Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa
File:                     34352e3137392e37362e302f32322d3332203d3e20323639303833.roa (raw, json)
Hash identifier:          TBR8NsL+IFayTtoLXRrvq7J66N4M6G8kyAAEpCp7fD0=
Subject key identifier:   7C:85:22:AA:E5:3C:AC:54:E3:37:E0:BD:F9:BD:ED:7F:1C:CA:8D:D2
Certificate issuer:       /CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
Certificate serial:       78CCFA570425DC67D299AB179950892622BD8879
Authority key identifier: 00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa
Signing time:             Thu 05 Feb 2026 13:35:44 +0000
ROA not before:           Thu 05 Feb 2026 13:30:44 +0000
ROA not after:            Thu 04 Feb 2027 13:35:44 +0000
asID:                     269083
IP address blocks:        45.179.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl
                          rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cc:fa:57:04:25:dc:67:d2:99:ab:17:99:50:89:26:22:bd:88:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
        Validity
            Not Before: Feb  5 13:30:44 2026 GMT
            Not After : Feb  4 13:35:44 2027 GMT
        Subject: CN=7C8522AAE53CAC54E337E0BDF9BDED7F1CCA8DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:5a:73:8b:de:08:6d:92:7b:f9:12:6c:12:
                    01:de:d4:bb:c2:31:d5:ca:f8:57:cd:dd:34:de:61:
                    32:e8:cb:7e:6b:e1:57:43:52:2b:89:8f:15:c1:0d:
                    b0:c0:2f:de:90:34:88:dc:90:e9:f3:3c:e9:20:d2:
                    7a:fe:e9:97:2d:f9:bd:fd:87:3a:4b:b0:16:e4:79:
                    74:17:b1:1e:b6:6a:f2:b7:59:3a:e8:61:c9:4d:d8:
                    bf:98:40:7d:43:a0:c4:76:d0:27:86:8e:6d:1d:83:
                    d7:56:f0:75:87:2e:d2:49:b5:33:a1:f4:a0:59:f2:
                    18:f1:10:2b:3c:8d:53:9f:64:61:ec:b4:22:9a:32:
                    eb:51:b2:25:41:32:8a:6b:26:bf:12:58:6f:fa:a1:
                    2b:c7:b4:86:95:ab:33:8d:b9:c3:32:cc:ef:3e:0a:
                    ad:a4:bb:25:d9:6d:73:0f:80:c6:73:f7:0b:25:aa:
                    ff:b9:d8:18:13:4b:e3:3d:1c:08:86:6c:02:56:23:
                    3b:0d:f5:48:de:18:e4:95:4a:b5:0b:4b:ac:01:3e:
                    7c:4e:f7:71:85:c3:4d:5f:40:17:c8:7f:69:e1:ac:
                    ab:cb:6d:0e:8f:ec:bb:63:fc:c0:69:b2:11:e5:af:
                    2f:2a:37:94:56:dc:a7:8c:c1:02:68:cb:1b:34:fa:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:22:AA:E5:3C:AC:54:E3:37:E0:BD:F9:BD:ED:7F:1C:CA:8D:D2
            X509v3 Authority Key Identifier:
                keyid:00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:da:aa:58:43:13:00:e3:01:9b:69:2a:6a:c0:04:24:11:48:
         5a:c0:69:3b:10:d5:1f:6a:2b:e5:8a:db:04:38:f3:19:4e:5d:
         36:8e:56:97:be:a3:8d:6f:0a:6a:63:1c:6a:05:fe:4c:de:fa:
         65:d0:b1:1f:2b:cd:b0:4a:52:64:d6:42:ff:21:00:1a:e0:42:
         84:66:65:11:6e:0e:e0:73:ab:33:ca:b0:02:3b:d2:f5:ed:3c:
         e2:e9:17:e5:f6:75:60:a0:ce:55:4e:b1:9f:ad:55:15:c9:b2:
         23:12:8d:df:48:8f:2b:a9:68:7e:8c:3b:98:93:f6:b4:89:75:
         be:d5:9d:35:3c:70:5c:01:bf:b4:07:bb:a0:77:e9:f1:13:29:
         9d:dc:e9:58:2c:50:0c:a0:fd:fa:27:26:87:63:20:56:bc:90:
         08:fd:26:00:1c:65:5a:5e:18:22:01:b8:b3:f2:b4:14:e9:1a:
         1e:a0:74:ae:2b:bd:c9:94:40:e3:23:97:e7:8f:68:ac:08:be:
         48:9d:b1:27:47:64:5c:35:ed:b6:bd:5d:c9:29:2b:30:ff:02:
         4d:e3:be:0d:9e:1a:b2:23:ec:2f:87:57:ab:9a:1f:7c:a4:23:
         36:87:a1:63:62:fb:d6:df:34:6e:9b:cd:56:5f:1c:d1:c9:d8:
         e0:a2:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:02:29 2026 by rpki-client