Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa
File:                     34352e3232362e33392e302f32342d3234203d3e20323636393735.roa (raw, json)
Hash identifier:          AH1dmQeGfvbTWWhgwdLCQxcPmtGZ6JlB1bqXgi8uhxs=
Subject key identifier:   81:1B:0E:55:3C:34:93:E2:2A:7C:66:8F:E5:4A:05:8F:D4:EE:5D:52
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       38CCA8A7238142089E3B3BCB12A66FF0561D471C
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa
Signing time:             Tue 06 Jan 2026 14:25:55 +0000
ROA not before:           Tue 06 Jan 2026 14:20:55 +0000
ROA not after:            Tue 05 Jan 2027 14:25:55 +0000
asID:                     266975
IP address blocks:        45.226.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cc:a8:a7:23:81:42:08:9e:3b:3b:cb:12:a6:6f:f0:56:1d:47:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Jan  6 14:20:55 2026 GMT
            Not After : Jan  5 14:25:55 2027 GMT
        Subject: CN=811B0E553C3493E22A7C668FE54A058FD4EE5D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:ca:28:f9:3f:38:5e:03:95:33:58:cc:29:
                    6c:1d:82:e2:7e:6e:c3:34:6c:f4:c4:8b:45:01:a6:
                    55:22:2f:55:ad:51:41:49:26:91:46:a6:be:02:89:
                    e5:06:16:c3:28:49:fa:cd:71:dc:57:2d:d1:26:fe:
                    49:51:0f:5a:d0:7d:ea:de:e8:f1:85:e8:17:0c:21:
                    45:f9:c0:62:ff:46:fb:f9:a3:5d:64:54:df:9b:ba:
                    bc:3e:d2:d1:34:06:a5:43:31:25:7d:8e:18:da:69:
                    06:2c:89:c3:32:63:d6:77:7a:93:d8:38:87:aa:a5:
                    b1:4b:4b:ab:cc:0e:80:7d:df:c9:8a:6c:34:08:a3:
                    37:33:ed:78:2a:fd:ca:43:c9:bf:b0:3c:7b:eb:57:
                    fd:d9:a7:6d:8d:ea:fc:7f:57:4d:c1:e1:e7:2e:4c:
                    57:ae:46:aa:83:86:24:05:19:fe:3c:b6:7e:54:6b:
                    5b:b1:74:6d:75:9e:f5:de:59:fb:14:e5:59:fa:34:
                    de:ae:86:88:4a:d4:e5:12:f3:ce:8a:b0:22:19:6d:
                    81:27:f2:c0:b3:42:30:dd:5b:bc:79:0b:c8:78:97:
                    2f:11:1f:8d:b9:bd:2a:f0:4d:a4:68:d2:b4:55:79:
                    93:cc:23:55:b9:3c:fc:78:cc:b7:99:e8:f0:34:27:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1B:0E:55:3C:34:93:E2:2A:7C:66:8F:E5:4A:05:8F:D4:EE:5D:52
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:01:17:d0:0f:1b:d7:8f:af:30:42:2e:7f:49:bf:12:1f:8b:
         7d:f8:65:b4:c7:41:11:53:66:08:9c:c1:22:ec:52:cf:41:74:
         25:cb:40:8b:cc:32:31:b2:70:b9:60:90:9b:b6:38:7a:66:44:
         2e:29:f3:55:30:b2:d9:fe:ed:14:a6:25:ef:32:67:c0:9c:a6:
         1c:91:4e:4b:1c:0c:bd:43:90:7b:bf:f5:7f:8b:de:42:76:36:
         1f:af:f2:ce:fb:00:3a:4c:2e:0a:93:9e:59:81:37:38:17:05:
         f8:fd:c5:c5:4c:a6:17:e3:88:71:5f:6f:f3:bd:7f:b7:d1:4d:
         4c:4c:96:1a:59:0a:ce:21:21:b3:0b:fb:83:97:6f:be:8b:11:
         f9:e7:00:2c:9c:bd:5d:23:53:1e:4b:5f:5b:3e:ff:e2:a0:59:
         53:ce:97:c1:9a:e3:4b:c9:7a:98:5a:cd:c9:a2:40:2a:a2:ce:
         a3:64:7f:8b:97:f7:50:c4:8c:fe:a8:76:21:ce:be:1b:09:cd:
         68:2b:ca:63:84:17:23:cf:22:bb:a5:4f:13:46:73:78:46:1b:
         18:e2:76:de:e5:1b:93:fe:e6:2e:23:b3:68:d5:b1:b6:10:59:
         54:3a:92:d7:6d:57:12:c7:b7:0b:2f:8b:a1:32:1d:c8:f2:f9:
         44:e8:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:04:50 2026 by rpki-client