Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3232203d3e20323637303630.roa
File:                     34352e3232382e3131322e302f32322d3232203d3e20323637303630.roa (raw, json)
Hash identifier:          MECH5yO7MNV+s8xe2NyjiuDgbDkYsdhb/TqQKrk5/FI=
Subject key identifier:   5C:27:54:A5:6E:50:0F:B2:BB:B7:FF:53:18:D8:B4:14:C8:0A:79:14
Certificate issuer:       /CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
Certificate serial:       62FAE7BABE6F00615BDDAC9C26D48CB2590D26F8
Authority key identifier: C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3232203d3e20323637303630.roa
Signing time:             Wed 04 Feb 2026 13:05:58 +0000
ROA not before:           Wed 04 Feb 2026 13:00:58 +0000
ROA not after:            Wed 03 Feb 2027 13:05:58 +0000
asID:                     267060
IP address blocks:        45.228.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl
                          rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fa:e7:ba:be:6f:00:61:5b:dd:ac:9c:26:d4:8c:b2:59:0d:26:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
        Validity
            Not Before: Feb  4 13:00:58 2026 GMT
            Not After : Feb  3 13:05:58 2027 GMT
        Subject: CN=5C2754A56E500FB2BBB7FF5318D8B414C80A7914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:0d:f4:73:6d:b1:45:a9:0d:93:81:15:60:
                    4a:b4:eb:93:da:94:76:d8:4a:fe:9d:14:0b:18:55:
                    d7:e0:5a:a9:2d:46:49:85:4a:8f:b7:7e:5b:18:2d:
                    88:72:83:2c:92:6c:52:17:57:54:fe:4c:40:c0:60:
                    24:18:48:98:0d:56:cd:d5:cc:c8:c4:d5:49:30:21:
                    70:d7:c4:aa:77:9c:f1:f4:42:0d:ed:0e:22:92:9b:
                    04:bf:fb:d5:59:93:cf:06:e1:f8:94:ba:2f:8d:cf:
                    c0:53:33:f0:98:12:26:0e:ff:45:29:cf:1c:b3:07:
                    55:03:3f:14:e8:fa:91:3b:58:16:e9:ff:f3:3a:03:
                    06:eb:21:aa:60:20:99:f8:3f:3c:53:41:e7:f2:2a:
                    a2:4e:ad:e9:68:a7:aa:13:88:86:c0:79:e3:52:67:
                    e8:5e:ad:de:bd:6e:08:27:8e:45:63:67:4b:2e:96:
                    48:d3:b7:e3:7b:ad:56:fb:60:58:17:de:b6:f6:74:
                    66:19:be:01:6f:d4:b5:40:4c:5f:d5:c8:34:9d:8c:
                    61:72:a1:7a:ee:38:2f:b1:e4:0e:6e:7c:10:08:1e:
                    0e:b8:0b:1e:ee:b9:e3:fd:9b:d8:65:44:66:e4:28:
                    fc:65:26:a2:bc:5c:51:ba:91:37:58:28:bf:ba:06:
                    4d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:54:A5:6E:50:0F:B2:BB:B7:FF:53:18:D8:B4:14:C8:0A:79:14
            X509v3 Authority Key Identifier:
                keyid:C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3232203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:16:f0:d3:00:28:2a:ec:2c:fc:f9:a1:23:5a:7d:d0:3e:
         fd:ba:b7:e9:6b:d3:98:0e:93:d1:55:f8:10:cb:ae:2b:65:79:
         40:f3:3e:fe:da:1a:fe:9d:6d:9b:fc:05:fb:0f:12:35:e8:4f:
         0f:41:7e:0e:de:83:d1:68:e6:89:82:4e:4d:2a:07:c3:60:11:
         e8:06:ed:ec:fe:92:1d:db:ea:7f:81:7f:3e:66:14:3d:68:1b:
         23:51:f1:e2:22:eb:8c:2d:01:74:a7:db:c3:e7:ab:3b:b9:6b:
         d4:b5:29:13:ec:87:39:37:d7:2a:70:46:88:b4:c2:2e:45:47:
         86:b7:4c:68:7e:47:17:07:d0:2b:25:29:59:14:d8:e4:5d:d5:
         1f:bd:18:87:19:0f:7f:a7:3c:77:1c:a7:a3:eb:37:80:f7:fd:
         a5:dc:b5:84:49:d6:26:b7:f2:28:99:0c:3b:98:45:64:5e:11:
         58:07:74:d2:5d:94:44:88:e1:bc:66:f4:5b:b5:f2:70:77:04:
         f7:df:7f:c3:05:93:c8:52:48:dc:be:47:01:26:98:3a:6a:ae:
         73:c6:e2:11:fd:ff:a6:2d:68:02:0b:6a:86:07:d0:06:98:7f:
         49:87:29:8a:4f:b3:9e:1f:a3:2b:24:3b:db:25:c0:94:9b:ab:
         31:7e:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:19 2026 by rpki-client