Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
File:                     34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa (raw, json)
Hash identifier:          PMHf9kJQX98xgZIf1YTJ1LaXsdFc1RbVMQI7jMWXOvE=
Subject key identifier:   04:9C:61:D3:AC:75:4F:B4:BF:54:0C:66:9D:DC:48:42:97:AC:24:E9
Certificate issuer:       /CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
Certificate serial:       2105C9E3CE90C44CFD7FD7DF3D9A10D188D33CDF
Authority key identifier: C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
Signing time:             Wed 04 Feb 2026 13:05:58 +0000
ROA not before:           Wed 04 Feb 2026 13:00:58 +0000
ROA not after:            Wed 03 Feb 2027 13:05:58 +0000
asID:                     267060
IP address blocks:        45.228.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl
                          rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:c9:e3:ce:90:c4:4c:fd:7f:d7:df:3d:9a:10:d1:88:d3:3c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C94B9BCE03DBBFDA788F89F5BF57027169B9C679
        Validity
            Not Before: Feb  4 13:00:58 2026 GMT
            Not After : Feb  3 13:05:58 2027 GMT
        Subject: CN=049C61D3AC754FB4BF540C669DDC484297AC24E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:a5:5b:83:7e:64:09:5d:22:ae:9c:59:60:
                    b4:a5:71:07:be:cf:b2:cb:2d:a6:be:39:40:7d:0c:
                    45:ed:7e:16:c7:35:02:f1:0d:e5:19:0f:e2:be:49:
                    87:c3:24:63:10:07:e4:1e:40:94:f0:7e:b6:c3:57:
                    41:97:6f:7c:95:52:bc:01:10:12:d0:2d:08:28:84:
                    e8:1b:b9:9f:54:8f:21:a5:7c:b7:01:69:86:44:e3:
                    f5:4d:74:20:20:33:88:8e:f5:c6:02:be:f8:12:d8:
                    0b:f3:01:68:11:3a:4c:db:8b:d5:67:8d:2b:4d:9b:
                    50:73:cb:7c:ae:4d:f9:3f:8e:37:cb:16:33:74:22:
                    fd:90:55:68:0d:60:d4:93:0f:12:38:97:a5:4d:f8:
                    49:f9:8b:b7:0e:1e:be:c1:48:ef:1b:55:3d:db:6a:
                    b5:0e:9e:a4:a9:0f:61:20:9a:ca:bc:b5:2c:cc:6f:
                    a0:a7:41:c4:7c:54:bb:33:67:60:7d:f9:22:6e:8b:
                    69:f5:0d:d9:00:81:d2:4d:f0:5e:70:0e:ee:c0:ec:
                    5d:ee:f1:60:d0:05:07:1d:e6:e0:25:0a:d9:a0:15:
                    ac:ad:aa:8e:1e:00:fa:83:d7:f2:cb:8e:06:f9:09:
                    8f:85:46:94:e8:36:94:b7:a3:ee:0a:04:cb:b2:20:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9C:61:D3:AC:75:4F:B4:BF:54:0C:66:9D:DC:48:42:97:AC:24:E9
            X509v3 Authority Key Identifier:
                keyid:C9:4B:9B:CE:03:DB:BF:DA:78:8F:89:F5:BF:57:02:71:69:B9:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C94B9BCE03DBBFDA788F89F5BF57027169B9C679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:3d:9f:1b:f8:51:f9:2c:a7:8f:76:0f:dd:68:3d:7f:93:25:
         6f:76:e2:a4:b2:53:42:fa:9d:83:f8:76:6c:f8:7e:05:b1:92:
         68:b6:e4:ca:d5:a6:54:2a:58:0d:73:69:e6:c1:37:62:c6:f6:
         ba:07:e7:75:3a:10:6b:95:a4:80:f8:43:e6:fd:45:7a:90:a8:
         08:11:c8:b7:91:4d:fa:00:ab:3c:5a:41:67:c3:c5:16:59:a3:
         4e:f5:4f:74:27:db:8e:30:2f:9a:f8:7f:de:30:a4:99:2a:68:
         a6:4d:08:df:61:e4:6a:04:da:49:c1:3f:5c:c7:8f:4e:4a:bf:
         cc:91:7f:40:6d:24:12:9f:18:ab:cf:d0:d1:22:10:61:77:50:
         e5:09:9b:2f:12:71:7d:d4:4a:bf:1c:fb:92:2c:7d:9f:dc:e1:
         4d:34:7f:9f:93:67:c4:cb:6f:4e:87:7f:63:9f:78:d7:77:04:
         61:d9:32:b2:9f:8b:2d:ff:bc:e0:45:0b:c8:eb:14:52:7c:c1:
         79:85:50:1e:2f:1e:ff:7c:eb:3c:50:4f:0a:7a:07:67:6b:22:
         35:c9:af:8c:f0:c6:00:1b:d3:b2:6e:0e:43:6d:d4:69:3a:98:
         9e:6f:08:82:21:5f:f8:6b:39:1f:1d:2e:e5:d2:34:a6:bf:7e:
         19:5a:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:13 2026 by rpki-client