Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/34352e342e33392e302f32342d3234203d3e20323636303435.roa
File:                     34352e342e33392e302f32342d3234203d3e20323636303435.roa (raw, json)
Hash identifier:          6E5p9dGivooplB9LAIh6NyDxZyrzUQsDrb/dVDR4F1k=
Subject key identifier:   CD:6E:87:F5:D5:BB:43:C9:E4:03:50:3E:D6:66:FA:FA:49:8F:AA:48
Certificate issuer:       /CN=F17F43B744350E31BD18C9AD8D92295024810F8B
Certificate serial:       7F66E93B1314493F1460420BB09153D49882CB99
Authority key identifier: F1:7F:43:B7:44:35:0E:31:BD:18:C9:AD:8D:92:29:50:24:81:0F:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17F43B744350E31BD18C9AD8D92295024810F8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/34352e342e33392e302f32342d3234203d3e20323636303435.roa
Signing time:             Mon 02 Feb 2026 17:52:41 +0000
ROA not before:           Mon 02 Feb 2026 17:47:41 +0000
ROA not after:            Mon 01 Feb 2027 17:52:41 +0000
asID:                     266045
IP address blocks:        45.4.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/F17F43B744350E31BD18C9AD8D92295024810F8B.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/F17F43B744350E31BD18C9AD8D92295024810F8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17F43B744350E31BD18C9AD8D92295024810F8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:66:e9:3b:13:14:49:3f:14:60:42:0b:b0:91:53:d4:98:82:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F17F43B744350E31BD18C9AD8D92295024810F8B
        Validity
            Not Before: Feb  2 17:47:41 2026 GMT
            Not After : Feb  1 17:52:41 2027 GMT
        Subject: CN=CD6E87F5D5BB43C9E403503ED666FAFA498FAA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:5a:d3:36:3c:a6:88:c8:a1:21:36:cb:c8:
                    d8:36:48:b1:22:e7:91:fe:f4:71:6b:18:14:cb:2a:
                    eb:68:1f:d2:ce:dc:12:5a:f4:c1:a3:ed:e0:ca:b1:
                    ba:b5:5e:c2:79:fc:5f:b8:22:96:11:5c:15:92:09:
                    99:17:33:b5:60:59:84:0c:cc:d9:32:1b:e7:26:de:
                    7e:77:96:26:a3:ba:0f:df:53:75:e7:7c:a1:e4:62:
                    f0:66:0b:a2:8f:53:ab:ad:80:2d:7e:13:f6:bc:cc:
                    6b:24:11:1a:68:27:df:ef:86:bf:89:1d:31:9f:9c:
                    65:7e:86:63:ff:ac:80:25:1e:6d:ad:59:36:9e:b9:
                    e6:3b:13:d5:a5:f6:4c:bb:ba:07:80:fd:9e:7e:92:
                    5a:30:27:04:81:64:ff:95:f8:7b:43:44:9f:a6:bd:
                    a1:4f:97:a0:98:9c:a7:66:54:56:a4:ac:9d:c8:82:
                    c5:d2:9f:d1:09:fe:af:04:c6:a2:a0:aa:7c:b8:54:
                    8e:27:14:36:54:2f:fc:72:3d:da:6a:88:cf:38:4c:
                    a3:2f:86:ce:a2:13:0e:81:84:52:05:96:d3:08:93:
                    62:e1:28:52:eb:0a:67:2a:85:45:4b:38:e7:f7:f0:
                    e1:98:76:dc:de:4b:1b:7b:76:e2:91:b4:55:b8:91:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:87:F5:D5:BB:43:C9:E4:03:50:3E:D6:66:FA:FA:49:8F:AA:48
            X509v3 Authority Key Identifier:
                keyid:F1:7F:43:B7:44:35:0E:31:BD:18:C9:AD:8D:92:29:50:24:81:0F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/F17F43B744350E31BD18C9AD8D92295024810F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17F43B744350E31BD18C9AD8D92295024810F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/34352e342e33392e302f32342d3234203d3e20323636303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:a5:7c:05:af:dc:ae:a0:aa:c0:06:d5:9d:ac:08:8b:c8:
         d5:3b:0d:cd:65:71:e3:6e:c7:9b:c2:89:aa:5b:26:e9:cb:f7:
         61:5a:f5:85:a2:c8:91:63:7f:54:72:df:a1:05:81:cb:43:73:
         93:9d:bb:47:4d:ab:25:95:49:dc:89:8a:58:68:6e:8c:60:54:
         f5:2b:d3:b8:70:d3:ff:cf:47:bf:2c:2f:38:a1:c4:5d:7e:63:
         b4:45:a1:f7:9b:26:8d:65:3e:9a:ec:7f:bf:31:f9:b6:3d:d9:
         6b:4f:4e:5b:00:c9:dd:e0:3a:08:d3:5f:2c:09:f7:f5:f0:c4:
         fd:d3:52:7d:aa:40:d8:e8:b9:50:9a:42:ae:13:86:d7:78:de:
         88:ad:0b:c4:05:5d:62:da:2e:f4:83:4e:81:29:01:d2:cb:82:
         ca:67:c5:70:02:ba:a7:f8:1a:9f:c5:60:a1:5d:63:23:1d:64:
         11:ae:dd:88:2b:bc:44:7b:77:84:8f:2a:b7:d0:95:c4:65:0e:
         76:f9:cf:f9:03:d7:65:07:a4:fa:03:6a:99:0a:75:08:05:32:
         bb:24:2e:b7:fc:68:6e:7b:71:24:50:db:ad:46:92:02:c6:2b:
         77:65:f7:b3:c6:49:75:72:6f:f5:21:0f:39:6a:13:9d:73:2e:
         cf:eb:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:13 2026 by rpki-client