Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31382e302f32342d3234203d3e20323638303837.roa
File:                     34352e3136392e31382e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier:          2o/A3QR+HcCyYvoEjGAA+l53KUbQgwzRJ8Xd6L3zvkg=
Subject key identifier:   80:03:C0:97:02:E2:0E:B8:3A:81:08:05:2D:B0:82:69:D5:E1:CD:79
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       1D979B7B6C899C08FBA4A326DB07F68B71D2DEF7
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31382e302f32342d3234203d3e20323638303837.roa
Signing time:             Tue 17 Feb 2026 15:18:37 +0000
ROA not before:           Tue 17 Feb 2026 15:13:37 +0000
ROA not after:            Tue 16 Feb 2027 15:18:37 +0000
asID:                     268087
IP address blocks:        45.169.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:97:9b:7b:6c:89:9c:08:fb:a4:a3:26:db:07:f6:8b:71:d2:de:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Feb 17 15:13:37 2026 GMT
            Not After : Feb 16 15:18:37 2027 GMT
        Subject: CN=8003C09702E20EB83A8108052DB08269D5E1CD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:43:ce:4a:f7:c2:dd:ad:d9:14:e2:a9:0c:
                    5c:5d:f8:23:f6:87:ea:8c:28:d0:95:3c:56:56:9b:
                    01:ff:0c:76:e5:d9:06:85:55:e3:2f:6d:0b:84:bd:
                    e5:52:e4:eb:51:14:35:a6:6d:27:61:8f:3f:af:6e:
                    17:bb:87:a5:33:8b:70:15:d6:a8:61:fb:8e:a1:65:
                    28:b2:1b:3d:9a:ac:64:fb:7f:90:4f:9a:cc:cb:44:
                    b8:08:d8:d2:4b:8f:45:ed:42:87:6c:57:d1:00:c1:
                    fc:88:62:ec:2a:f8:92:d4:9e:d8:b6:e2:19:4a:21:
                    d2:f7:f5:1f:a6:4d:f4:21:c9:7d:50:f1:f1:77:41:
                    f8:dd:0b:fd:d9:69:e8:b3:50:bd:d9:9e:7a:a1:5b:
                    4e:18:61:51:0c:fe:b2:96:96:92:f7:f2:08:cc:06:
                    13:35:f1:27:a5:5d:75:5d:2e:32:4b:8b:c6:34:af:
                    aa:df:15:3a:b2:de:cd:bc:80:f9:0b:3b:09:fd:e9:
                    3a:77:02:21:d7:03:75:22:42:05:5a:e5:d3:57:55:
                    76:a9:f8:fa:02:2c:18:33:d5:0d:47:51:7f:2b:f4:
                    87:a1:0b:bc:77:0a:4f:cd:b3:d1:a9:84:d2:9c:cd:
                    7b:8d:32:f6:d4:0c:29:84:5d:e9:e8:af:0e:26:72:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:03:C0:97:02:E2:0E:B8:3A:81:08:05:2D:B0:82:69:D5:E1:CD:79
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31382e302f32342d3234203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:df:56:a2:a3:a2:24:8f:f3:f1:b1:31:64:2b:06:e3:22:21:
         88:ad:b7:1d:d0:1e:4b:44:cb:b3:ba:20:97:8c:47:f9:e6:5a:
         8e:69:d9:87:62:d7:ac:11:82:02:4a:25:a5:e9:9a:ae:ef:6c:
         e7:0f:ea:a6:bd:77:7a:fb:62:7b:7f:b1:21:8e:61:ed:ac:70:
         ab:b0:91:98:94:c0:72:e7:42:d2:5c:51:e9:78:62:72:3f:30:
         fa:7a:bb:2d:a7:b6:7a:6c:c6:34:01:d2:88:c1:d8:af:9c:76:
         62:25:5e:70:f9:17:72:cd:fa:31:d5:2a:df:aa:b2:80:93:5e:
         93:f3:08:4e:30:b8:21:ef:41:81:ca:3a:7a:fe:90:3a:df:f0:
         24:3f:7f:51:22:24:32:b0:af:b9:79:6a:4e:c6:37:09:76:be:
         23:bb:96:fa:1a:16:bf:8a:d7:23:32:1a:f2:9f:23:0a:9f:78:
         ca:ec:23:99:0b:35:9e:90:cf:c1:5e:48:25:2e:c7:cf:5c:58:
         cb:43:28:a3:ee:6c:cb:62:4d:07:fb:c9:4b:b1:cc:77:5f:b6:
         8a:7e:17:9a:d9:51:e1:93:42:e4:c5:27:6a:d1:29:6a:db:e8:
         d6:d2:3d:02:eb:d8:78:ef:20:5a:d3:f8:91:b3:5c:d4:2b:c8:
         cc:59:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:49 2026 by rpki-client