Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa
File:                     34352e3232362e33372e302f32342d3234203d3e20323636393735.roa (raw, json)
Hash identifier:          AjXmNgOTIlXM4Y2hJsSajS/THz0D4xNjEtxuyQ/sqgY=
Subject key identifier:   36:94:19:3B:30:34:E0:F1:58:3D:BA:7B:E9:47:E9:83:ED:1B:B2:D8
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       11EDE74A654AB021C11C8E99D56E3A949382547C
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa
Signing time:             Tue 06 Jan 2026 14:25:55 +0000
ROA not before:           Tue 06 Jan 2026 14:20:55 +0000
ROA not after:            Tue 05 Jan 2027 14:25:55 +0000
asID:                     266975
IP address blocks:        45.226.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:e7:4a:65:4a:b0:21:c1:1c:8e:99:d5:6e:3a:94:93:82:54:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Jan  6 14:20:55 2026 GMT
            Not After : Jan  5 14:25:55 2027 GMT
        Subject: CN=3694193B3034E0F1583DBA7BE947E983ED1BB2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:95:b8:a7:57:00:e5:16:8b:f3:54:49:df:
                    98:27:63:6e:e4:b4:1d:9d:cd:b5:63:14:9a:ab:6d:
                    a4:9a:3e:61:42:06:47:e7:aa:f6:a4:48:00:b2:12:
                    ae:ae:42:33:00:f8:3e:37:4f:7b:eb:ba:90:7c:92:
                    db:52:3d:86:c2:0e:5f:2e:6f:53:85:74:4f:7e:6f:
                    89:6b:7c:28:80:c1:e7:d9:1d:c8:65:04:73:3c:b3:
                    2a:e4:02:fc:b8:6d:83:a2:46:76:ec:0a:5f:ce:d3:
                    25:46:43:0b:a1:e7:22:0d:3e:6c:03:64:87:97:8c:
                    45:e1:00:04:53:91:ac:f6:3c:8f:10:85:20:54:11:
                    d3:05:87:05:97:06:26:cc:c5:64:d4:46:73:ae:08:
                    fc:8f:c1:05:9f:c3:32:2c:25:b7:51:f1:5f:ea:1a:
                    f4:9c:50:7f:cd:0b:fb:80:f8:82:33:fd:c1:17:9b:
                    17:f0:e1:23:db:52:1e:26:eb:b7:af:c3:35:46:85:
                    99:63:e0:e3:b4:80:3b:cf:57:11:9d:2c:53:24:f2:
                    d7:0b:ff:14:b4:9d:ef:2d:fa:9e:30:7d:cb:7a:52:
                    f3:70:71:22:b4:b7:f5:7c:d1:ae:23:9a:55:0b:0a:
                    9c:62:f8:0e:0c:04:5c:69:6a:35:8e:ae:37:23:2d:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:19:3B:30:34:E0:F1:58:3D:BA:7B:E9:47:E9:83:ED:1B:B2:D8
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33372e302f32342d3234203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:19:f6:05:70:c7:64:c0:d2:43:91:a1:36:47:a8:fc:43:
         68:45:32:c0:ac:15:44:86:9e:27:fb:c8:4b:35:78:67:a4:1a:
         7c:f6:6e:ff:1f:5c:ad:b9:af:ba:cd:d7:e2:49:6e:9b:13:11:
         f5:87:f0:02:45:e8:59:68:af:b1:1d:c8:1a:39:ec:da:af:c5:
         2a:0d:f3:bf:0b:f2:b7:8d:01:17:a9:5d:65:da:5a:6c:ac:c1:
         44:c9:cd:a2:bc:35:9a:8b:b7:e1:7f:2a:3a:38:06:6a:53:99:
         37:13:d1:08:5f:91:74:66:fb:80:92:ac:45:56:5a:7e:31:22:
         a6:1d:a6:48:69:2f:d2:12:e3:28:21:ab:17:c4:49:af:2f:f1:
         9c:84:50:73:12:a4:32:e6:9c:e7:c6:18:01:aa:98:d6:59:ed:
         e5:79:2b:a6:b8:1d:ad:b0:a5:b5:fa:84:ac:8a:44:33:8d:0a:
         0a:c4:69:e1:bd:62:b2:34:64:13:cc:c8:c3:ee:1b:a6:76:3c:
         f9:a8:9a:e6:0a:1d:09:20:21:ff:94:79:84:5f:f1:1e:ce:81:
         cc:7a:2b:07:a0:b9:f7:2f:04:80:c1:33:e1:d9:2f:cb:93:2e:
         87:54:b8:71:12:13:73:fe:b0:0c:84:d9:3b:c4:35:e3:b4:3e:
         92:ed:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:18:53 2026 by rpki-client