Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/34352e3233312e3131322e302f32322d3234203d3e20323637313935.roa
File:                     34352e3233312e3131322e302f32322d3234203d3e20323637313935.roa (raw, json)
Hash identifier:          MivHO2WDf8G/BLzng96gAW4a1IZgpEGMPVkrq2CgQUA=
Subject key identifier:   B6:DF:A8:70:86:66:86:7E:7D:50:0D:CE:A3:7A:08:2E:BE:4E:9A:5C
Certificate issuer:       /CN=2B941ABA681825685BFCF79733311D0750F53807
Certificate serial:       706C6F0923FD9987936F68A3E1686781D72E34C2
Authority key identifier: 2B:94:1A:BA:68:18:25:68:5B:FC:F7:97:33:31:1D:07:50:F5:38:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/34352e3233312e3131322e302f32322d3234203d3e20323637313935.roa
Signing time:             Mon 02 Feb 2026 12:51:52 +0000
ROA not before:           Mon 02 Feb 2026 12:46:52 +0000
ROA not after:            Mon 01 Feb 2027 12:51:52 +0000
asID:                     267195
IP address blocks:        45.231.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.crl
                          rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:6f:09:23:fd:99:87:93:6f:68:a3:e1:68:67:81:d7:2e:34:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B941ABA681825685BFCF79733311D0750F53807
        Validity
            Not Before: Feb  2 12:46:52 2026 GMT
            Not After : Feb  1 12:51:52 2027 GMT
        Subject: CN=B6DFA8708666867E7D500DCEA37A082EBE4E9A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:5d:45:af:e2:fe:60:3e:5b:31:11:0b:48:
                    08:38:5f:27:00:07:f8:c0:22:f3:3a:c7:c4:1b:f7:
                    c5:a2:e8:d9:33:09:2e:be:a4:0a:d0:39:36:f5:54:
                    83:90:f7:05:a7:a0:64:dd:f5:ce:2d:03:b0:a0:7d:
                    a7:af:4c:f9:fc:c5:a9:fb:20:28:98:0e:3c:91:11:
                    c2:37:d1:7e:31:df:c0:ff:4b:c4:b1:06:da:ca:1a:
                    49:cc:93:1f:e1:3b:15:1c:b0:11:73:c6:3e:ec:9f:
                    11:a4:61:85:d0:13:f0:71:30:61:ab:91:f2:26:a0:
                    0b:73:83:0d:50:a7:62:78:0d:b6:b1:e6:b1:9d:d2:
                    32:3b:fd:77:20:51:6b:f3:31:63:74:c3:2b:38:fa:
                    c7:e9:f3:7e:b5:13:bc:21:92:46:0a:91:b0:e2:76:
                    2d:5b:d3:0a:13:6b:93:1a:25:02:0b:25:b3:59:3a:
                    0b:f0:86:7b:b1:37:9e:5f:29:6c:f8:15:c8:7d:fb:
                    3a:19:44:8e:ed:94:ab:13:d1:e1:69:c1:e0:f2:d8:
                    d3:1c:04:c3:83:13:e5:40:e3:5e:82:ac:94:5a:18:
                    84:b2:6d:a8:69:7a:39:63:9c:96:f9:0f:c5:07:5f:
                    40:65:e6:ba:21:3f:40:d1:3f:3c:e8:75:cc:ae:db:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:A8:70:86:66:86:7E:7D:50:0D:CE:A3:7A:08:2E:BE:4E:9A:5C
            X509v3 Authority Key Identifier:
                keyid:2B:94:1A:BA:68:18:25:68:5B:FC:F7:97:33:31:1D:07:50:F5:38:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/34352e3233312e3131322e302f32322d3234203d3e20323637313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:7b:d3:99:ea:b3:bb:e6:3b:8d:3e:34:2e:75:dc:3d:f2:
         60:c6:c4:4c:e9:12:0b:84:5e:53:82:8c:29:1f:8a:ad:3d:09:
         05:0d:0f:76:0a:1f:59:c5:d2:ae:cf:3a:e1:03:1a:67:87:93:
         c3:ba:86:94:08:ad:e9:0d:a5:8a:b1:1b:4e:44:cc:15:37:90:
         d8:02:a2:5c:89:ab:0a:9e:49:94:ee:8d:63:b8:1c:70:24:a9:
         04:f3:2d:8c:c7:c3:4e:36:7f:6d:d7:2a:34:ef:09:05:87:27:
         c3:70:01:40:b5:77:93:46:c6:a1:8c:dd:0e:00:e2:0d:82:a8:
         39:b8:cd:50:09:b0:29:f9:91:76:2d:b6:fc:56:6b:85:d1:9a:
         e4:2c:29:19:73:1d:67:e3:bb:c7:4b:56:32:18:35:b2:12:b1:
         cb:b8:9f:9f:fa:bb:24:bc:8f:b5:c4:6a:c7:5e:2c:89:ab:64:
         db:ae:6b:df:37:0c:99:82:af:54:9c:68:9a:31:54:02:09:57:
         fc:66:01:10:c7:67:35:07:81:cd:f7:13:5b:d4:d8:4f:f7:c4:
         23:8c:a4:ff:b7:2e:a4:9d:95:37:88:fd:61:39:dd:bd:ae:ee:
         c3:a4:12:88:fa:07:34:53:59:68:dd:cb:88:d8:17:bb:20:34:
         3c:03:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:55:41 2026 by rpki-client