Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
File:                     34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa (raw, json)
Hash identifier:          XzrXGSTywhHL3vw/+fl+5TrTrJ8qWhxybXlosmjNtZ8=
Subject key identifier:   59:A8:77:B8:AA:8E:F7:66:48:EA:17:32:20:0E:1D:85:24:AC:D3:2F
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       1D575E9170D2BCA5574E3A4CF11085DFBC7A5BCB
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
Signing time:             Wed 18 Feb 2026 19:25:54 +0000
ROA not before:           Wed 18 Feb 2026 19:20:54 +0000
ROA not after:            Wed 17 Feb 2027 19:25:54 +0000
asID:                     269183
IP address blocks:        45.181.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:57:5e:91:70:d2:bc:a5:57:4e:3a:4c:f1:10:85:df:bc:7a:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Feb 18 19:20:54 2026 GMT
            Not After : Feb 17 19:25:54 2027 GMT
        Subject: CN=59A877B8AA8EF76648EA1732200E1D8524ACD32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:7c:03:62:be:21:cd:3e:81:86:55:24:c9:
                    22:a1:75:c3:e6:66:90:5a:11:00:d0:d3:8d:7a:b9:
                    f0:f0:62:dd:e8:4b:f8:38:88:26:fb:69:67:58:30:
                    a7:dd:69:a3:a4:9a:48:0e:a1:c8:7a:35:9e:cc:55:
                    89:7d:2b:0f:d3:fc:ed:8c:4a:6a:8b:03:45:3d:10:
                    18:45:8a:87:08:8a:52:5d:c7:79:9c:42:1f:78:f8:
                    da:1a:8e:2a:78:30:8f:09:d0:f4:fd:25:13:74:65:
                    e1:83:17:c7:48:1d:e6:f2:3f:77:64:40:19:af:79:
                    0c:77:13:bf:09:32:da:cd:13:83:77:83:90:c4:1d:
                    e2:47:b0:8d:e3:5f:fa:54:d9:6c:1d:c4:56:0b:88:
                    99:9a:4c:be:61:2a:ab:1e:c6:76:e4:88:c8:23:1e:
                    4a:ff:95:dc:57:c2:62:26:2d:2a:0c:55:f9:1c:05:
                    5f:53:4c:88:99:c0:e2:71:b5:ec:2e:e5:e1:de:32:
                    3d:74:66:4a:8c:32:4f:8c:fb:7f:b4:a1:0a:a7:21:
                    58:24:b7:8e:3c:3a:87:19:e0:87:38:37:a6:8c:d6:
                    b1:8c:a3:b7:3a:bf:d1:81:b7:cb:c9:fc:2d:62:5f:
                    d6:d7:57:b8:eb:91:5a:de:ae:1d:dd:97:a2:0b:fe:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:77:B8:AA:8E:F7:66:48:EA:17:32:20:0E:1D:85:24:AC:D3:2F
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:ba:bd:a1:5e:92:8e:15:cd:c0:0b:17:3c:d5:1b:bc:1a:5b:
         a5:67:73:91:d5:85:d7:10:70:11:05:b0:d4:7e:eb:d3:5e:2a:
         16:69:64:63:37:c3:05:e7:a9:a4:c9:84:f4:21:0a:5d:09:a0:
         10:66:a7:11:74:93:0e:35:a9:48:60:35:90:80:3e:65:9d:1b:
         90:86:91:36:64:5e:51:9a:97:7b:2a:3e:a1:3f:bc:68:22:1e:
         8e:3a:77:5c:43:2b:a9:64:a8:ad:0a:b4:53:66:96:55:70:e3:
         f4:73:54:60:4e:03:98:01:3a:fc:85:db:74:be:67:e7:75:20:
         84:c4:10:3b:25:3f:50:d2:f2:ce:28:f1:6b:da:42:52:9e:bc:
         d6:e5:e8:70:93:e2:41:39:18:3b:eb:aa:d9:10:d7:d5:3a:a7:
         39:56:45:86:4b:15:8d:d3:4e:00:7b:5a:7d:e7:28:ba:35:4b:
         3f:11:88:49:b9:1b:82:91:ae:5f:6f:0c:b3:08:49:1d:51:27:
         b8:47:af:b8:4b:45:ae:a5:a9:0a:17:c4:da:90:a6:bd:8f:7d:
         61:91:76:b4:a7:3f:48:4d:23:b4:ac:b5:53:a3:e1:89:07:79:
         81:35:af:ad:46:f7:ce:03:0a:52:21:d3:1c:6c:7f:00:bc:62:
         6d:59:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:18 2026 by rpki-client