Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
File:                     34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa (raw, json)
Hash identifier:          ZLvQ+/oHYRohH6flZmyE2E5BGUeF2eFf95ntC4tSDKE=
Subject key identifier:   D5:CB:53:15:56:02:8E:EC:01:D5:D8:CF:3E:D4:A1:3E:A6:04:66:A9
Certificate issuer:       /CN=A273532C29076DEEF26D5AD7BE1E8D0888686F75
Certificate serial:       73BEE0F7D97261D76C84CD897F276A21FB4E3DB1
Authority key identifier: A2:73:53:2C:29:07:6D:EE:F2:6D:5A:D7:BE:1E:8D:08:88:68:6F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
Signing time:             Mon 26 Jan 2026 20:04:57 +0000
ROA not before:           Mon 26 Jan 2026 19:59:57 +0000
ROA not after:            Mon 25 Jan 2027 20:04:57 +0000
asID:                     269419
IP address blocks:        45.186.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.crl
                          rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:be:e0:f7:d9:72:61:d7:6c:84:cd:89:7f:27:6a:21:fb:4e:3d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A273532C29076DEEF26D5AD7BE1E8D0888686F75
        Validity
            Not Before: Jan 26 19:59:57 2026 GMT
            Not After : Jan 25 20:04:57 2027 GMT
        Subject: CN=D5CB531556028EEC01D5D8CF3ED4A13EA60466A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:82:5d:87:5f:2b:87:60:06:68:22:4f:17:14:
                    1f:c3:d2:00:a0:25:9b:68:63:91:73:80:a4:e4:50:
                    e5:76:0e:5a:1e:6f:a3:1f:3f:5a:41:ec:16:88:b4:
                    40:74:19:f3:9f:9f:ff:0b:7a:f6:54:0b:da:27:d8:
                    df:80:bf:fa:81:b4:58:31:1b:cc:12:96:03:53:bf:
                    c4:0d:df:40:f8:9b:7c:f1:57:c5:92:da:3c:21:b5:
                    5a:ad:ff:e9:e5:6a:66:9d:98:b3:5b:a2:dc:07:19:
                    be:99:16:bf:2a:6c:ae:d6:76:2e:ff:e1:1c:38:30:
                    2e:95:c0:36:58:2e:74:22:09:24:c1:e8:ab:1f:ed:
                    ce:38:3e:f2:5f:4c:76:bc:d4:a7:8a:00:24:02:1b:
                    ce:1c:b9:60:62:8b:7e:b5:38:35:7f:13:8a:a8:5c:
                    4e:ce:5c:23:cb:12:27:23:01:a2:2f:a3:1b:93:32:
                    35:ed:80:33:39:62:2a:6c:9e:4e:f6:da:87:ad:dc:
                    3c:57:8f:44:9e:92:7e:f4:16:65:f4:c4:8f:a5:0e:
                    34:a1:32:3e:ee:c9:5e:e0:67:dc:52:17:30:23:ba:
                    29:19:c1:6d:23:ee:bc:9a:f0:71:e7:22:d4:5c:13:
                    75:f4:f8:f5:34:d0:c1:f1:d0:b2:87:71:d4:06:40:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:53:15:56:02:8E:EC:01:D5:D8:CF:3E:D4:A1:3E:A6:04:66:A9
            X509v3 Authority Key Identifier:
                keyid:A2:73:53:2C:29:07:6D:EE:F2:6D:5A:D7:BE:1E:8D:08:88:68:6F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:07:74:50:38:83:03:b4:be:9f:4f:6c:ca:98:99:a5:a0:
         77:07:13:fe:ed:c4:bb:79:75:fa:d8:48:a8:be:a6:5f:ca:6e:
         10:ad:3f:98:8a:6f:af:98:ed:16:bf:87:12:92:44:80:75:9b:
         f4:1b:db:1f:02:a1:33:cb:92:ab:13:c2:5f:30:d6:06:9e:25:
         3a:08:a9:a4:e6:39:69:cc:6e:40:33:0c:4e:2e:2a:ea:f3:bb:
         c2:93:bb:3a:6a:72:11:cd:94:df:dd:6c:ec:74:f1:dd:93:c1:
         c1:e9:d9:ae:46:b8:fe:2b:6e:33:b4:2c:0b:6d:20:b9:f9:f9:
         04:b0:91:75:08:f0:72:5f:53:1c:1f:78:6d:b1:e1:40:16:d6:
         10:41:8f:24:19:9c:c6:3b:c9:11:2e:bb:21:aa:3b:a7:d8:6e:
         64:5d:54:71:42:70:4d:21:48:b2:b9:f4:b8:31:63:2c:fb:6f:
         fb:ee:8c:65:8f:36:68:50:da:11:f5:20:56:8f:94:bb:32:dd:
         1d:f3:f1:e4:7e:21:03:12:70:69:23:b2:a2:7a:2c:f8:3d:f3:
         7b:b4:53:85:94:04:9b:ac:a6:ce:83:a3:e2:67:f2:39:43:b4:
         76:d4:b7:a1:6c:37:5e:31:b1:0a:ec:6e:03:49:90:41:de:60:
         a7:04:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:37 2026 by rpki-client