Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
File:                     34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa (raw, json)
Hash identifier:          uxduPUesBR+pKyBrHfHko1zQ4gbZUuhAIIOotiSA1Ic=
Subject key identifier:   44:7F:C2:82:BF:89:F4:22:31:52:0B:CF:34:0F:B9:AD:7C:1F:C6:0C
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       77CE8BE19C84DCA2962B1702086BC0D9F14B2542
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
Signing time:             Wed 18 Feb 2026 19:25:55 +0000
ROA not before:           Wed 18 Feb 2026 19:20:55 +0000
ROA not after:            Wed 17 Feb 2027 19:25:55 +0000
asID:                     269183
IP address blocks:        45.181.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:8b:e1:9c:84:dc:a2:96:2b:17:02:08:6b:c0:d9:f1:4b:25:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Feb 18 19:20:55 2026 GMT
            Not After : Feb 17 19:25:55 2027 GMT
        Subject: CN=447FC282BF89F42231520BCF340FB9AD7C1FC60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:c8:51:99:a3:38:97:5e:95:22:d0:8c:0a:
                    ca:db:6e:66:98:b5:24:a0:0e:64:54:b3:75:86:8f:
                    48:5a:dc:a6:f7:c0:e5:b0:94:8c:56:e6:ea:53:9b:
                    92:36:86:0d:40:a3:9a:16:1e:82:a6:f1:ed:ab:99:
                    1a:e2:2d:28:ef:5e:d0:8f:1b:91:da:df:9f:2d:8a:
                    21:ec:a0:65:49:41:01:68:36:18:8f:3b:ae:ac:30:
                    cd:9c:f2:bf:27:ac:c8:8b:42:47:26:89:80:73:60:
                    a8:cc:23:bd:3f:14:ae:b0:95:dc:4b:fc:bc:af:06:
                    e1:e6:ed:36:df:b0:63:5f:84:2b:5a:4e:f9:ca:c4:
                    f7:f2:87:f0:cf:27:2a:94:32:0c:9b:c6:87:e9:c6:
                    cc:a3:88:02:92:2b:bb:af:ac:f3:fb:df:5d:bb:02:
                    50:a8:81:0d:c0:97:f2:ea:d7:d6:a9:8e:d3:fb:fe:
                    20:5e:24:5d:14:e6:06:58:7c:0a:ed:aa:0b:f8:07:
                    a5:a2:81:96:3b:e9:71:5a:81:5c:78:b3:21:bc:f0:
                    f4:50:ba:c5:de:38:d2:63:3e:bd:42:e6:e5:58:e6:
                    cc:45:db:91:a6:00:46:f6:85:07:c9:44:8c:e2:ce:
                    91:17:e2:23:77:9f:64:cf:6f:ea:0e:ee:77:5e:46:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:C2:82:BF:89:F4:22:31:52:0B:CF:34:0F:B9:AD:7C:1F:C6:0C
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:4e:d5:9e:4d:bb:44:97:01:99:f6:5e:6d:22:f1:2b:6d:
         5e:e5:8a:eb:bb:05:9a:ad:7c:ad:92:67:1f:f4:23:ba:ae:f4:
         ba:46:41:c1:5f:99:45:56:c2:3c:d7:2e:a0:cf:2a:48:48:85:
         6a:9f:c7:b1:45:2f:3f:06:78:36:0b:c2:d8:36:51:16:91:d3:
         1b:40:fd:c5:32:8c:ff:18:15:8d:3d:db:82:ac:64:6c:9b:e1:
         36:e7:0e:f6:a8:25:b9:bb:91:55:f1:30:18:fc:8d:e5:13:1a:
         1f:df:74:57:28:b8:1a:6b:86:73:fa:1d:53:a7:3b:00:a5:af:
         cb:b6:a1:40:c0:c8:bb:e2:a9:08:53:db:f2:58:85:63:1e:57:
         97:9b:e4:e6:67:4c:96:35:4d:74:cc:b2:ee:a2:6c:63:1c:f5:
         2f:d5:bc:59:2d:8d:92:44:d4:69:2f:c1:57:84:bc:74:91:b8:
         82:37:54:1e:6a:58:c7:78:3a:5c:71:cc:1e:ca:b7:2f:28:40:
         5e:08:3d:a7:35:f9:df:0c:d7:e8:98:12:3a:3c:79:aa:23:71:
         59:c1:8a:04:18:1f:de:57:fc:be:5d:c6:5d:33:c7:ea:33:65:
         85:4d:ac:1e:05:4b:2b:c9:c3:c6:b3:05:eb:10:60:e1:30:90:
         3e:c6:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:49 2026 by rpki-client