Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa
File:                     34352e3232342e302e302f32332d3234203d3e20323733333132.roa (raw, json)
Hash identifier:          nqMFpZ4hLh8V9u5wtRYYDuDTJ1P42X5Mp76us38ccgA=
Subject key identifier:   C3:A1:1C:C0:15:71:0A:92:34:53:6C:D9:84:5C:0D:F3:DC:90:D3:52
Certificate issuer:       /CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
Certificate serial:       4A51DEC33806B8E542EF05262D825D64E6E4BED8
Authority key identifier: 19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa
Signing time:             Wed 11 Feb 2026 13:26:46 +0000
ROA not before:           Wed 11 Feb 2026 13:21:46 +0000
ROA not after:            Wed 10 Feb 2027 13:26:46 +0000
asID:                     273312
IP address blocks:        45.224.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl
                          rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:de:c3:38:06:b8:e5:42:ef:05:26:2d:82:5d:64:e6:e4:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
        Validity
            Not Before: Feb 11 13:21:46 2026 GMT
            Not After : Feb 10 13:26:46 2027 GMT
        Subject: CN=C3A11CC015710A9234536CD9845C0DF3DC90D352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:f2:86:8a:9c:90:d4:9a:22:7a:27:4c:c6:
                    d9:32:cc:63:d9:21:4e:ea:b4:dd:64:f0:e7:2d:32:
                    32:31:75:59:14:44:82:f0:b0:7a:38:69:7e:72:6d:
                    f0:1d:50:3b:c9:db:89:84:1e:b6:d3:1c:2f:e3:8a:
                    c4:67:7a:88:78:17:56:b9:b8:9c:e3:9f:83:86:87:
                    12:7b:cb:32:49:c4:26:cc:c1:91:8d:b3:8e:79:af:
                    62:6c:ca:a9:f8:b0:40:d9:11:69:a4:ab:68:bf:8f:
                    97:33:9b:63:30:47:fc:0b:f1:d3:18:42:e0:12:30:
                    09:e5:dc:e5:99:5b:f2:50:92:30:e3:89:b6:72:0c:
                    3b:42:81:20:51:bd:aa:9c:5a:fb:d6:aa:86:11:70:
                    f5:18:c2:1a:7f:cd:1e:0e:72:ba:34:c6:1c:b3:c9:
                    c1:1c:92:15:af:36:a6:42:89:8f:45:7a:bd:32:0f:
                    a7:c6:11:d4:19:4c:64:06:88:be:c5:db:3e:cf:74:
                    ed:9d:d6:64:8c:b9:86:fe:67:e1:57:c6:8c:2e:fd:
                    eb:cb:b4:02:9e:11:9e:9a:63:9d:7e:6d:79:aa:7c:
                    2e:96:da:c8:8b:83:13:75:7d:c9:c3:05:9b:b2:95:
                    94:66:c3:68:ee:b7:e6:a7:a3:dc:01:cb:80:b7:1a:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:1C:C0:15:71:0A:92:34:53:6C:D9:84:5C:0D:F3:DC:90:D3:52
            X509v3 Authority Key Identifier:
                keyid:19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:38:28:ed:9b:39:83:ba:96:5c:16:95:22:e9:d2:b1:d2:
         3d:1d:af:90:8d:92:cc:20:9f:a1:16:56:99:fa:a5:ca:cb:f6:
         39:45:77:22:db:ff:a2:d8:4b:26:ce:ad:73:10:7e:db:fc:c8:
         fc:a3:78:e6:02:00:39:b4:8b:b5:95:33:2f:db:8e:79:56:28:
         d7:61:30:3a:00:7c:30:18:29:78:6f:c3:11:62:20:17:d3:24:
         c6:d1:5e:57:d2:3d:fc:96:80:fd:ec:0b:ac:bd:a7:f3:04:eb:
         ac:35:bc:fc:81:68:41:24:e1:02:6f:74:57:0a:40:ee:cd:f5:
         2f:1e:f7:7a:da:51:98:8d:0a:c7:46:36:64:11:45:6c:af:5e:
         59:33:52:01:a3:95:18:fd:d1:cc:a8:cd:d1:84:71:0b:c7:87:
         e7:0c:9e:a5:eb:bb:7c:b2:f7:f3:e1:8a:98:1b:ce:53:0d:45:
         b9:11:d5:7f:32:c6:4e:30:64:88:ff:d7:5f:da:e4:28:bf:08:
         b5:8c:83:da:8e:59:64:43:1f:c4:66:a0:c8:2e:72:6b:48:c9:
         1b:31:47:05:b2:21:b1:74:05:e8:99:5a:30:90:2b:ca:07:3f:
         5b:db:75:99:83:16:d2:5a:b1:0e:df:3d:4e:19:31:3f:1f:c5:
         45:b2:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:01:39 2026 by rpki-client