Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138372e302f32342d3234203d3e20323633353339.roa
File:                     34352e342e3138372e302f32342d3234203d3e20323633353339.roa (raw, json)
Hash identifier:          zQBEW1Str//QeRQ4VPGNrhJLLbl+qYvm7Bqo7YOkaqY=
Subject key identifier:   DC:C7:F9:18:1E:CA:EE:D4:72:5E:CD:DD:CB:18:D6:7B:5B:1A:63:A0
Certificate issuer:       /CN=00B59D491D3312BCC3DF02B935D2C77A7D315A42
Certificate serial:       61B36E0EE02DD0D7851E4F865F10CE7512E132CB
Authority key identifier: 00:B5:9D:49:1D:33:12:BC:C3:DF:02:B9:35:D2:C7:7A:7D:31:5A:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138372e302f32342d3234203d3e20323633353339.roa
Signing time:             Wed 11 Feb 2026 09:00:14 +0000
ROA not before:           Wed 11 Feb 2026 08:55:14 +0000
ROA not after:            Wed 10 Feb 2027 09:00:14 +0000
asID:                     263539
IP address blocks:        45.4.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.crl
                          rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b3:6e:0e:e0:2d:d0:d7:85:1e:4f:86:5f:10:ce:75:12:e1:32:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00B59D491D3312BCC3DF02B935D2C77A7D315A42
        Validity
            Not Before: Feb 11 08:55:14 2026 GMT
            Not After : Feb 10 09:00:14 2027 GMT
        Subject: CN=DCC7F9181ECAEED4725ECDDDCB18D67B5B1A63A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:9d:0f:4b:44:15:2b:2d:99:d9:c0:44:be:
                    05:34:44:2b:24:7c:ad:e7:d8:60:70:bb:22:89:11:
                    ba:06:9f:15:6c:83:ee:43:c2:74:95:f5:72:59:a0:
                    16:f0:a3:9a:3f:4b:68:83:60:1c:86:ea:d9:6a:9c:
                    97:1b:fe:25:0f:df:dc:fb:01:00:fe:7a:0f:bc:37:
                    f8:17:ca:c0:6e:85:eb:27:f2:0b:c3:6c:c2:26:6a:
                    2c:9b:6f:cb:ef:22:c8:9a:e1:e6:0c:56:b0:8f:9f:
                    10:bb:68:45:27:8d:8c:6c:2f:3f:3e:2c:49:dd:44:
                    e7:aa:c5:3e:82:d8:4d:eb:0a:77:dd:e5:d2:c8:7a:
                    d0:7d:65:f7:03:73:77:b6:d5:e5:70:7a:d7:21:17:
                    94:5b:88:d3:69:b4:98:3c:eb:df:3a:c2:5a:ef:3d:
                    32:54:c5:cf:37:2a:18:30:9b:06:fd:bd:a3:91:6e:
                    40:71:6c:4b:63:f1:e6:ab:c2:50:1e:26:e5:01:44:
                    19:85:63:68:f1:e6:b6:1a:a5:9b:e8:e5:a0:53:05:
                    c2:fd:d1:de:ad:a8:6a:4a:a9:7c:ae:c5:8f:e2:40:
                    92:37:f4:27:9b:c7:45:c5:c4:c7:30:88:2b:7f:f5:
                    33:3b:c8:c0:30:d1:c7:bc:64:32:93:67:1a:e8:b7:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:F9:18:1E:CA:EE:D4:72:5E:CD:DD:CB:18:D6:7B:5B:1A:63:A0
            X509v3 Authority Key Identifier:
                keyid:00:B5:9D:49:1D:33:12:BC:C3:DF:02:B9:35:D2:C7:7A:7D:31:5A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138372e302f32342d3234203d3e20323633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:24:25:6f:26:49:3a:bb:3f:f1:62:e1:13:b6:f1:70:96:
         03:9e:2c:af:7e:db:f8:b8:14:94:e5:45:a9:83:32:e9:c8:5c:
         8d:f0:00:3e:dc:f4:1e:19:fa:26:7b:87:c8:75:e2:00:ab:1f:
         2f:79:75:9b:50:1b:90:24:86:5f:d1:90:6e:d0:0e:c3:24:ed:
         91:33:97:12:a6:47:c1:b1:92:bb:34:0a:3a:d0:07:69:ef:11:
         35:ca:8e:1e:eb:fc:b5:8e:28:e8:72:00:7c:6c:13:84:6f:ec:
         7d:8b:9f:35:ac:a1:ac:6a:b0:6b:bf:e4:83:1c:a9:03:93:1a:
         bd:57:33:61:6e:1e:0b:22:92:2f:70:c0:f2:f3:b1:72:cb:de:
         52:77:08:cb:1d:4f:a0:c3:48:ec:e7:4f:4a:f7:e5:ef:62:15:
         9d:c2:74:c2:1f:d7:1f:1f:12:ff:f4:00:6a:78:ee:93:32:ea:
         36:4c:41:83:df:fa:7b:dd:e4:c5:e7:8b:7a:4d:e0:6b:b9:61:
         72:18:63:13:a4:59:03:81:31:2d:43:71:f8:45:75:2b:af:1b:
         44:de:52:b4:e5:92:54:b7:aa:e8:7f:b3:58:16:0b:11:4e:9b:
         e7:ec:8a:54:7c:f7:e4:6a:0c:65:c4:14:4e:da:c3:83:15:20:
         36:fa:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:34 2026 by rpki-client