Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32342d3234203d3e20323637303630.roa
File:                     34352e3232382e3131322e302f32342d3234203d3e20323637303630.roa (raw, json)
Hash identifier:          uCYkZlVHYLRs3i9DSJR/J/gHSu4h7/xWNy4TKGflNS4=
Subject key identifier:   37:4F:35:82:58:29:CB:C8:96:AC:50:B1:53:D5:4B:55:06:FF:A5:95
Certificate issuer:       /CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
Certificate serial:       5E2AFCE3D1E7A34955E634D66A58F59287A51B24
Authority key identifier: C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32342d3234203d3e20323637303630.roa
Signing time:             Wed 04 Feb 2026 13:05:58 +0000
ROA not before:           Wed 04 Feb 2026 13:00:58 +0000
ROA not after:            Wed 03 Feb 2027 13:05:58 +0000
asID:                     267060
IP address blocks:        45.228.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl
                          rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:fc:e3:d1:e7:a3:49:55:e6:34:d6:6a:58:f5:92:87:a5:1b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
        Validity
            Not Before: Feb  4 13:00:58 2026 GMT
            Not After : Feb  3 13:05:58 2027 GMT
        Subject: CN=374F35825829CBC896AC50B153D54B5506FFA595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:c8:2d:d6:66:1b:cc:36:23:4f:97:82:1a:
                    0f:ef:70:f5:f1:a2:49:c7:ee:5e:d7:28:45:29:74:
                    78:ae:80:00:a9:ef:8a:6c:22:65:40:54:f7:cc:fa:
                    33:15:38:f8:c5:2e:b3:18:ac:0a:70:a1:e6:bb:79:
                    4f:ec:a6:56:f4:2a:a6:1b:fb:4c:49:a1:2e:aa:9c:
                    9d:96:e9:12:12:a6:7a:c2:bb:b2:20:3b:c9:5a:c0:
                    36:46:97:c8:bf:52:aa:84:6e:e1:e6:93:b2:2a:f9:
                    59:3d:02:21:72:d1:44:bd:a6:66:84:55:11:0c:f8:
                    aa:1e:b2:ae:2e:da:bc:6a:10:25:33:59:e8:bd:3c:
                    53:ec:6f:23:e4:da:35:58:23:75:cd:fd:9b:86:c2:
                    79:11:b0:f3:fd:c5:ad:ed:c8:96:9c:f3:9e:02:08:
                    30:d8:6d:d3:a2:46:fd:b5:79:67:cf:0e:f1:d0:ba:
                    ef:53:b2:9d:c9:68:8b:7f:c0:da:0e:bf:67:c8:7e:
                    88:e2:21:f6:49:31:7a:e9:28:e4:8b:f9:bd:f4:ab:
                    04:7f:c4:21:e4:7b:12:fa:db:fa:76:b9:5d:7b:94:
                    1d:0d:f8:1d:a5:21:1a:de:33:29:85:37:bd:10:5f:
                    60:8d:ab:7e:99:0e:ce:26:a4:26:b7:bb:70:24:a9:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4F:35:82:58:29:CB:C8:96:AC:50:B1:53:D5:4B:55:06:FF:A5:95
            X509v3 Authority Key Identifier:
                keyid:C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32342d3234203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:d0:e2:50:f0:90:6d:0c:dc:40:2f:9c:40:5b:8a:94:b0:
