Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa
File:                     34352e3233332e38322e302f32332d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          S1MtJwM+NKSFalBy1NURoQ+2/vzsiM4G+B00glJ8lrQ=
Subject key identifier:   9A:B3:0B:9E:CF:E5:C3:CB:C2:8F:BC:66:60:36:F3:9D:24:99:BA:1F
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       6BBA614664E19E544A35161173E5B0BE9C4A024C
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa
Signing time:             Thu 19 Feb 2026 20:30:56 +0000
ROA not before:           Thu 19 Feb 2026 20:25:56 +0000
ROA not after:            Thu 18 Feb 2027 20:30:56 +0000
asID:                     268192
IP address blocks:        45.233.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ba:61:46:64:e1:9e:54:4a:35:16:11:73:e5:b0:be:9c:4a:02:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Feb 19 20:25:56 2026 GMT
            Not After : Feb 18 20:30:56 2027 GMT
        Subject: CN=9AB30B9ECFE5C3CBC28FBC666036F39D2499BA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:c2:bf:94:8c:20:42:3f:69:a2:05:d7:43:
                    6e:1d:2a:68:cc:57:ab:96:1a:9e:8c:48:10:f8:0d:
                    8f:87:39:15:9f:57:b8:80:90:1c:22:da:4f:e5:bb:
                    52:94:54:3a:c4:ed:c8:97:fb:73:e6:fd:c8:56:51:
                    13:35:ab:25:6f:49:0c:36:6e:fd:35:b5:f5:cd:30:
                    e7:fb:70:a5:11:14:60:3a:fa:f1:61:85:b9:85:32:
                    7e:18:77:f1:ce:8c:76:7d:8b:cb:d8:16:79:4b:7c:
                    e1:07:5a:de:f8:6c:63:55:66:24:dc:94:da:8f:e6:
                    1b:cb:d9:a4:2f:ec:39:7f:27:9c:99:e6:e7:1e:5f:
                    f0:94:2c:4f:6e:a3:90:fb:98:db:7b:30:1b:3d:0f:
                    fc:a2:06:1b:3c:b1:ca:ee:d7:56:27:91:4a:d2:b6:
                    bb:e4:f6:15:5c:b4:c1:bd:e7:1a:e5:73:a2:ca:e9:
                    8b:a8:34:f2:dd:bb:77:ed:e0:fc:de:dc:f7:6a:42:
                    8f:ef:59:88:fe:c2:9b:42:9d:80:c8:5e:eb:88:b1:
                    8e:ae:8e:3e:0b:aa:9f:bc:60:c1:ba:0c:97:65:15:
                    33:34:dd:9b:12:da:d0:db:dc:8d:01:49:0f:b7:e3:
                    8d:49:42:07:5b:37:d2:62:f4:ca:ad:57:db:12:ae:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B3:0B:9E:CF:E5:C3:CB:C2:8F:BC:66:60:36:F3:9D:24:99:BA:1F
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:e9:22:d7:e7:5b:55:f6:00:0e:97:96:f4:fe:b2:eb:44:
         09:35:1f:68:7b:00:66:66:03:d5:ed:08:10:64:a7:7f:fb:6c:
         6f:fd:ee:80:62:1b:c7:dc:a8:11:d1:f0:1b:30:68:2b:5b:56:
         79:7d:07:4d:f3:86:12:38:39:09:56:3f:89:53:f2:ff:66:a7:
         7d:96:57:19:51:22:cb:d7:3d:f5:5e:23:39:3a:4b:50:22:95:
         77:8f:0b:48:d7:c7:88:bc:23:ea:1c:61:76:6b:82:16:93:a9:
         4a:0d:2b:a3:e1:9a:bc:c4:9a:f2:16:d9:47:34:ff:4e:34:aa:
         24:c1:2c:90:22:d5:c9:f2:47:a7:1b:d3:13:2b:e5:5a:95:6e:
         78:cc:79:f8:fe:85:7a:3c:8f:47:b0:69:06:eb:e2:78:96:0f:
         3f:a4:4d:63:fe:e1:07:9e:0d:97:61:80:5d:3c:c2:fc:8a:26:
         36:94:e9:40:53:9f:7b:59:78:c7:23:82:6d:cf:14:16:c9:98:
         f3:c3:81:4d:fc:a2:24:10:f6:9f:e6:0e:6d:3d:57:c1:ae:00:
         37:7c:07:b5:c5:14:a1:8e:59:2d:ae:0c:6c:1d:21:d9:7a:4b:
         c8:75:29:33:b5:35:51:86:e7:2c:ac:8a:8a:55:cd:e5:47:12:
         d0:1d:54:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa7phRmThnlRKNRYRc+WwvpxKAkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1NUQzRURGQUIzRTI1OTBGNzY2RjBENENGNUQ4QjMx
QzcxMzgzNjAeFw0yNjAyMTkyMDI1NTZaFw0yNzAyMTgyMDMwNTZaMDMxMTAvBgNV
BAMTKDlBQjMwQjlFQ0ZFNUMzQ0JDMjhGQkM2NjYwMzZGMzlEMjQ5OUJBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzS8K/lIwgQj9pogXXQ24dKmjM
V6uWGp6MSBD4DY+HORWfV7iAkBwi2k/lu1KUVDrE7ciX+3Pm/chWURM1qyVvSQw2
bv01tfXNMOf7cKURFGA6+vFhhbmFMn4Yd/HOjHZ9i8vYFnlLfOEHWt74bGNVZiTc
lNqP5hvL2aQv7Dl/J5yZ5uceX/CULE9uo5D7mNt7MBs9D/yiBhs8scru11YnkUrS
trvk9hVctMG95xrlc6LK6YuoNPLdu3ft4Pze3PdqQo/vWYj+wptCnYDIXuuIsY6u
jj4Lqp+8YMG6DJdlFTM03ZsS2tDb3I0BSQ+3441JQgdbN9Ji9MqtV9sSri8XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmrMLns/lw8vCj7xmYDbznSSZuh8wHwYDVR0j
BBgwFoAUqVXT7fqz4lkPdm8NTPXYsxxxODYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMC9BOTU1RDNFREZBQjNFMjU5MEY3NjZGMEQ0Q0Y1RDhCMzFDNzEzODM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NTVEM0VERkFCM0UyNTkw
Rjc2NkYwRDRDRjVEOEIzMUM3MTM4MzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzAv
MzQzNTJlMzIzMzMzMmUzODMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLelSMA0GCSqGSIb3DQEBCwUAA4IBAQBXOuki1+db
VfYADpeW9P6y60QJNR9oewBmZgPV7QgQZKd/+2xv/e6AYhvH3KgR0fAbMGgrW1Z5
fQdN84YSODkJVj+JU/L/Zqd9llcZUSLL1z31XiM5OktQIpV3jwtI18eIvCPqHGF2
a4IWk6lKDSuj4Zq8xJryFtlHNP9ONKokwSyQItXJ8kenG9MTK+ValW54zHn4/oV6
PI9HsGkG6+J4lg8/pE1j/uEHng2XYYBdPML8iiY2lOlAU597WXjHI4JtzxQWyZjz
w4FN/KIkEPaf5g5tPVfBrgA3fAe1xRShjlktrgxsHSHZekvIdSkztTVRhucsrIqK
Vc3lRxLQHVSa
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:21:40 2026 by rpki-client