Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36392e302f32342d3234203d3e20323639363738.roa
File:                     34352e3139312e36392e302f32342d3234203d3e20323639363738.roa (raw, json)
Hash identifier:          P0P6aXB+9ipP7yrexZCQzgTP2B/Zn9s7U8s+nawQeSs=
Subject key identifier:   52:7C:55:97:FD:8C:7F:7A:E7:DD:A3:B6:D2:3E:71:60:F2:AD:10:4E
Certificate issuer:       /CN=5C61273BB685DE7F44069647C170414CE4D28714
Certificate serial:       7F68442D6F446EC0211ADCFCE4B3559D02200035
Authority key identifier: 5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36392e302f32342d3234203d3e20323639363738.roa
Signing time:             Tue 03 Feb 2026 19:52:50 +0000
ROA not before:           Tue 03 Feb 2026 19:47:50 +0000
ROA not after:            Tue 02 Feb 2027 19:52:50 +0000
asID:                     269678
IP address blocks:        45.191.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl
                          rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:68:44:2d:6f:44:6e:c0:21:1a:dc:fc:e4:b3:55:9d:02:20:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C61273BB685DE7F44069647C170414CE4D28714
        Validity
            Not Before: Feb  3 19:47:50 2026 GMT
            Not After : Feb  2 19:52:50 2027 GMT
        Subject: CN=527C5597FD8C7F7AE7DDA3B6D23E7160F2AD104E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:df:f8:94:64:9d:c4:a3:a2:14:64:db:5b:
                    1a:f8:50:8d:ec:96:02:da:a4:cd:df:20:1b:e8:46:
                    ba:23:09:88:bb:cf:b9:86:bc:d9:de:41:20:c2:c2:
                    92:98:11:53:21:31:49:e8:c0:9c:07:bc:31:c6:70:
                    3b:14:74:a5:10:08:f5:bc:73:d1:05:79:43:a7:2d:
                    68:4e:f1:fd:66:0b:9e:a8:a9:d5:b0:71:f5:e3:70:
                    2f:25:c0:90:9c:7b:e8:fc:19:21:f1:52:d0:b2:15:
                    3d:86:c0:0a:bb:02:78:58:9e:d1:f1:31:c3:cd:fc:
                    8d:92:8c:a6:7d:6d:6c:04:3e:bf:d3:f2:48:b0:ae:
                    ca:78:09:b3:dc:f8:c7:f1:48:8f:0a:90:2a:1f:6a:
                    df:ae:36:82:79:4d:83:11:97:73:0b:d5:5d:3d:c1:
                    08:75:5c:4f:12:73:b8:9f:8f:f5:56:ec:e3:59:4e:
                    56:82:38:80:f9:a2:2c:3f:6b:5d:ae:a1:bb:a1:ee:
                    f8:09:31:fb:09:9d:bd:b4:27:b6:19:ce:93:84:fb:
                    2d:5d:e8:15:39:61:8a:57:83:b4:8c:41:dd:c0:61:
                    5f:fe:21:72:c3:d9:d3:8f:ca:ad:ec:67:bb:09:3b:
                    a0:77:1d:a2:8a:b3:df:e4:de:f9:6d:ca:9f:a8:02:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:55:97:FD:8C:7F:7A:E7:DD:A3:B6:D2:3E:71:60:F2:AD:10:4E
            X509v3 Authority Key Identifier:
                keyid:5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36392e302f32342d3234203d3e20323639363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:74:a9:6a:30:dd:d5:f8:9d:70:97:2d:68:22:0d:e2:e7:36:
         db:11:44:af:92:61:16:42:5d:ee:28:eb:a1:ad:7e:a5:0a:29:
         31:50:97:12:c7:1f:63:11:94:99:30:86:8f:a0:35:4e:85:83:
         fb:dc:11:a2:e4:54:c4:48:c6:ba:ae:9a:4f:59:92:b1:fc:32:
         ce:1c:94:36:c2:c5:ff:99:9f:06:86:0c:a5:cb:dd:76:6f:c5:
         e2:ff:7a:b0:23:a4:5d:d3:ff:dc:fa:59:5b:a9:aa:6f:f0:34:
         9e:5f:13:07:45:6e:4d:4d:f1:bd:ca:a3:37:dd:0d:84:2d:3c:
         7c:9c:f9:c8:e0:ba:61:43:d5:62:d6:75:07:f8:e9:bf:c8:e8:
         ed:46:25:82:bc:2b:eb:6b:21:2f:fa:ea:06:0f:6d:71:1d:86:
         e9:0e:fa:c5:03:d1:bd:8f:36:ea:db:b8:01:0a:b7:57:5d:e3:
         0c:31:48:31:09:84:b3:8c:1b:82:06:93:fe:2a:97:d0:29:bb:
         95:a0:ca:55:c3:8a:10:6c:a3:86:10:09:31:48:39:07:c2:3b:
         87:75:c0:db:d5:35:79:73:ed:7b:40:1e:4d:05:77:da:88:1d:
         30:91:1f:8b:a3:9c:59:5e:00:1d:2b:95:33:09:06:13:de:6e:
         1e:1c:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:30 2026 by rpki-client