Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa
File:                     34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa (raw, json)
Hash identifier:          V7zoDtkrYz3vVYs8XQu31fGEZRKvw7a5cMYeEBCILCs=
Subject key identifier:   8A:BC:19:7F:09:62:09:AD:DA:B0:E4:F9:07:A4:E9:50:F9:A4:13:76
Certificate issuer:       /CN=430D3B87524CE340FD3E751913764E863F537391
Certificate serial:       6BAB523501EFE6417E9B22169FA84F241374319D
Authority key identifier: 43:0D:3B:87:52:4C:E3:40:FD:3E:75:19:13:76:4E:86:3F:53:73:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa
Signing time:             Fri 13 Feb 2026 14:03:55 +0000
ROA not before:           Fri 13 Feb 2026 13:58:55 +0000
ROA not after:            Fri 12 Feb 2027 14:03:55 +0000
asID:                     268850
IP address blocks:        45.174.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.crl
                          rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ab:52:35:01:ef:e6:41:7e:9b:22:16:9f:a8:4f:24:13:74:31:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430D3B87524CE340FD3E751913764E863F537391
        Validity
            Not Before: Feb 13 13:58:55 2026 GMT
            Not After : Feb 12 14:03:55 2027 GMT
        Subject: CN=8ABC197F096209ADDAB0E4F907A4E950F9A41376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:1a:3f:03:52:3d:32:ea:41:3f:d1:b2:11:
                    fb:57:f9:06:2e:b7:30:b2:b0:94:a3:6d:46:a8:e0:
                    53:19:b8:e3:07:65:18:43:5b:94:7b:c8:e4:11:96:
                    e5:a9:02:89:24:9f:92:67:ef:79:2e:46:1a:ce:be:
                    4e:79:60:1e:2b:2d:d6:ed:ba:43:b9:3c:47:03:35:
                    0e:74:e2:a9:f2:a8:7d:79:90:81:48:9b:48:06:48:
                    ba:fb:2b:75:6f:e2:0f:98:0d:59:3c:56:c9:a5:43:
                    2d:1c:1e:0a:cb:12:e0:71:c9:f2:ff:3b:62:6f:0f:
                    7c:a3:c0:29:3b:a5:f5:84:2f:17:c6:a4:61:e9:9b:
                    6a:4a:4a:e8:22:33:18:d4:90:f2:00:a2:85:4e:17:
                    42:4d:4d:6c:87:ba:81:04:cd:fb:d0:a0:89:e4:2f:
                    4e:82:1b:57:f2:d8:c0:e0:96:4d:52:12:42:54:81:
                    4b:1a:5b:0f:bd:a4:69:57:e2:5f:f3:c8:60:54:76:
                    16:b4:de:3e:53:2d:c4:df:ea:86:9d:75:24:cc:96:
                    80:09:6a:87:29:0b:7c:bd:d6:e2:15:a2:f4:07:56:
                    d5:01:c0:de:f6:68:6e:03:c3:89:8c:3b:76:1d:0c:
                    5d:08:23:79:6e:c9:cd:18:14:4a:c8:34:38:aa:1d:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:19:7F:09:62:09:AD:DA:B0:E4:F9:07:A4:E9:50:F9:A4:13:76
            X509v3 Authority Key Identifier:
                keyid:43:0D:3B:87:52:4C:E3:40:FD:3E:75:19:13:76:4E:86:3F:53:73:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:90:a1:d0:ef:3a:82:d9:86:4b:ee:c1:03:f3:60:c1:e9:
         89:a9:bb:02:6b:dc:ee:68:8b:43:71:c1:c9:a3:6b:b2:c4:55:
         76:7a:60:86:50:cc:57:8a:74:9d:4d:22:07:b6:a9:09:f4:11:
         32:e2:71:29:ec:4d:4c:c7:96:d9:a0:fe:65:79:f3:89:c6:6a:
         c6:d4:34:55:49:c3:99:61:18:3b:81:3b:d8:61:68:28:a5:46:
         89:12:f4:a3:5f:90:9f:98:19:b5:b8:94:ab:74:f3:18:6c:33:
         b5:6a:56:b9:38:a4:70:b6:f5:c1:7b:5c:dd:d0:ed:cd:f4:73:
         5d:9a:ac:12:35:d6:36:39:af:28:6a:85:68:a1:ac:d7:d1:1b:
         4c:6b:33:51:9e:18:1f:b7:84:8c:09:56:1b:ed:46:46:11:b8:
         d1:4c:d4:3d:09:6a:c6:38:fc:fe:34:f5:db:bd:af:d3:75:2c:
         3b:89:a7:83:01:50:cb:c1:a8:8a:99:32:2d:21:4a:bb:7d:62:
         bd:7b:96:06:af:54:cc:ce:84:7c:a9:11:11:91:9e:df:db:64:
         67:36:20:c1:cb:7c:ac:20:33:47:08:c4:10:d5:3f:6f:54:e0:
         85:9b:5c:5a:9f:e9:af:54:0d:bd:20:17:8d:9e:fd:2f:e5:76:
         e9:94:b6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:59:03 2026 by rpki-client