Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/34352e3233352e36382e302f32322d3234203d3e20323638323039.roa
File:                     34352e3233352e36382e302f32322d3234203d3e20323638323039.roa (raw, json)
Hash identifier:          P1G4eKf1qewsUSv9m+sd6iLOxlzg2IVfKQXqpcYBZLI=
Subject key identifier:   24:E4:AA:62:D1:86:F9:D3:17:D8:CB:38:07:5D:E0:FB:7F:E7:43:7E
Certificate issuer:       /CN=7FC4BF525706E8A8CB471589F8406C5FAF7D238E
Certificate serial:       0DE7A6FFB32B1BA845515B2567A94E04B0AC0F3D
Authority key identifier: 7F:C4:BF:52:57:06:E8:A8:CB:47:15:89:F8:40:6C:5F:AF:7D:23:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/34352e3233352e36382e302f32322d3234203d3e20323638323039.roa
Signing time:             Tue 13 Jan 2026 18:41:25 +0000
ROA not before:           Tue 13 Jan 2026 18:36:25 +0000
ROA not after:            Tue 12 Jan 2027 18:41:25 +0000
asID:                     268209
IP address blocks:        45.235.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.crl
                          rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:a6:ff:b3:2b:1b:a8:45:51:5b:25:67:a9:4e:04:b0:ac:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC4BF525706E8A8CB471589F8406C5FAF7D238E
        Validity
            Not Before: Jan 13 18:36:25 2026 GMT
            Not After : Jan 12 18:41:25 2027 GMT
        Subject: CN=24E4AA62D186F9D317D8CB38075DE0FB7FE7437E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:97:15:43:a1:93:9d:0b:ad:d5:c5:0f:28:
                    72:73:68:ab:d0:e1:6d:42:77:c4:6b:a1:78:02:53:
                    55:df:54:7e:24:3d:71:ab:b2:3e:1a:80:d1:50:2e:
                    7a:60:dd:48:31:b6:2f:1f:4d:40:9e:fc:fa:fe:70:
                    ec:96:1e:64:d3:03:e8:07:dd:88:82:8c:82:9f:90:
                    3b:f5:3b:95:ff:33:aa:2e:c6:02:a4:03:a3:5b:c5:
                    9f:0a:f7:fd:a8:96:12:ea:75:d5:9b:e1:31:9d:61:
                    f1:dd:c2:99:c5:f9:ab:11:a3:72:f1:e4:f5:7f:11:
                    54:c4:3d:29:2f:32:05:01:4e:c4:19:1c:ff:07:98:
                    21:fe:9a:c5:a0:47:4f:86:ca:86:f6:b4:c0:ef:78:
                    ac:a5:fb:32:44:96:a7:48:a5:6d:c4:1f:4a:02:52:
                    6b:14:88:0f:bf:55:9b:66:f8:72:7f:34:9f:32:27:
                    1c:bc:93:b9:1f:71:58:bf:78:b2:85:51:e1:f9:cf:
                    84:55:d5:80:cc:07:a5:39:6f:07:d0:5c:8e:5a:90:
                    3a:de:96:e2:76:8a:88:39:97:a1:50:4f:7e:64:db:
                    e2:89:d5:8a:4d:e0:6e:d0:93:d3:4b:31:9d:30:7b:
                    55:af:87:c3:b5:63:c4:4b:5c:6a:ac:58:b5:42:27:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:AA:62:D1:86:F9:D3:17:D8:CB:38:07:5D:E0:FB:7F:E7:43:7E
            X509v3 Authority Key Identifier:
                keyid:7F:C4:BF:52:57:06:E8:A8:CB:47:15:89:F8:40:6C:5F:AF:7D:23:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FC4BF525706E8A8CB471589F8406C5FAF7D238E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/34352e3233352e36382e302f32322d3234203d3e20323638323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:90:d8:a0:02:2a:98:46:47:d4:65:9b:bb:b1:2f:d4:a4:
         dc:cf:3c:d8:75:79:03:84:fb:c2:1e:92:1f:63:35:82:bb:e9:
         91:50:62:b0:60:e5:6a:6e:7e:19:05:d7:72:eb:1d:a4:eb:20:
         e7:03:cb:43:20:88:95:8b:db:56:9f:e1:ec:be:a3:16:bf:bc:
         73:c1:7e:17:92:4b:2c:a4:ab:61:7e:fb:25:85:4a:31:28:89:
         ef:f7:f7:3d:28:d5:5d:f4:05:d3:a1:b3:4e:23:4c:25:4b:2b:
         64:63:6c:38:4f:54:fa:b3:4a:d9:35:52:ae:bd:1d:22:4d:fc:
         f0:1d:f2:80:89:dd:83:ab:f4:b1:48:3a:5a:4d:f6:9f:56:4c:
         66:71:2f:6d:72:72:f4:9f:60:04:64:f7:4b:2b:88:59:d5:1f:
         85:5b:00:1c:95:2b:b3:26:37:56:fd:a6:26:7e:6c:97:29:30:
         db:13:83:59:99:12:9f:54:32:73:0e:f3:66:55:91:a5:7b:18:
         25:68:1a:12:f4:2e:e9:bf:be:04:89:fe:51:8d:05:78:12:10:
         76:c9:76:de:79:fc:f6:3d:f4:38:de:55:01:74:b3:0e:d4:c7:
         86:e9:cf:10:80:0f:e7:4e:6a:58:19:d3:18:6e:56:ae:f1:ad:
         70:0a:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:14 2026 by rpki-client