Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32332d3233203d3e20323639303736.roa
File:                     34352e3137392e3131362e302f32332d3233203d3e20323639303736.roa (raw, json)
Hash identifier:          QYb8UeVCLKKlREDHlU/vO/8JS6L9gu7u9Ust+wMObM0=
Subject key identifier:   D3:CD:6C:75:4F:A5:57:12:A5:26:05:F4:7D:4A:BC:3D:E0:63:85:81
Certificate issuer:       /CN=7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8
Certificate serial:       77BF8390F2A5A9499B98921C9ED4A48918B13971
Authority key identifier: 7F:A3:A9:B7:AA:6A:E8:69:1B:20:71:33:75:B3:DF:C6:38:6A:89:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32332d3233203d3e20323639303736.roa
Signing time:             Wed 11 Feb 2026 18:47:29 +0000
ROA not before:           Wed 11 Feb 2026 18:42:29 +0000
ROA not after:            Wed 10 Feb 2027 18:47:29 +0000
asID:                     269076
IP address blocks:        45.179.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.crl
                          rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:83:90:f2:a5:a9:49:9b:98:92:1c:9e:d4:a4:89:18:b1:39:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8
        Validity
            Not Before: Feb 11 18:42:29 2026 GMT
            Not After : Feb 10 18:47:29 2027 GMT
        Subject: CN=D3CD6C754FA55712A52605F47D4ABC3DE0638581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:37:2a:44:2e:5e:39:d2:ba:49:5e:04:b1:
                    7b:a5:aa:a5:82:1f:30:05:e6:f5:41:71:41:ab:fe:
                    73:ec:df:fc:89:91:d0:a9:da:4d:45:02:80:8e:50:
                    54:11:80:88:18:2a:52:66:ca:4c:7e:7a:91:ea:65:
                    0c:6b:b6:0b:38:bf:23:ef:e3:00:29:f2:e7:00:51:
                    3f:c3:5e:4f:d5:44:18:be:cf:42:1f:e7:23:19:c6:
                    a9:cb:83:70:c9:da:0c:2b:87:ca:3d:81:43:85:81:
                    61:cb:7f:cf:e0:b9:20:06:72:ee:fb:45:90:6e:87:
                    6c:44:56:65:e0:fa:3f:00:4d:7c:11:2a:ea:bf:52:
                    16:d4:68:ca:a2:bc:93:97:e2:85:e5:55:8a:af:eb:
                    28:36:2d:a5:47:0d:f2:cd:e1:11:ee:2a:54:cd:08:
                    55:79:d1:e3:6b:03:b1:dc:da:a5:ea:23:f2:30:b1:
                    3e:af:ea:8d:c0:4f:28:0e:e1:b7:dc:38:e9:0b:30:
                    92:0d:ba:7c:8f:cb:fe:2c:92:1a:a3:3c:35:0c:33:
                    69:ae:c0:df:e4:9d:a4:b0:72:17:ef:7c:69:b0:1e:
                    71:39:e8:98:fc:47:0b:d7:da:3b:6c:f1:43:2c:46:
                    62:26:67:f8:8c:ed:50:db:bc:2c:ce:58:f5:b1:94:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CD:6C:75:4F:A5:57:12:A5:26:05:F4:7D:4A:BC:3D:E0:63:85:81
            X509v3 Authority Key Identifier:
