Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
File:                     34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (raw, json)
Hash identifier:          ClzuawwEuZ03BIr1x6fG6f0/SzdmrfQLB7hcLZMsahI=
Subject key identifier:   16:E6:70:DF:54:08:23:B8:B3:98:40:67:68:0C:E3:7C:EF:B4:3D:FB
Certificate issuer:       /CN=30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8
Certificate serial:       34CFEE76CCEFB8B6E89E6C989D0FFBF60F2A27BC
Authority key identifier: 30:A2:A4:F6:F3:8B:7B:51:34:D3:C1:CD:60:F4:7C:60:E0:95:3F:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
Signing time:             Mon 09 Feb 2026 18:24:30 +0000
ROA not before:           Mon 09 Feb 2026 18:19:30 +0000
ROA not after:            Mon 08 Feb 2027 18:24:30 +0000
asID:                     268836
IP address blocks:        45.174.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cf:ee:76:cc:ef:b8:b6:e8:9e:6c:98:9d:0f:fb:f6:0f:2a:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8
        Validity
            Not Before: Feb  9 18:19:30 2026 GMT
            Not After : Feb  8 18:24:30 2027 GMT
        Subject: CN=16E670DF540823B8B3984067680CE37CEFB43DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:78:28:41:ee:64:7b:04:c1:3b:fc:a2:db:
                    72:a4:1a:c5:b2:66:92:33:76:17:9c:1c:0b:c6:8b:
                    d5:00:f7:0b:16:d2:2b:4d:97:16:c1:21:6c:e0:94:
                    bb:ff:6c:73:56:e3:94:22:03:f8:ac:6f:17:0d:cb:
                    67:05:ba:c6:8f:d0:a6:cb:25:d0:4d:70:0d:fd:4a:
                    ab:ec:86:2f:97:62:06:9e:ec:b0:36:2a:c7:c1:a6:
                    c8:b1:7d:9a:83:71:9e:db:fd:b4:51:56:6e:10:8b:
                    63:c2:aa:72:9f:a5:e7:90:bd:6d:dc:1b:4b:79:1d:
                    3a:ed:78:39:20:c2:b2:a8:58:06:a1:92:d5:98:43:
                    85:08:58:db:81:ef:c1:7d:15:7c:21:0f:70:4f:30:
                    4e:d4:f9:99:4b:e5:15:52:80:e6:cd:c0:38:f4:8d:
                    60:a8:b9:1c:9e:5a:01:93:69:67:3a:d7:19:1a:73:
                    9a:64:0e:7e:72:cf:ef:05:e1:4b:18:52:87:d8:de:
                    d2:42:fd:42:cf:c9:0f:ba:9d:c1:e1:8a:c8:de:4b:
                    3a:aa:0b:f5:a8:f4:89:63:88:dd:87:77:cf:d7:ef:
                    56:6a:eb:62:54:3f:30:26:07:ad:e0:4a:87:95:21:
                    fa:e1:67:f4:90:5a:97:de:d6:b7:8f:30:27:cd:d1:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:70:DF:54:08:23:B8:B3:98:40:67:68:0C:E3:7C:EF:B4:3D:FB
            X509v3 Authority Key Identifier:
                keyid:30:A2:A4:F6:F3:8B:7B:51:34:D3:C1:CD:60:F4:7C:60:E0:95:3F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:03:ff:7f:fd:b6:1d:9c:b2:fb:78:2c:ba:31:7f:6c:68:ab:
