Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa
File:                     34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa (raw, json)
Hash identifier:          CBQRsFpNgpDgBkwCr8Hq8TfzprL8BhqVEG2MxCJFUeQ=
Subject key identifier:   1F:67:0D:8F:B8:73:F3:7F:9C:C5:7F:3F:80:1B:FD:79:E5:F4:E6:C5
Certificate issuer:       /CN=4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07
Certificate serial:       0A60134FD6AAAB890DC956DEB571E56E1D98CD65
Authority key identifier: 4A:5A:F6:B6:D5:DD:49:02:5A:24:F4:0F:BF:8E:AD:7A:5E:FE:0F:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa
Signing time:             Thu 12 Feb 2026 18:05:12 +0000
ROA not before:           Thu 12 Feb 2026 18:00:12 +0000
ROA not after:            Thu 11 Feb 2027 18:05:12 +0000
asID:                     267176
IP address blocks:        45.230.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.crl
                          rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:13:4f:d6:aa:ab:89:0d:c9:56:de:b5:71:e5:6e:1d:98:cd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07
        Validity
            Not Before: Feb 12 18:00:12 2026 GMT
            Not After : Feb 11 18:05:12 2027 GMT
        Subject: CN=1F670D8FB873F37F9CC57F3F801BFD79E5F4E6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:ed:97:f5:4a:13:08:39:74:5f:de:b6:3d:
                    c4:8f:30:0c:48:69:e6:77:07:a1:bc:70:fb:f5:65:
                    54:e2:f7:f6:17:46:60:ce:8d:de:af:f3:72:c5:3e:
                    40:f2:93:f2:22:d4:af:8f:d8:f3:9c:ca:ba:81:2a:
                    e4:51:b9:46:0f:18:fe:1b:4a:8e:5c:39:7a:90:6b:
                    0d:b1:ea:ba:7e:33:2c:70:8e:40:8e:fd:d1:1d:44:
                    23:bc:71:78:2b:f8:08:33:08:47:76:fd:b2:60:37:
                    c4:60:ed:cb:95:90:b6:57:b5:c1:22:28:2f:12:40:
                    8f:0d:26:5c:d4:e6:ce:51:2a:20:93:f9:7d:a0:c2:
                    52:d5:55:2b:0b:ad:ea:64:67:3e:ce:92:27:75:e5:
                    42:d4:ce:f3:22:be:96:db:ca:4d:4c:bc:cf:fb:99:
                    3d:c0:bc:25:1f:76:1d:29:6a:e8:c0:0e:cc:94:50:
                    61:01:ec:a3:bb:be:6d:b3:c3:df:4b:ef:1e:73:f6:
                    1e:33:f3:cf:c0:69:33:1f:82:3d:71:55:5b:f3:7a:
                    43:d1:92:fc:a0:29:98:b7:c0:c8:68:3b:d0:29:6d:
                    0d:7b:02:95:be:99:0b:35:fe:f8:ef:e5:2d:57:23:
                    69:25:f5:a6:4e:ae:05:26:c5:5b:88:b6:44:ec:22:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:0D:8F:B8:73:F3:7F:9C:C5:7F:3F:80:1B:FD:79:E5:F4:E6:C5
            X509v3 Authority Key Identifier:
                keyid:4A:5A:F6:B6:D5:DD:49:02:5A:24:F4:0F:BF:8E:AD:7A:5E:FE:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:20:86:e8:95:ea:19:c9:9c:7b:29:60:19:f0:76:f0:ef:
