Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa
File:                     34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa (raw, json)
Hash identifier:          T6Ou93QBe2WApoPA4UPCTyAVNIHeptD9SnUrP3hku5o=
Subject key identifier:   88:3B:14:4D:33:86:0C:9C:20:EC:76:A1:D8:BE:00:B5:7E:0E:99:15
Certificate issuer:       /CN=E79E00056FE8B9715C15A246069792D98D58B2E9
Certificate serial:       6ACF76CEE8A72AE5E20FA5B665F15D207AE495CD
Authority key identifier: E7:9E:00:05:6F:E8:B9:71:5C:15:A2:46:06:97:92:D9:8D:58:B2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E79E00056FE8B9715C15A246069792D98D58B2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa
Signing time:             Sat 21 Feb 2026 14:00:48 +0000
ROA not before:           Sat 21 Feb 2026 13:55:48 +0000
ROA not after:            Sat 20 Feb 2027 14:00:48 +0000
asID:                     268815
IP address blocks:        45.173.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/E79E00056FE8B9715C15A246069792D98D58B2E9.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/E79E00056FE8B9715C15A246069792D98D58B2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E79E00056FE8B9715C15A246069792D98D58B2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cf:76:ce:e8:a7:2a:e5:e2:0f:a5:b6:65:f1:5d:20:7a:e4:95:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E79E00056FE8B9715C15A246069792D98D58B2E9
        Validity
            Not Before: Feb 21 13:55:48 2026 GMT
            Not After : Feb 20 14:00:48 2027 GMT
        Subject: CN=883B144D33860C9C20EC76A1D8BE00B57E0E9915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:ad:c4:f7:ce:4e:55:e6:f0:00:c4:da:9c:
                    7e:a1:aa:1f:e1:91:2a:d6:fb:27:7c:86:a4:99:c3:
                    62:80:7f:68:1a:bb:21:75:65:2a:c8:27:60:74:dd:
                    1f:43:a4:f4:e9:8b:28:28:7e:4c:86:d2:b9:81:c4:
                    7d:3a:93:de:8a:e7:9c:6f:07:aa:b4:63:09:fc:12:
                    f8:5a:76:dd:86:b1:e2:8d:08:3b:5d:09:20:f6:1f:
                    8e:e4:64:93:cd:ce:24:fa:b7:59:e4:9b:ca:19:eb:
                    32:3a:ad:30:51:e9:81:4f:47:34:19:9f:f7:6f:89:
                    17:dd:95:fb:88:cd:9d:42:98:e2:70:35:b1:0a:37:
                    cf:f7:85:d8:31:34:f2:03:f4:1c:f8:ec:65:9a:90:
                    84:28:26:b7:05:ee:21:d7:4e:77:2a:c7:95:15:84:
                    ab:ca:a8:cd:45:4e:a8:b6:3f:2f:94:14:3e:5f:4f:
                    a9:61:ab:ae:e1:e0:3b:11:c6:32:2e:7a:40:bb:f0:
                    55:d2:7a:aa:b2:b2:5d:60:cb:b2:cb:71:df:e9:6d:
                    f9:82:05:2a:2c:80:90:cf:a2:e7:3c:5a:8a:00:b4:
                    89:5d:4e:bf:e9:0d:60:f4:69:0b:37:1c:13:76:2d:
                    6f:e8:79:b3:e8:b7:3a:e3:23:fa:2d:96:d7:c5:51:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:14:4D:33:86:0C:9C:20:EC:76:A1:D8:BE:00:B5:7E:0E:99:15
            X509v3 Authority Key Identifier:
                keyid:E7:9E:00:05:6F:E8:B9:71:5C:15:A2:46:06:97:92:D9:8D:58:B2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/E79E00056FE8B9715C15A246069792D98D58B2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E79E00056FE8B9715C15A246069792D98D58B2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:20:88:f2:b8:70:d7:f9:36:fd:86:39:d9:91:a1:c3:9f:
         53:55:89:85:73:bd:f8:0c:b8:dd:fb:a2:a1:27:a1:bd:03:6a:
         cd:e8:d9:81:9d:57:fd:5f:f9:58:e3:27:a9:e7:8b:17:67:76:
         af:85:0e:01:8c:68:22:0e:9a:8b:3e:2f:19:de:4d:d4:ff:ec:
         dd:52:d5:87:f9:d5:5a:a4:01:d9:6d:f8:44:3d:5d:74:fb:7b:
         52:1c:bd:4c:20:e0:fd:f0:34:06:cb:33:6b:e2:d1:73:c5:ff:
         78:2f:7a:05:de:06:e4:7b:67:01:ab:15:f3:4e:d2:e4:98:75:
         76:ee:73:f2:ea:c4:d0:9f:1c:fe:ae:77:b9:8e:d1:fc:79:d6:
         c1:dd:c9:42:c9:68:e8:26:c4:5d:db:fe:cf:d1:da:d8:f5:1b:
         d5:a9:04:2c:af:da:0d:d2:69:4d:c4:3b:ec:91:76:e0:dc:08:
         23:c9:9d:4a:f7:02:c5:b2:79:06:63:2e:94:47:cf:2f:3c:64:
         97:bf:b3:66:14:94:7d:a4:c3:81:de:aa:50:07:d1:72:fd:3f:
         29:e0:58:c2:b1:ae:f9:f8:f6:66:ca:fb:96:1d:08:b8:a1:fe:
         c2:c3:c9:75:b8:6f:1f:34:a9:97:b1:aa:d7:75:51:f7:10:07:
         03:e5:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:32 2026 by rpki-client