVZXDjg
4HM/Xo1onmjBlIKbs1OWJ7lPve4u0SSgUB5tPpl4BH5wv8wFFBmNh5W+0VIoPmyV
yH0o8BWFaH88pU/X5zxU4w/iEw2jNcvifKae1Ih+0CKmxx2AWFsOqNc2EX9x5Mej
mn4y50UtJy8qaCRGomadFtRWnWipKdjaA8xJjX6dNdyzv6XNkfiVX2rk+4rjCrby
qCm0S1NdG1VMP70G2mNWLloMD+TXpBHP3QW/WHfrvI0Nn0niHnwjsMYRWmjJAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQURG4MHojXYS+Y2nsErDsq3mwa/DQwHwYDVR0j
BBgwFoAU5RIdcTxzKmtF1XAvzf1UX9DhuGYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93R3hjMXVrU3R3ODFXRk5RVVdnOE5DWlFzWHQ4eThiODFualo3aHRCRFFI
LzEvRTUxMjFENzEzQzczMkE2QjQ1RDU3MDJGQ0RGRDU0NUZEMEUxQjg2Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNTEyMUQ3MTNDNzMyQTZCNDVE
NTcwMkZDREZENTQ1RkQwRTFCODY2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93
R3hjMXVrU3R3ODFXRk5RVVdnOE5DWlFzWHQ4eThiODFualo3aHRCRFFILzEvMzQz
NTJlMzEzNzM2MmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4Mzkz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLbA4MA0GCSqGSIb3DQEBCwUAA4IBAQCEdXcxZMgHd3mU
3SeIVlUxNhmqg/vcLFmR+ux4jdhdb2I+4vhDU6MjA5vrr+SyqRmx/SA+Z/no76hL
UDdsGbt1L3k1RO2FrLvZJfrlQUdTgZsBOQlhn/C2yvCgAsAOCxUXmM7QOUfUWH8l
X2eDPQo5DzO8K3mbxOfEQVZ96r8HtKc5tijCLyaqUmythzpfuNIlC28jMqys6v3Y
7P1KEdyITh0576/Izz55iZeuEYwlgtOh11NzEs2TBSCzJW/gwYUxOlsKeQ7uJGH2
FcUK3Wz+e9UAR1pMOjWRX3uVuTXyliUoegsqfubujJ2OWDhIZQVm85TK9Z6A0Owp
EoTp4MPO
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:46 2026 by rpki-client