Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
File:                     34352e3136392e31372e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier:          BdiDDDxoKo6fLE51A1Py69dbGMlqUFCB3TDdauS2Sh4=
Subject key identifier:   03:5B:E7:96:31:A9:18:C3:FB:78:DB:B1:7E:47:34:01:9D:F5:B4:38
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       1D9D1E11A05A68D3EC5F02EFA7B81DA5AB662EFC
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
Signing time:             Tue 17 Feb 2026 15:18:37 +0000
ROA not before:           Tue 17 Feb 2026 15:13:37 +0000
ROA not after:            Tue 16 Feb 2027 15:18:37 +0000
asID:                     268087
IP address blocks:        45.169.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:1e:11:a0:5a:68:d3:ec:5f:02:ef:a7:b8:1d:a5:ab:66:2e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Feb 17 15:13:37 2026 GMT
            Not After : Feb 16 15:18:37 2027 GMT
        Subject: CN=035BE79631A918C3FB78DBB17E4734019DF5B438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:5e:c5:3b:6f:3f:76:f6:ac:c3:f7:a9:1d:
                    26:ed:af:95:e2:1a:8d:16:27:62:2c:10:f8:9d:f5:
                    d0:5c:8c:40:9a:40:cd:ea:2d:9e:2c:6f:d3:9d:05:
                    32:8c:3d:de:9d:68:5c:db:58:f6:e1:c6:33:d6:01:
                    05:99:48:70:26:0a:f8:71:05:1a:8c:e4:e4:19:4f:
                    38:56:49:2c:9f:56:d0:05:a9:12:70:d2:ac:8e:10:
                    ef:0b:5b:e7:d1:b4:89:0b:cb:cf:d6:c9:60:a3:2e:
                    83:34:e6:4c:1e:01:6b:af:3f:77:f4:a5:a5:43:e3:
                    90:02:03:f3:33:16:69:fc:88:08:bc:12:1e:43:1c:
                    f8:33:ef:08:84:41:8f:df:f7:9b:29:2b:b5:02:e4:
                    c5:a2:0f:98:b2:74:f7:79:ff:58:8b:a2:9c:3a:59:
                    92:ce:9f:de:f9:92:36:f6:13:27:58:de:a8:1a:df:
                    bf:1c:80:d7:3d:25:67:87:0f:e6:fb:94:e2:ba:ca:
                    66:72:74:48:b3:92:73:83:6e:88:ee:7f:32:9a:f1:
                    bc:d6:a8:7d:6b:bb:cb:82:a1:6f:3d:b2:cc:4e:3f:
                    34:eb:f4:37:3e:2e:94:b9:9e:b3:12:0b:3f:7d:f5:
                    18:34:8b:0f:4d:cd:1f:be:14:1c:fc:c6:b5:3b:17:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:E7:96:31:A9:18:C3:FB:78:DB:B1:7E:47:34:01:9D:F5:B4:38
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d4:92:18:dd:e6:c4:20:98:bc:ea:f6:54:ef:85:df:65:b5:
         d1:61:b1:cd:43:d6:6e:5f:87:7f:ea:34:c5:ff:72:c6:50:a9:
         8f:d3:27:0d:ee:84:f4:e2:87:da:d9:d4:42:8a:9f:0d:dd:6b:
         85:70:b9:8a:c3:64:05:8b:e0:96:c6:f0:cd:ea:79:ca:41:fd:
         58:48:c0:14:73:b8:3d:74:40:4a:60:4b:e9:fc:80:ac:b9:14:
         d3:4e:bf:8d:ae:7d:8d:16:55:96:ef:6b:d2:3d:2a:88:c8:fe:
         4f:90:9b:36:db:0f:f4:1f:ff:73:55:6a:99:ae:f2:cd:f9:28:
         18:63:b1:f7:cf:b3:b4:1f:06:ec:64:e5:f0:19:72:7b:5a:a3:
         35:75:42:29:72:a8:c5:9c:20:a4:90:b4:86:fd:a9:ae:82:fa:
         13:1f:4c:20:5e:39:08:44:4a:cf:14:f1:14:4f:69:12:d5:d6:
         d4:79:87:74:f6:71:a7:38:f5:a9:b0:dd:f0:96:cb:fb:eb:1a:
         7d:87:cb:49:55:93:cb:64:51:7a:37:c3:ea:40:25:89:84:68:
         54:81:4e:1f:12:9b:90:f0:5e:c1:76:f4:87:49:72:43:26:bb:
         f8:a7:0e:c4:8b:e3:57:1f:10:99:bc:8f:46:40:de:6e:ab:15:
         c6:fb:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:50 2026 by rpki-client