         2c:d4:d0:ef:bf:b8:8b:e0:ad:54:61:02:2f:f6:92:f6:a4:5c:
         1e:73:17:e8:da:1e:d0:dc:e1:af:79:92:bf:c0:33:de:8b:b3:
         f1:c8:bb:06:14:6b:d3:bc:ce:6b:82:7c:c4:1e:5c:e5:59:98:
         f2:f0:11:9c:bb:5a:10:d5:8e:54:41:ea:e2:71:91:cd:ac:8e:
         6d:63:65:a8:e0:07:9b:ea:a7:73:15:5a:71:a7:be:1c:c9:06:
         88:06:89:e8:af:1b:51:b4:dd:56:17:db:bb:14:d1:e5:45:86:
         16:31:b0:38:9b:c0:e6:f5:a4:41:98:5a:44:89:9b:14:d0:ac:
         ec:c0:05:c4:70:99:38:40:4c:d5:e9:51:c7:dc:7e:40:c7:13:
         11:68:4d:81:43:68:d3:8a:39:cc:62:89:8f:cf:2b:78:23:e9:
         92:e2:36:65:9a:5c:58:04:61:64:fd:fc:53:93:55:c3:c5:4d:
         76:45:2d:a5:10:fa:08:53:75:e4:82:00:9f:99:c2:55:04:85:
         9c:e7:10:20:c1:0f:40:f3:a7:d1:d0:37:6e:5c:4b:10:20:a2:
         cf:05:b5:f0:f5:ad:a0:36:33:32:bc:06:c3:d4:2e:48:39:d7:
         9f:87:f2:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXir849Hno0lV5jTWalj1koelGyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk0QjlCQ0UwM0RCQkZEQTc4OEY4OUY1QkY1NzAyNzE2
OUI5QzY3OTAeFw0yNjAyMDQxMzAwNThaFw0yNzAyMDMxMzA1NThaMDMxMTAvBgNV
BAMTKDM3NEYzNTgyNTgyOUNCQzg5NkFDNTBCMTUzRDU0QjU1MDZGRkE1OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq38gt1mYbzDYjT5eCGg/vcPXx
oknH7l7XKEUpdHiugACp74psImVAVPfM+jMVOPjFLrMYrApwoea7eU/splb0KqYb
+0xJoS6qnJ2W6RISpnrCu7IgO8lawDZGl8i/UqqEbuHmk7Iq+Vk9AiFy0US9pmaE
VREM+Koesq4u2rxqECUzWei9PFPsbyPk2jVYI3XN/ZuGwnkRsPP9xa3tyJac854C
CDDYbdOiRv21eWfPDvHQuu9Tsp3JaIt/wNoOv2fIfojiIfZJMXrpKOSL+b30qwR/
xCHkexL62/p2uV17lB0N+B2lIRreMymFN70QX2CNq36ZDs4mpCa3u3AkqQtXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN081glgpy8iWrFCxU9VLVQb/pZUwHwYDVR0j
BBgwFoAUyUubzgPbv9p4j4n1v1cCcWm5xnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHJLSGdacmZWOGpKRXIxMVh3TlhyTW1MdHc3R2hHTFVOMUQ0dVVGaGNI
ak0vMC9DOTRCOUJDRTAzREJCRkRBNzg4Rjg5RjVCRjU3MDI3MTY5QjlDNjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NEI5QkNFMDNEQkJGREE3
ODhGODlGNUJGNTcwMjcxNjlCOUM2NzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRyS0hnWnJmVjhqSkVyMTFYd05Yck1tTHR3N0doR0xVTjFENHVVRmhjSGpNLzAv
MzQzNTJlMzIzMjM4MmUzMTMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5HAwDQYJKoZIhvcNAQELBQADggEBAA7x0OJQ
8JBtDNxAL5xAW4qUsCzU0O+/uIvgrVRhAi/2kvakXB5zF+jaHtDc4a95kr/AM96L
s/HIuwYUa9O8zmuCfMQeXOVZmPLwEZy7WhDVjlRB6uJxkc2sjm1jZajgB5vqp3MV
WnGnvhzJBogGieivG1G03VYX27sU0eVFhhYxsDibwOb1pEGYWkSJmxTQrOzABcRw
mThATNXpUcfcfkDHExFoTYFDaNOKOcxiiY/PK3gj6ZLiNmWaXFgEYWT9/FOTVcPF
TXZFLaUQ+ghTdeSCAJ+ZwlUEhZznECDBD0Dzp9HQN25cSxAgos8FtfD1raA2MzK8
BsPULkg515+H8qE=
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:47:42 2026 by rpki-client