Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/34352e3138382e3232302e302f32322d3332203d3e20323639353431.roa
File:                     34352e3138382e3232302e302f32322d3332203d3e20323639353431.roa (raw, json)
Hash identifier:          Td8vg9iZ4YWg/CcSCWLey2C9OPshGj04LaOjDPOMSGc=
Subject key identifier:   E0:FC:BF:32:8C:EF:99:88:C8:E3:70:3E:52:A9:D1:BE:6C:ED:67:D1
Certificate issuer:       /CN=2A402458A400ED074E76D8C820FBA439A0893E31
Certificate serial:       66FDEAA1C2015D17AD336632BAA443295D0089BC
Authority key identifier: 2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/34352e3138382e3232302e302f32322d3332203d3e20323639353431.roa
Signing time:             Mon 09 Feb 2026 19:03:50 +0000
ROA not before:           Mon 09 Feb 2026 18:58:50 +0000
ROA not after:            Mon 08 Feb 2027 19:03:50 +0000
asID:                     269541
IP address blocks:        45.188.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl
                          rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fd:ea:a1:c2:01:5d:17:ad:33:66:32:ba:a4:43:29:5d:00:89:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A402458A400ED074E76D8C820FBA439A0893E31
        Validity
            Not Before: Feb  9 18:58:50 2026 GMT
            Not After : Feb  8 19:03:50 2027 GMT
        Subject: CN=E0FCBF328CEF9988C8E3703E52A9D1BE6CED67D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:48:85:95:8b:92:76:6e:6f:58:75:3c:b3:
                    4f:b9:09:a8:8b:9b:fb:f7:7d:b3:f1:26:78:36:8e:
                    25:b5:ba:ed:a2:9b:a0:2d:b7:7c:32:e6:ce:cb:c3:
                    dd:18:32:b1:3e:c4:3a:06:2c:33:21:db:aa:59:6f:
                    05:15:64:54:1a:13:35:6c:60:af:ef:47:93:05:7c:
                    23:57:19:0c:a0:a8:13:c4:4e:b6:ea:2b:f0:51:07:
                    d1:f8:f5:e0:d9:93:1a:be:7f:b1:84:3a:6c:db:0e:
                    8d:6f:03:5d:a6:ae:5d:c1:ae:e2:c6:11:52:1a:3f:
                    8e:c6:8c:76:7e:fd:04:c7:27:f9:6f:69:4a:ff:de:
                    29:7c:2e:e8:e1:c0:01:b4:e9:b1:ac:c3:5d:65:b7:
                    57:6f:33:7c:88:8f:26:fb:62:55:1a:f0:34:bf:f0:
                    b8:a1:a9:56:34:b3:b4:df:db:59:25:f9:98:b8:76:
                    fd:a7:04:2b:da:97:13:64:b1:b5:2f:c7:5a:c8:62:
                    48:9a:6f:3c:61:19:0e:75:59:eb:de:25:73:e7:c4:
                    97:15:36:d9:dd:59:be:2e:f1:82:6c:88:7e:8e:4c:
                    3b:f9:e4:73:63:06:8d:f2:9d:a6:9c:c4:d1:24:d7:
                    20:51:7a:cf:c4:1d:95:9a:90:06:e8:a4:60:42:6a:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:BF:32:8C:EF:99:88:C8:E3:70:3E:52:A9:D1:BE:6C:ED:67:D1
            X509v3 Authority Key Identifier:
                keyid:2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/34352e3138382e3232302e302f32322d3332203d3e20323639353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:1f:70:6b:47:e1:a9:d7:06:1d:73:3d:c4:a4:9a:43:9b:
         d7:0b:ac:33:34:f6:9b:1f:62:be:f0:ab:f9:be:f0:97:8e:82:
         98:23:ff:09:56:10:8d:2b:98:51:56:a7:ad:f8:8e:ce:3a:af:
         81:80:95:a3:47:5d:5d:2c:d1:a8:f6:5b:1f:da:ba:3d:98:10:
         49:d1:83:55:2c:75:67:e5:6b:3e:fd:09:39:4e:7d:2e:54:13:
         85:01:63:f9:cc:c3:9b:e1:3c:31:05:ec:ee:60:bd:86:b4:73:
         fb:ef:f2:a2:32:17:5f:6e:51:ed:d1:cc:72:26:51:51:3c:2a:
         e1:90:99:83:8c:6b:73:68:35:0a:72:8a:1e:2a:0b:d0:66:5e:
         2d:dd:2f:d8:25:5c:6b:a2:90:0d:e1:31:2e:5d:a6:7b:9e:9d:
         5d:a3:21:bc:ab:9f:b8:9d:7e:cc:64:b8:bc:7b:7f:68:fd:6c:
         9f:9e:d7:5b:2c:ae:b3:0e:e7:ed:d5:d6:88:e9:e0:04:ac:51:
         54:48:42:87:cb:e8:f2:7b:50:5a:62:c8:58:2e:e7:33:53:d0:
         fd:7d:d7:00:77:2a:90:c6:6f:00:cc:2f:ed:12:fe:26:ba:a2:
         25:56:44:1f:3a:87:5d:12:67:dd:31:e5:07:33:d1:a2:8e:9c:
         12:9a:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:49 2026 by rpki-client