                keyid:7F:A3:A9:B7:AA:6A:E8:69:1B:20:71:33:75:B3:DF:C6:38:6A:89:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA3A9B7AA6AE8691B20713375B3DFC6386A89D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32332d3233203d3e20323639303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:38:fb:e1:93:fc:63:02:73:4e:31:c0:31:aa:07:c8:78:
         cc:f7:87:12:11:3a:a9:73:42:83:a5:31:69:13:cb:b3:05:dc:
         65:9e:fd:01:e9:7f:03:c7:9f:5c:3e:23:c7:57:df:4a:39:d3:
         5e:53:46:4c:9b:87:cf:3c:d5:a4:5d:74:d6:49:fa:97:1a:57:
         46:3d:2c:9a:40:4c:b0:81:70:e4:0f:9f:70:30:67:76:ed:ec:
         9b:02:a8:41:33:0d:5f:66:10:09:58:05:c9:7b:b1:87:53:b4:
         97:9c:ee:27:49:7a:76:f4:cb:70:60:95:de:d0:4b:fd:8f:bd:
         1c:31:2c:77:22:85:a3:2b:3e:8a:b6:f4:dd:72:e6:18:a0:a8:
         58:43:65:1b:42:e2:2d:74:3f:46:c7:fc:c0:54:d5:d9:cf:f2:
         b1:a7:50:f7:20:9f:7f:d4:6e:6f:38:51:6b:b8:17:b0:7e:44:
         ab:f3:db:de:27:c0:c8:cb:a3:94:5c:16:aa:b0:32:44:b7:26:
         80:25:ee:7c:a9:21:43:d2:87:1c:ed:05:3b:bd:b2:e3:1d:df:
         b7:95:ee:23:e7:6b:1e:bd:16:f1:e7:8e:33:65:a3:36:bf:2f:
         f6:ce:94:12:11:fc:96:32:bb:d3:70:66:fb:ef:8d:3f:41:73:
         f4:55:d0:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd7+DkPKlqUmbmJIcntSkiRixOXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBM0E5QjdBQTZBRTg2OTFCMjA3MTMzNzVCM0RGQzYz
ODZBODlEODAeFw0yNjAyMTExODQyMjlaFw0yNzAyMTAxODQ3MjlaMDMxMTAvBgNV
BAMTKEQzQ0Q2Qzc1NEZBNTU3MTJBNTI2MDVGNDdENEFCQzNERTA2Mzg1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NzcqRC5eOdK6SV4EsXulqqWC
HzAF5vVBcUGr/nPs3/yJkdCp2k1FAoCOUFQRgIgYKlJmykx+epHqZQxrtgs4vyPv
4wAp8ucAUT/DXk/VRBi+z0If5yMZxqnLg3DJ2gwrh8o9gUOFgWHLf8/guSAGcu77
RZBuh2xEVmXg+j8ATXwRKuq/UhbUaMqivJOX4oXlVYqv6yg2LaVHDfLN4RHuKlTN
CFV50eNrA7Hc2qXqI/IwsT6v6o3ATygO4bfcOOkLMJINunyPy/4skhqjPDUMM2mu
wN/knaSwchfvfGmwHnE56Jj8RwvX2jts8UMsRmImZ/iM7VDbvCzOWPWxlLkVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU081sdU+lVxKlJgX0fUq8PeBjhYEwHwYDVR0j
BBgwFoAUf6Opt6pq6GkbIHEzdbPfxjhqidgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg5TjN6N01xanpCTm45amVYM3ZxWndnZTRGcHhDS2lGdkh3dmVhYllm
dHcvMC83RkEzQTlCN0FBNkFFODY5MUIyMDcxMzM3NUIzREZDNjM4NkE4OUQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQTNBOUI3QUE2QUU4Njkx
QjIwNzEzMzc1QjNERkM2Mzg2QTg5RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoOU4zejdNcWp6Qk5uOWplWDN2cVp3Z2U0RnB4Q0tpRnZId3ZlYWJZZnR3LzAv
MzQzNTJlMzEzNzM5MmUzMTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts3QwDQYJKoZIhvcNAQELBQADggEBAIAsOPvh
k/xjAnNOMcAxqgfIeMz3hxIROqlzQoOlMWkTy7MF3GWe/QHpfwPHn1w+I8dX30o5
015TRkybh8881aRddNZJ+pcaV0Y9LJpATLCBcOQPn3AwZ3bt7JsCqEEzDV9mEAlY
Bcl7sYdTtJec7idJenb0y3Bgld7QS/2PvRwxLHcihaMrPoq29N1y5higqFhDZRtC
4i10P0bH/MBU1dnP8rGnUPcgn3/Ubm84UWu4F7B+RKvz294nwMjLo5RcFqqwMkS3
JoAl7nypIUPShxztBTu9suMd37eV7iPnax69FvHnjjNloza/L/bOlBIR/JYyu9Nw
ZvvvjT9Bc/RV0AM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:17 2026 by rpki-client