         be:e9:6d:8d:85:80:ac:d3:1e:58:17:6b:68:8d:e1:e9:bb:b5:
         a0:ca:6a:84:3f:af:fd:43:d7:60:6f:b9:dc:06:13:16:3e:4e:
         15:6e:da:d9:1b:35:ae:bf:e7:6e:29:dd:6b:bb:31:aa:d0:4b:
         2c:22:c0:9c:74:2a:0e:ba:6a:f1:53:95:1c:e5:0d:e8:0b:2e:
         89:45:52:f1:08:b9:ac:27:c0:2d:d0:13:e2:58:3d:48:16:e3:
         86:0b:66:8a:8f:67:67:6b:f6:4a:e6:28:a1:14:dc:5a:43:86:
         bb:44:03:b6:91:c1:22:10:46:08:8c:14:23:91:d8:05:22:bc:
         80:24:55:2e:bc:4f:4f:0c:22:eb:24:86:20:14:b5:6c:7a:c1:
         2d:08:b6:61:0a:0e:fb:0e:6f:c5:27:b4:9d:d4:24:6b:ca:19:
         3c:52:90:2a:7a:7c:b1:1d:08:77:35:0c:67:3a:e7:2f:7d:3f:
         71:3a:a3:1f:11:93:6f:fb:df:30:22:cd:5f:4f:00:0f:00:28:
         56:09:d2:fa:14:ba:b8:d7:5c:dd:bf:6d:75:03:63:0a:78:6b:
         00:fa:d2:7b:6a:32:bd:13:16:60:32:69:98:5d:55:a7:78:d4:
         87:1b:27:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNM/udszvuLbonmyYnQ/79g8qJ7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBBMkE0RjZGMzhCN0I1MTM0RDNDMUNENjBGNDdDNjBF
MDk1M0ZGODAeFw0yNjAyMDkxODE5MzBaFw0yNzAyMDgxODI0MzBaMDMxMTAvBgNV
BAMTKDE2RTY3MERGNTQwODIzQjhCMzk4NDA2NzY4MENFMzdDRUZCNDNERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sHgoQe5kewTBO/yi23KkGsWy
ZpIzdhecHAvGi9UA9wsW0itNlxbBIWzglLv/bHNW45QiA/isbxcNy2cFusaP0KbL
JdBNcA39Sqvshi+XYgae7LA2KsfBpsixfZqDcZ7b/bRRVm4Qi2PCqnKfpeeQvW3c
G0t5HTrteDkgwrKoWAahktWYQ4UIWNuB78F9FXwhD3BPME7U+ZlL5RVSgObNwDj0
jWCouRyeWgGTaWc61xkac5pkDn5yz+8F4UsYUofY3tJC/ULPyQ+6ncHhisjeSzqq
C/Wo9IljiN2Hd8/X71Zq62JUPzAmB63gSoeVIfrhZ/SQWpfe1rePMCfN0axFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFuZw31QII7izmEBnaAzjfO+0PfswHwYDVR0j
BBgwFoAUMKKk9vOLe1E008HNYPR8YOCVP/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlRzeExCd253dk5DWDNpR0dGTVBnU2ptd0Jad1hKbWV4Z3k2QVpRZVp3
Tm0vMC8zMEEyQTRGNkYzOEI3QjUxMzREM0MxQ0Q2MEY0N0M2MEUwOTUzRkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQTJBNEY2RjM4QjdCNTEz
NEQzQzFDRDYwRjQ3QzYwRTA5NTNGRjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZUc3hMQndud3ZOQ1gzaUdHRk1QZ1NqbXdCWndYSm1leGd5NkFaUWVad05tLzAv
MzQzNTJlMzEzNzM0MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa4cMA0GCSqGSIb3DQEBCwUAA4IBAQCBA/9//bYd
nLL7eCy6MX9saKu+6W2NhYCs0x5YF2tojeHpu7WgymqEP6/9Q9dgb7ncBhMWPk4V
btrZGzWuv+duKd1ruzGq0EssIsCcdCoOumrxU5Uc5Q3oCy6JRVLxCLmsJ8At0BPi
WD1IFuOGC2aKj2dna/ZK5iihFNxaQ4a7RAO2kcEiEEYIjBQjkdgFIryAJFUuvE9P
DCLrJIYgFLVsesEtCLZhCg77Dm/FJ7Sd1CRryhk8UpAqenyxHQh3NQxnOucvfT9x
OqMfEZNv+98wIs1fTwAPAChWCdL6FLq411zdv211A2MKeGsA+tJ7ajK9ExZgMmmY
XVWneNSHGyeb
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:54 2026 by rpki-client