         48:cd:49:7a:b0:2c:bf:ac:0d:12:e8:10:24:4d:c6:25:ac:c9:
         71:94:ca:6e:f6:d9:38:e4:30:ee:98:54:4a:3c:51:cf:13:76:
         cd:fb:16:8a:d4:d1:37:53:01:94:74:c7:90:57:17:7b:0c:38:
         99:64:4c:2e:de:36:9b:c4:4b:75:70:a9:22:d2:d7:de:23:0d:
         81:a8:e0:54:b4:8a:c5:68:16:82:b8:16:c7:03:01:e4:11:0a:
         d1:10:8a:69:06:31:f4:6a:d7:9d:4b:a8:ed:65:a2:e6:e2:fa:
         9f:10:93:5b:9e:ff:a3:9c:86:42:39:c8:10:ee:86:19:fb:e7:
         b3:bf:10:36:93:89:77:b9:7f:48:11:04:fc:16:47:73:4f:44:
         e1:c7:20:cc:af:d4:d6:a1:cc:6c:09:f3:65:26:2d:c7:d4:64:
         4f:4b:58:52:18:f9:97:32:84:d5:26:4e:4c:50:c5:4a:42:74:
         1a:ee:40:9a:e0:fe:04:c9:59:60:42:f5:a1:e9:25:5e:77:f8:
         ac:33:b2:df:ea:e7:33:61:e7:5f:4f:0b:c1:b4:16:4d:9e:3b:
         51:97:fc:77:39:8b:25:82:c1:a2:91:f6:9a:e6:83:f1:9d:97:
         bd:f9:86:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCmATT9aqq4kNyVbetXHlbh2YzWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE1QUY2QjZENURENDkwMjVBMjRGNDBGQkY4RUFEN0E1
RUZFMEYwNzAeFw0yNjAyMTIxODAwMTJaFw0yNzAyMTExODA1MTJaMDMxMTAvBgNV
BAMTKDFGNjcwRDhGQjg3M0YzN0Y5Q0M1N0YzRjgwMUJGRDc5RTVGNEU2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru+2X9UoTCDl0X962PcSPMAxI
aeZ3B6G8cPv1ZVTi9/YXRmDOjd6v83LFPkDyk/Ii1K+P2POcyrqBKuRRuUYPGP4b
So5cOXqQaw2x6rp+MyxwjkCO/dEdRCO8cXgr+AgzCEd2/bJgN8Rg7cuVkLZXtcEi
KC8SQI8NJlzU5s5RKiCT+X2gwlLVVSsLrepkZz7Okid15ULUzvMivpbbyk1MvM/7
mT3AvCUfdh0paujADsyUUGEB7KO7vm2zw99L7x5z9h4z88/AaTMfgj1xVVvzekPR
kvygKZi3wMhoO9ApbQ17ApW+mQs1/vjv5S1XI2kl9aZOrgUmxVuItkTsIqHXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH2cNj7hz83+cxX8/gBv9eeX05sUwHwYDVR0j
BBgwFoAUSlr2ttXdSQJaJPQPv46tel7+DwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGk2cWgycG54Z2ZNNVFlVnhUOXN6cFFCWTZ6VmEzUFVTbUQzNGNxdkFO
aUQvMC80QTVBRjZCNkQ1REQ0OTAyNUEyNEY0MEZCRjhFQUQ3QTVFRkUwRjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNUFGNkI2RDVERDQ5MDI1
QTI0RjQwRkJGOEVBRDdBNUVGRTBGMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpNnFoMnBueGdmTTVRZVZ4VDlzenBRQlk2elZhM1BVU21EMzRjcXZBTmlELzAv
MzQzNTJlMzIzMzMwMmUzMjMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5uwwDQYJKoZIhvcNAQELBQADggEBAF4FIIbo
leoZyZx7KWAZ8Hbw70jNSXqwLL+sDRLoECRNxiWsyXGUym722TjkMO6YVEo8Uc8T
ds37ForU0TdTAZR0x5BXF3sMOJlkTC7eNpvES3VwqSLS194jDYGo4FS0isVoFoK4
FscDAeQRCtEQimkGMfRq151LqO1loubi+p8Qk1ue/6OchkI5yBDuhhn757O/EDaT
iXe5f0gRBPwWR3NPROHHIMyv1NahzGwJ82UmLcfUZE9LWFIY+ZcyhNUmTkxQxUpC
dBruQJrg/gTJWWBC9aHpJV53+Kwzst/q5zNh519PC8G0Fk2eO1GX/Hc5iyWCwaKR
9prmg/Gdl735hk8=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:12 2026 by rpki-client