Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32332d3234203d3e20323636323635.roa
File:                     34352e36352e3137322e302f32332d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          Kg/CPSXXXm3GdQDOPt5n74KXH1bE6j9CJva5Y45gppo=
Subject key identifier:   15:D7:7F:D0:42:62:3C:57:29:A1:24:4E:EE:D4:29:B7:17:D5:06:A7
Certificate issuer:       /CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
Certificate serial:       75A9CF9A4E41C05DBCBBCCB578126A8428FB7719
Authority key identifier: 87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32332d3234203d3e20323636323635.roa
Signing time:             Mon 16 Feb 2026 22:38:35 +0000
ROA not before:           Mon 16 Feb 2026 22:33:35 +0000
ROA not after:            Mon 15 Feb 2027 22:38:35 +0000
asID:                     266265
IP address blocks:        45.65.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a9:cf:9a:4e:41:c0:5d:bc:bb:cc:b5:78:12:6a:84:28:fb:77:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
        Validity
            Not Before: Feb 16 22:33:35 2026 GMT
            Not After : Feb 15 22:38:35 2027 GMT
        Subject: CN=15D77FD042623C5729A1244EEED429B717D506A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:f4:d7:c9:9e:b6:c6:f5:ba:72:ec:18:ef:
                    bb:57:be:3f:9d:c6:bc:27:b3:47:ee:7a:47:a4:09:
                    e4:4f:91:28:eb:0f:14:14:b5:f0:79:f2:c0:55:eb:
                    37:b7:e0:38:59:2a:a8:05:19:f9:cf:aa:b8:f3:b5:
                    21:8b:5e:95:bf:78:7f:a0:00:68:95:fe:0c:52:f2:
                    63:1f:76:5a:9b:d8:7f:1d:53:57:0d:81:6e:8b:e9:
                    78:5d:b3:35:cb:94:1c:40:a8:bc:20:ea:2a:f0:5c:
                    22:c4:1d:df:22:55:bf:23:18:03:90:c5:1b:ef:ac:
                    13:b6:ed:b1:e8:76:22:de:49:79:ad:f3:b5:9f:c5:
                    cd:4b:c3:97:05:cc:54:95:73:f7:e5:5a:75:93:a0:
                    2d:7b:d4:f9:92:92:64:a1:66:5b:bb:f9:73:bc:8d:
                    c5:f4:96:3c:52:bb:28:d3:9f:a6:f4:a5:b7:7a:d3:
                    aa:0d:15:48:af:c5:b3:f0:12:57:41:9a:68:ae:e7:
                    63:2f:43:80:62:b2:00:bb:0c:05:c6:d4:84:f3:a4:
                    69:10:7a:88:f2:cb:e8:50:4c:5b:f0:91:1e:d7:5d:
                    1c:7b:a4:37:75:29:d7:e1:f8:94:d4:f9:bd:a6:18:
                    28:6a:04:f9:bb:4e:ee:5d:66:7d:83:1b:ed:f4:c8:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D7:7F:D0:42:62:3C:57:29:A1:24:4E:EE:D4:29:B7:17:D5:06:A7
            X509v3 Authority Key Identifier:
                keyid:87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32332d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:66:d3:f8:f4:27:d6:49:3e:4b:89:af:54:38:17:dc:75:
         f3:fa:bf:a0:15:c3:7d:6e:9c:08:5c:43:a3:3b:65:04:d3:f1:
         e4:26:9f:86:d4:f1:7a:64:d1:ba:2c:1f:97:5c:6e:6e:42:4f:
         77:25:da:5c:dd:9c:30:57:7f:6a:98:d0:b8:4b:b4:d5:b2:4d:
         8a:73:73:f4:d5:c5:52:ac:68:b8:60:53:f7:fe:37:43:43:1f:
         ea:54:f7:7a:dd:00:4d:f0:0c:c3:7a:c7:3b:cd:f0:50:af:63:
         6d:f1:16:cd:57:34:5b:79:02:bc:21:2c:5f:8a:d8:d5:33:a6:
         8e:df:4e:d1:fa:c3:06:b1:88:1a:0c:a5:24:7f:a8:40:d2:91:
         f7:c6:e5:a7:6d:45:79:88:1a:c8:22:4e:8a:38:ec:9e:c4:bb:
         ca:b1:13:da:4c:47:31:86:9e:98:f0:3c:71:4e:ef:16:5a:16:
         6f:97:99:65:df:d2:e6:71:a6:a5:e4:eb:78:9e:ef:96:d2:e9:
         7b:28:2c:2c:2a:18:f1:e9:78:95:32:b8:62:22:29:5f:19:2d:
         bd:ea:12:ed:d8:36:7f:20:ae:6b:af:2e:4f:ac:d6:c6:04:60:
         2e:ba:31:cd:6a:de:42:f0:0f:43:5b:de:59:b5:17:c0:e3:f3:
         94:87:ca:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:50 2026 by rpki-client