Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33372e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          CXNIUkHVnFLzDR38hQtoFipItKJpdiIy+E/ft4RLWk8=
Subject key identifier:   E8:3C:E5:6C:75:D5:26:0F:BA:15:90:4B:92:99:1B:E5:40:A7:97:4A
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       03039130A4ABB021F98DADCFC0FFC824190A8992
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa
Signing time:             Fri 13 Feb 2026 22:02:23 +0000
ROA not before:           Fri 13 Feb 2026 21:57:23 +0000
ROA not after:            Fri 12 Feb 2027 22:02:23 +0000
asID:                     269508
IP address blocks:        45.188.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:03:91:30:a4:ab:b0:21:f9:8d:ad:cf:c0:ff:c8:24:19:0a:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Feb 13 21:57:23 2026 GMT
            Not After : Feb 12 22:02:23 2027 GMT
        Subject: CN=E83CE56C75D5260FBA15904B92991BE540A7974A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:56:a1:44:28:2d:31:24:3e:62:c3:26:2c:
                    93:85:87:87:6e:3f:4a:c6:9b:60:db:1d:b6:34:62:
                    93:82:b6:1a:17:b0:66:3a:81:e2:a7:2b:f7:56:32:
                    3b:91:6c:49:d2:e2:4b:b7:13:d7:75:22:79:08:1b:
                    90:91:ce:66:ad:6e:a2:5a:d0:31:78:4e:18:68:cd:
                    ac:7d:df:a9:c4:12:b5:31:74:95:b4:6e:d1:19:09:
                    b0:8b:f0:6e:96:d7:dd:f0:75:f2:9a:ef:21:1b:d4:
                    d0:11:1c:92:96:1f:0b:17:21:60:9d:ab:90:67:cd:
                    5e:ad:d1:2f:0d:0a:cd:de:2c:41:f8:c1:81:cc:b2:
                    72:f3:9a:be:0d:73:08:1e:02:47:4a:12:43:d7:a5:
                    3b:49:06:81:0b:87:ac:6b:1f:1e:d8:0b:d4:22:f3:
                    3a:63:92:42:1a:e5:4e:5d:fe:b4:a3:0a:88:8e:b1:
                    e6:73:a3:e5:39:72:a4:cd:04:bf:57:9c:17:fa:9d:
                    9e:9d:9f:df:82:12:06:58:5d:34:f3:2b:43:fd:45:
                    c9:74:8b:cd:db:5e:65:a9:9b:94:6b:f0:b7:37:bf:
                    de:3f:b4:b3:4a:6e:35:6e:60:ac:0f:18:bd:8c:5f:
                    1a:34:ee:41:9a:82:7e:7b:47:e8:77:ea:1f:0d:94:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:E5:6C:75:D5:26:0F:BA:15:90:4B:92:99:1B:E5:40:A7:97:4A
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:f8:97:3e:cc:81:47:94:42:3f:f7:4e:b7:5c:68:b5:6a:
         de:97:59:2a:f9:88:7c:bc:c0:26:60:9e:4f:e1:d0:d2:d8:dd:
         a0:27:1a:17:62:14:08:6c:d3:33:58:e3:1d:b7:ce:0b:82:84:
         ab:3d:45:63:97:be:f5:70:42:e5:6d:1b:70:1b:b0:2a:e2:94:
         20:71:fe:72:7d:cd:b7:fc:a8:c6:1d:f3:2d:2a:ac:0a:aa:a3:
         11:34:7e:d9:6a:16:af:f9:7a:89:ae:57:c0:70:59:28:fe:a4:
         ad:54:a6:7f:d9:20:7e:53:4b:8d:9a:1f:c7:48:4b:f4:f9:35:
         80:4c:1b:11:92:84:f2:f0:99:a4:79:89:78:38:22:15:f2:68:
         6f:c0:7d:0b:0c:12:db:dd:97:21:57:f1:74:ec:1d:c3:6d:a5:
         2a:83:74:4d:03:fe:78:ec:8b:e8:27:cc:2b:46:bf:03:cd:ab:
         36:d9:63:6d:9b:83:8e:c9:8b:4e:ab:fb:26:86:a2:69:8c:4e:
         e0:30:e4:63:7e:9e:ac:24:80:d6:3f:cb:f3:74:cb:78:8c:0f:
         50:ba:10:56:1d:a1:8e:9f:3a:71:7a:4f:3a:55:b6:45:3b:80:
         fa:a3:8a:d5:d9:bf:75:21:cd:1a:d1:4f:c2:71:f8:7c:12:4a:
         37:31:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:54:57 2026 by rpki-client