Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa
File:                     34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa (raw, json)
Hash identifier:          6qw7xC2rjIb3q9tAN2jDP7aPlpfTMwTvnZzsSxZ3ePM=
Subject key identifier:   41:9C:E1:A9:DE:D1:AB:D7:F0:65:29:34:57:75:7A:EC:D3:3E:A9:97
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       3A69E20B95C07132385A0A9DCD3E08716B6B2E02
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa
Signing time:             Fri 30 Jan 2026 15:21:34 +0000
ROA not before:           Fri 30 Jan 2026 15:16:34 +0000
ROA not after:            Fri 29 Jan 2027 15:21:34 +0000
asID:                     268959
IP address blocks:        45.176.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:69:e2:0b:95:c0:71:32:38:5a:0a:9d:cd:3e:08:71:6b:6b:2e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Jan 30 15:16:34 2026 GMT
            Not After : Jan 29 15:21:34 2027 GMT
        Subject: CN=419CE1A9DED1ABD7F065293457757AECD33EA997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:f1:f0:b5:98:ee:4d:e5:c3:70:1e:24:12:
                    b1:2f:e2:ad:8d:fe:1a:b3:ef:b7:63:25:dc:65:85:
                    f6:e0:90:ca:20:63:82:43:ec:b4:85:37:16:0f:03:
                    1f:88:11:4e:34:91:5f:10:26:29:aa:dc:59:14:68:
                    48:5c:14:c1:96:6f:d1:37:e4:b3:68:3c:87:b1:aa:
                    18:e2:02:21:48:60:10:9a:df:b4:2f:1d:b5:8f:ed:
                    f7:2a:9b:6c:ea:44:cf:af:a0:a3:cf:7a:83:13:98:
                    0d:c4:35:2d:61:0e:8c:19:c5:b9:f8:0a:04:f4:e1:
                    e3:e7:60:7f:55:9b:99:05:ad:5d:be:ba:35:60:12:
                    f1:97:d3:2f:4f:54:af:ee:5f:4d:f6:c6:0c:21:6e:
                    ed:6a:85:34:0c:40:80:b9:19:40:2b:ef:ee:c8:b1:
                    f6:fc:bd:ad:87:e6:49:ab:ca:fe:1e:90:74:52:f0:
                    6c:5f:af:44:ad:f9:3d:9c:e5:5e:50:fc:98:8a:28:
                    7b:d7:ed:dc:12:62:cc:50:1b:1a:cc:47:cb:63:a1:
                    48:ba:64:55:ad:cc:df:4a:67:77:c9:c0:45:60:34:
                    ef:40:5e:5e:55:a1:e8:ce:49:6c:71:98:e4:9c:c8:
                    b1:f4:84:38:d5:49:4e:cf:01:32:32:96:f3:73:25:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:E1:A9:DE:D1:AB:D7:F0:65:29:34:57:75:7A:EC:D3:3E:A9:97
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:dc:3c:18:89:d7:62:41:49:6b:d5:f5:a9:73:ca:d0:a8:
         cf:c5:95:08:a5:ab:4c:41:91:88:ec:6d:fd:48:3a:89:1d:58:
         1f:c3:a9:e1:76:18:18:80:68:a6:42:66:48:cd:04:b7:9d:55:
         1d:d6:76:48:83:5c:a1:83:ef:66:c3:b4:4e:f8:d1:72:fc:eb:
         50:15:56:7f:6b:c8:21:b4:8c:45:a0:33:cb:c8:54:08:e7:4b:
         5d:22:7f:4b:fc:3b:47:df:36:82:9c:ce:3d:9c:12:52:16:a4:
         3e:a3:99:a8:7c:e3:ed:97:b8:65:97:8f:83:77:82:a9:a5:6a:
         62:1f:aa:a6:0c:75:fb:4c:28:ad:5b:cb:88:cc:60:34:8a:3c:
         39:9e:51:d3:d5:ba:52:31:86:d0:c5:2b:90:b1:b8:45:09:67:
         61:95:dd:01:6f:4e:f5:d3:53:da:eb:6b:9e:5a:f6:b7:61:d4:
         e7:2c:5c:d7:4d:bc:3a:33:d2:be:e1:c1:05:4e:bf:0b:2b:21:
         f8:46:7b:9b:27:30:48:9f:fd:e4:b7:7e:22:72:1d:2d:94:a5:
         1c:c4:ff:bd:7b:21:3e:04:bb:e5:9b:ba:d2:76:ea:a1:89:41:
         ed:6b:80:74:5c:f5:f5:fb:7f:e3:9f:a4:a3:38:6d:b5:09:36:
         88:52:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:12:35 2026 by rpki-client