Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/34352e3137352e34342e302f32322d3234203d3e20323638393337.roa
File:                     34352e3137352e34342e302f32322d3234203d3e20323638393337.roa (raw, json)
Hash identifier:          skAR1qcYJyis8V6kVfz/d+O02YykvXyCfPefBAFLggk=
Subject key identifier:   60:E1:9C:E4:72:E6:5E:E7:17:80:D7:D3:07:00:E1:1B:DE:48:11:EE
Certificate issuer:       /CN=AD01A5C839E629E7A99F47E90A26A019E3FA3FB1
Certificate serial:       7833009996AD623AA6868FCEFB6FE7D3468CECD8
Authority key identifier: AD:01:A5:C8:39:E6:29:E7:A9:9F:47:E9:0A:26:A0:19:E3:FA:3F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/34352e3137352e34342e302f32322d3234203d3e20323638393337.roa
Signing time:             Wed 11 Feb 2026 19:36:53 +0000
ROA not before:           Wed 11 Feb 2026 19:31:53 +0000
ROA not after:            Wed 10 Feb 2027 19:36:53 +0000
asID:                     268937
IP address blocks:        45.175.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.crl
                          rsync://rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:33:00:99:96:ad:62:3a:a6:86:8f:ce:fb:6f:e7:d3:46:8c:ec:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD01A5C839E629E7A99F47E90A26A019E3FA3FB1
        Validity
            Not Before: Feb 11 19:31:53 2026 GMT
            Not After : Feb 10 19:36:53 2027 GMT
        Subject: CN=60E19CE472E65EE71780D7D30700E11BDE4811EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:cb:3d:a2:39:ff:86:1b:30:17:77:8f:08:
                    92:dd:6b:bc:a9:4b:c5:2e:13:6c:e8:5f:62:c0:55:
                    91:0a:21:63:1f:92:54:a0:74:2a:63:6f:73:16:1c:
                    38:0f:a3:47:46:28:49:c4:5f:05:a8:96:13:9c:ff:
                    ed:34:a6:9e:45:83:4c:fd:00:9b:8d:07:6c:48:f1:
                    41:cb:7b:9e:21:7a:e5:81:5e:4f:2e:9e:26:c3:24:
                    58:fd:bc:a3:27:4e:d8:b5:1c:5f:c8:88:ce:46:c9:
                    3f:da:0c:28:81:87:c2:6b:25:d8:ce:e1:9a:d9:8d:
                    57:36:02:8e:16:a3:83:ca:5d:1f:c5:05:7e:68:dd:
                    ec:61:72:52:fa:49:54:01:e6:2f:e9:5d:fe:73:48:
                    74:a3:c3:12:1a:74:97:6e:40:32:35:a9:08:6a:b8:
                    40:3d:87:80:df:11:01:04:9b:bb:df:98:10:dd:82:
                    2d:e8:a9:24:95:04:60:d6:2f:90:1b:93:3b:f1:18:
                    b3:bb:00:b2:a2:28:63:08:df:31:a2:15:66:c3:79:
                    09:e4:67:6f:53:92:7c:af:da:b3:13:af:04:b6:1f:
                    04:63:a7:6e:ba:c6:a3:2b:e3:d2:2a:29:d3:94:67:
                    a9:ef:7a:35:7d:db:25:d8:24:22:56:eb:0e:77:eb:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:9C:E4:72:E6:5E:E7:17:80:D7:D3:07:00:E1:1B:DE:48:11:EE
            X509v3 Authority Key Identifier:
                keyid:AD:01:A5:C8:39:E6:29:E7:A9:9F:47:E9:0A:26:A0:19:E3:FA:3F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD01A5C839E629E7A99F47E90A26A019E3FA3FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM35HUB8X2qVTvGX2c8ofp1zUaggZmi6AuKNPxyAEfVm/0/34352e3137352e34342e302f32322d3234203d3e20323638393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:79:d1:0b:e7:14:43:39:e3:70:0a:5f:bc:f0:5f:28:14:10:
         1b:23:ee:98:2e:a6:5f:21:25:25:ed:0f:4d:63:3c:61:73:28:
         a0:12:83:d6:cf:7c:e3:2d:ed:a1:d0:ca:5e:52:b5:12:20:4a:
         74:13:74:6c:dc:cf:b3:ab:ee:2c:ca:0b:e2:8f:70:ed:15:fe:
         76:ff:30:a3:27:c0:74:02:83:68:67:45:11:d2:57:f3:78:ea:
         c1:53:53:4e:17:4b:0b:06:70:ba:51:0f:cf:79:c7:cd:bb:e3:
         76:dc:b6:37:c7:4d:07:cd:f5:10:53:5e:26:ea:21:52:cd:01:
         6d:b5:de:a4:b6:9e:e5:18:cc:36:7b:10:b7:e8:46:58:67:59:
         ce:9c:a9:8e:dd:84:b8:28:d4:95:af:7a:29:50:37:95:57:ee:
         f4:f3:ed:a9:47:10:7a:32:e9:56:bd:e8:5d:67:03:8c:40:5d:
         0f:30:12:d6:02:34:2e:08:34:04:c1:59:8c:30:ef:23:f5:9c:
         cf:0b:ee:79:d9:ec:69:71:7c:65:14:9c:16:c8:c7:2c:c5:cf:
         e0:13:68:89:18:ed:fb:f6:2d:19:21:62:50:23:f9:bc:67:22:
         0e:2a:88:7f:0f:2a:b1:a5:b9:4b:01:7f:13:7e:a6:e5:d4:c0:
         4e:e6:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:52 2026 by rpki-client