Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa
File:                     34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa (raw, json)
Hash identifier:          ii9pFt+RkMAk4PevpKuPOvSk/sQlA7yUiw/whIqho8A=
Subject key identifier:   D3:E9:B7:02:E0:66:AA:53:A0:56:52:48:E5:D0:BF:90:4E:08:97:E3
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       6EFE9D718F7424B7812F0687DEC6CA7AD2E522B3
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa
Signing time:             Fri 30 Jan 2026 15:21:31 +0000
ROA not before:           Fri 30 Jan 2026 15:16:31 +0000
ROA not after:            Fri 29 Jan 2027 15:21:31 +0000
asID:                     268959
IP address blocks:        45.176.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fe:9d:71:8f:74:24:b7:81:2f:06:87:de:c6:ca:7a:d2:e5:22:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Jan 30 15:16:31 2026 GMT
            Not After : Jan 29 15:21:31 2027 GMT
        Subject: CN=D3E9B702E066AA53A0565248E5D0BF904E0897E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:63:c0:f3:fd:cd:07:5e:d5:db:c6:ba:80:
                    25:ef:8a:ba:33:30:ae:ce:3c:8e:de:1e:17:6d:53:
                    2a:ab:2c:e8:98:55:97:e7:04:0a:2e:03:45:8c:82:
                    4b:d6:51:e8:a8:94:e5:35:c6:8d:19:b9:0b:b3:45:
                    85:ae:2e:11:35:e7:4b:77:5f:79:c7:8e:7e:84:67:
                    4f:38:ec:26:55:d9:4c:6c:7a:6d:ea:06:14:ac:d2:
                    8d:5e:19:ae:f4:b0:2a:3f:60:95:ea:c5:7b:ff:87:
                    82:2a:f5:11:af:ab:4c:e2:a6:9c:a1:e2:47:b5:d3:
                    db:0e:21:73:7c:48:88:63:21:f9:3f:35:7f:ef:36:
                    55:a0:3f:51:b9:7c:03:7e:f8:04:07:ce:10:82:0c:
                    68:0b:d4:3d:f0:5c:d0:b5:33:2b:95:dd:a7:8e:3a:
                    a8:0e:0b:f8:7c:83:19:88:79:f9:9b:35:88:0a:81:
                    eb:ed:08:c9:fa:dd:00:92:76:96:0b:e1:9d:27:6f:
                    d9:39:5b:bf:e0:e9:80:2d:96:5d:15:cb:00:ea:27:
                    55:2e:51:12:ec:70:41:61:00:f3:e2:c6:06:dc:40:
                    f6:1d:b6:20:8d:d1:b3:66:c3:fe:b7:3f:41:17:a4:
                    a4:75:0c:ad:a4:c2:47:9a:37:7e:08:1d:04:65:4e:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:B7:02:E0:66:AA:53:A0:56:52:48:E5:D0:BF:90:4E:08:97:E3
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:39:b7:a6:77:b9:1b:8f:91:29:4d:73:06:5c:4e:b0:54:13:
         bf:9f:69:2d:8f:4f:6d:35:44:3b:0b:22:c6:4d:de:5f:41:6e:
         0d:67:95:d5:ea:47:89:83:46:e2:59:3a:48:7a:6c:5a:ea:03:
         08:5d:2f:7d:a9:48:15:3b:d6:94:87:36:6a:a3:0c:ce:a1:aa:
         b4:dc:75:2e:05:55:df:8f:9a:e0:b2:79:36:6a:29:58:2f:a8:
         35:a5:f8:8b:ca:0d:3d:b7:b2:f6:91:f0:3f:6d:00:e3:00:2d:
         95:9b:86:c9:de:7e:f1:31:d6:c0:ee:ae:c9:75:9e:21:e2:7b:
         83:6f:d4:67:79:51:0a:d4:f3:08:4d:3f:00:be:52:ef:5f:9d:
         95:ea:e0:63:01:28:74:0b:a2:25:77:ae:bc:39:88:a1:1d:29:
         99:47:4f:b3:72:51:55:b9:46:da:fe:7d:3b:00:a0:39:7b:86:
         22:b8:3a:6c:a7:cb:b1:6e:e5:d4:c0:3b:a2:03:95:63:1a:a9:
         6d:56:f2:90:72:95:ab:4b:4d:2b:90:24:4f:9d:ac:dc:5b:71:
         69:d0:95:e6:fb:78:bb:4e:41:cc:63:14:c2:d4:f7:ba:de:4f:
         93:4f:82:fd:19:7a:ff:7d:e1:8a:fa:4c:f9:5f:ba:cc:5e:1d:
         8b:01:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:12:35 2026 by rpki-client