Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa
File:                     34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (raw, json)
Hash identifier:          vnDMTtou2M3H+wfHs5hjxL185lzK3e/BlM0ys5z8iTk=
Subject key identifier:   9A:00:F6:6F:2C:D0:67:E1:DD:23:B8:C4:2C:1B:A6:7A:4A:BE:B9:7D
Certificate issuer:       /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial:       3C5C93E5F397FC8633B0CEC0BC0C24FEB05D82F7
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa
Signing time:             Wed 18 Feb 2026 15:01:52 +0000
ROA not before:           Wed 18 Feb 2026 14:56:52 +0000
ROA not after:            Wed 17 Feb 2027 15:01:52 +0000
asID:                     266962
IP address blocks:        45.226.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
                          rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5c:93:e5:f3:97:fc:86:33:b0:ce:c0:bc:0c:24:fe:b0:5d:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Validity
            Not Before: Feb 18 14:56:52 2026 GMT
            Not After : Feb 17 15:01:52 2027 GMT
        Subject: CN=9A00F66F2CD067E1DD23B8C42C1BA67A4ABEB97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:6f:e5:9e:59:90:c8:f2:f5:0f:70:a1:e0:
                    e5:47:53:98:58:ff:95:80:8b:ef:d6:42:c3:91:d3:
                    22:d9:3e:41:5e:e6:4d:2f:2a:8f:04:3a:27:16:96:
                    43:41:c3:a7:5e:d6:6f:f1:c3:85:9b:5e:a1:07:c5:
                    b6:e0:af:ac:9b:a8:45:fc:df:7a:2f:6d:6d:0e:cd:
                    1e:40:39:0f:9d:0e:a6:a4:c4:c1:58:a6:6e:f3:92:
                    aa:95:77:6d:36:ef:e6:a2:39:85:a8:f8:09:eb:ed:
                    c4:a8:14:0d:7f:05:18:74:e8:c2:34:1d:5e:d3:80:
                    e4:47:1c:d2:fc:20:e4:6c:60:8f:58:43:59:0e:0c:
                    4f:82:51:37:07:e5:6d:d3:8b:6e:bf:bc:8c:8b:47:
                    a5:13:cd:82:7a:6c:22:75:be:1c:56:4c:57:8c:85:
                    4c:7c:8e:5d:fe:57:f6:59:0f:6d:d3:c7:cd:86:15:
                    6c:c2:b0:c4:bd:96:79:61:fb:8b:a4:76:62:45:c4:
                    10:94:12:f1:17:0b:7e:2c:87:d3:3d:18:a2:ec:a8:
                    ae:e4:b4:0a:b3:80:e3:9b:0d:10:5d:3d:53:16:ba:
                    df:0a:ca:d8:a5:c1:f7:a3:3a:1d:75:99:5a:e9:e2:
                    8d:ae:8a:a9:56:c8:ff:db:9e:6b:91:a3:c4:a8:7e:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:F6:6F:2C:D0:67:E1:DD:23:B8:C4:2C:1B:A6:7A:4A:BE:B9:7D
            X509v3 Authority Key Identifier:
                keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:0b:2e:04:65:9a:da:92:24:94:77:d4:ea:b8:ce:d5:c5:1b:
         2e:b5:68:24:af:95:98:74:ea:c8:3c:6f:24:3a:f3:61:25:e6:
         00:6a:68:0b:ae:1f:3f:0b:85:26:a4:04:83:50:5a:2d:f6:73:
         30:64:b0:17:62:1c:9f:95:3e:59:6d:17:c9:a9:de:c2:c6:cb:
         54:02:a3:07:e8:db:8b:e1:52:5c:ef:0d:ba:b8:f8:9c:62:f8:
         ff:7b:69:e6:27:c3:09:b3:36:88:e0:63:3a:15:57:dc:81:c5:
         f1:c3:07:3c:37:dd:c8:21:f4:d0:4d:e0:44:71:8f:52:01:e6:
         93:3e:a7:34:e7:2b:4f:67:71:98:e4:ac:08:94:dc:00:b3:c6:
         7d:01:f7:b5:07:ae:83:fc:49:3e:67:55:a7:30:7e:d6:19:c3:
         5c:c9:2b:15:5e:00:5c:ca:e9:9b:35:12:3e:9d:44:55:9c:17:
         90:cb:7e:18:38:66:fd:65:b4:cf:d0:0e:40:4c:05:72:f9:ce:
         9b:5b:46:2b:da:c9:43:78:92:13:25:64:f8:50:16:90:57:31:
         5a:6e:2b:85:04:2d:dc:7b:e6:13:26:91:51:52:db:eb:a9:72:
         30:86:d7:41:52:59:94:47:95:fc:5e:2a:4c:df:fa:fa:61:f0:
         7e:4d:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:35:04 2026 by rpki-client