Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa
File:                     34352e36352e3137332e302f32342d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          LCPAmQyMkx858BQ7QLtB86s6/lVbXfh+djvnnAGNNe4=
Subject key identifier:   27:6C:5A:DE:35:F4:2F:FE:5C:8C:7D:2B:EC:67:1C:58:74:B6:BB:12
Certificate issuer:       /CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
Certificate serial:       26D9DF237176E71CEA8E38A12449FF5F7E8BD5C2
Authority key identifier: 87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa
Signing time:             Mon 16 Feb 2026 22:38:24 +0000
ROA not before:           Mon 16 Feb 2026 22:33:24 +0000
ROA not after:            Mon 15 Feb 2027 22:38:24 +0000
asID:                     266265
IP address blocks:        45.65.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d9:df:23:71:76:e7:1c:ea:8e:38:a1:24:49:ff:5f:7e:8b:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
        Validity
            Not Before: Feb 16 22:33:24 2026 GMT
            Not After : Feb 15 22:38:24 2027 GMT
        Subject: CN=276C5ADE35F42FFE5C8C7D2BEC671C5874B6BB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:0f:28:97:da:bb:00:c7:96:de:9c:d8:3f:
                    fb:8a:6f:57:25:c4:54:0b:f0:f8:91:8a:da:58:8a:
                    88:fc:66:ae:ab:08:e1:6a:54:9b:83:f8:a4:91:36:
                    bf:ce:72:f7:a1:02:d6:be:01:39:12:7f:1f:8a:db:
                    af:e9:75:dc:6b:57:68:a3:d9:3d:51:96:34:56:fb:
                    1c:e8:32:09:f9:39:86:72:cb:30:15:0e:bc:6f:3b:
                    24:57:5c:a4:ea:1e:51:ea:80:b4:27:f9:e5:6e:73:
                    3b:21:ff:3c:23:7a:45:ec:e7:64:8c:e8:05:8e:c4:
                    d0:ad:6b:c4:18:e2:10:de:5a:e9:5f:7d:c9:8d:93:
                    3c:2f:9c:71:e9:b2:91:28:69:ed:fa:85:73:1e:6b:
                    a5:92:17:a1:49:46:18:66:a3:7f:75:37:c8:f6:b9:
                    62:75:4a:f3:bd:f0:20:d9:be:a8:a7:31:27:75:8b:
                    87:ff:2a:1c:3e:bb:bd:1d:69:a5:39:15:fe:bf:e2:
                    00:10:22:a6:0c:9a:ce:97:8e:e2:9a:42:cc:50:6c:
                    70:95:f4:d4:59:8c:a9:72:b2:ac:bd:34:ac:c0:72:
                    66:52:d3:c7:6d:19:0f:79:4a:a3:e1:8f:15:11:ca:
                    e1:04:63:31:92:99:f0:65:7e:ab:7f:8a:3b:1f:d1:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:5A:DE:35:F4:2F:FE:5C:8C:7D:2B:EC:67:1C:58:74:B6:BB:12
            X509v3 Authority Key Identifier:
                keyid:87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:06:47:00:c3:df:ac:89:a2:e5:61:67:38:72:7b:6e:37:
         1e:9f:66:a3:30:24:cd:1c:83:7f:8d:1a:1e:24:0a:6d:72:df:
         69:0b:03:ea:52:90:85:e7:80:dd:a6:b4:d5:d4:59:71:10:a6:
         30:fc:0e:34:9f:d3:86:04:1c:eb:63:56:9a:3f:57:50:ac:05:
         b6:22:5e:cc:33:51:86:61:79:dd:3c:70:46:79:67:e7:3e:e2:
         42:8d:3a:25:92:ec:7c:41:87:25:d8:d4:a7:ac:65:9c:eb:3a:
         e3:fa:94:73:ac:7c:84:0f:97:1d:b6:9d:2c:6e:29:85:96:20:
         fb:0f:04:6b:4e:45:12:5f:16:84:66:44:e7:d2:ad:7b:4e:62:
         11:07:7e:87:0f:92:d7:12:f5:e0:51:ef:6e:9b:2c:56:aa:9f:
         4f:88:4a:df:14:f4:f0:69:18:98:6d:cf:2b:7e:9b:cf:4d:04:
         2a:e6:ab:f0:78:aa:24:c6:b7:8c:83:dc:09:be:58:a6:bd:4b:
         89:f2:1e:54:8e:97:42:67:46:b8:d9:d4:ed:bf:c3:a1:f2:b4:
         b6:90:71:bb:95:35:59:80:af:d1:ad:9c:fe:6b:f3:3d:b1:fb:
         53:ae:7d:40:6e:81:e6:95:2f:ba:5a:76:22:ff:12:ea:25:39:
         ac:b9:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:29 2026 by rpki-client