Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33392e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          fQK3oZ3mYuNGJ6xh7SqVR9SDJcHeuElEfxufkEglT7U=
Subject key identifier:   66:D5:48:58:DB:43:B7:99:00:2C:4D:5F:5B:E5:A0:E3:18:B2:D9:21
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       41355E483DA1F59E5CD41823DBC0A60E85C12753
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa
Signing time:             Fri 13 Feb 2026 22:02:25 +0000
ROA not before:           Fri 13 Feb 2026 21:57:25 +0000
ROA not after:            Fri 12 Feb 2027 22:02:25 +0000
asID:                     269508
IP address blocks:        45.188.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:5e:48:3d:a1:f5:9e:5c:d4:18:23:db:c0:a6:0e:85:c1:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Feb 13 21:57:25 2026 GMT
            Not After : Feb 12 22:02:25 2027 GMT
        Subject: CN=66D54858DB43B799002C4D5F5BE5A0E318B2D921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:36:0f:90:41:e1:c8:81:4a:1e:79:f6:43:
                    86:c4:7f:58:72:3a:99:34:f1:6e:8c:a0:6b:c8:38:
                    1c:1f:32:73:00:79:7b:72:1a:69:d1:31:1a:dc:d0:
                    04:d9:7f:c4:0a:1e:e1:bd:6c:46:f9:ee:39:0c:b1:
                    59:11:78:5d:35:7d:6c:17:33:c9:e0:9c:ae:52:a8:
                    58:77:90:03:23:5a:c4:4b:10:21:d7:79:e2:00:1b:
                    c0:fc:d8:a0:36:31:4b:a6:4a:a2:0e:6d:b8:ec:d6:
                    7a:11:51:18:5b:e1:79:4a:14:83:c7:55:0b:c8:a2:
                    fa:aa:00:74:3d:a5:8c:c8:bd:a5:14:d6:d6:c5:37:
                    db:a6:8e:fa:33:50:33:c9:32:33:ec:a6:14:d3:57:
                    85:73:ad:46:a1:34:73:d8:dd:1f:42:0d:1b:9a:2f:
                    a1:fe:f4:31:d5:38:b3:53:9c:7d:58:24:08:48:2c:
                    8d:84:e6:b4:58:ad:f2:6d:b4:50:1d:f5:47:3d:56:
                    4f:16:97:91:be:58:88:7e:46:55:e2:2b:be:8c:3c:
                    2c:93:a7:85:2d:1d:42:3f:ea:cf:88:86:e2:df:10:
                    64:dc:df:6a:e0:eb:ea:44:e5:42:e9:35:8d:74:69:
                    48:02:78:8b:bf:e1:97:bf:73:52:fa:99:4b:41:7b:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:48:58:DB:43:B7:99:00:2C:4D:5F:5B:E5:A0:E3:18:B2:D9:21
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:64:8c:d3:da:54:45:10:f2:bb:00:79:3e:72:24:2b:d6:f6:
         a4:3e:e4:c5:0d:62:d8:98:e3:21:b1:db:38:23:f8:6f:95:da:
         50:e3:8b:14:56:25:d1:11:20:02:65:1d:f2:43:f7:0c:70:83:
         e1:25:fa:28:20:48:89:72:17:bb:c8:9b:e4:59:96:20:4c:31:
         e1:f4:44:b3:a1:d9:00:99:00:25:d8:c3:90:74:8f:7b:67:a7:
         a8:b3:22:23:61:43:d1:31:8a:83:f8:92:cb:08:0f:5f:71:1b:
         0d:d1:45:6e:92:80:22:b6:ca:16:29:cd:0e:c4:3a:f5:e7:15:
         5f:99:1d:cb:46:e2:73:1a:94:55:6f:47:e6:74:99:a7:47:ab:
         6c:27:f6:da:62:40:6a:fe:28:63:a6:c6:04:b9:ce:63:03:59:
         67:f1:2c:aa:33:74:20:d8:0a:93:d0:53:47:e0:72:4c:e9:e6:
         a1:cb:bf:11:c1:05:c6:1e:c4:88:c0:7b:b0:53:67:42:8c:af:
         86:cb:ab:39:61:b3:dc:f7:0b:d4:72:91:8a:3c:b2:92:8b:a2:
         1f:8e:50:69:60:5c:c6:cd:2a:b5:7d:94:5f:df:c7:f1:78:c8:
         54:50:22:81:f8:f7:d4:56:e6:e3:77:90:4b:df:68:9f:a7:05:
         7f:60:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:54:53 2026 by rpki-client