Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3134382e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          o9n8HYF43H99GftI8xCR0cSuWGYPaSwOUqhtPbVAtX0=
Subject key identifier:   AB:F0:FB:CC:91:C7:3D:A2:6B:36:87:E6:28:AA:EC:1D:17:AE:9B:B5
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       2DAF13557B824DD1B096C3E11EE8DC77C29DB8AB
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32342d3234203d3e20323637393633.roa
Signing time:             Thu 19 Feb 2026 20:18:57 +0000
ROA not before:           Thu 19 Feb 2026 20:13:57 +0000
ROA not after:            Thu 18 Feb 2027 20:18:57 +0000
asID:                     267963
IP address blocks:        45.166.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:af:13:55:7b:82:4d:d1:b0:96:c3:e1:1e:e8:dc:77:c2:9d:b8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb 19 20:13:57 2026 GMT
            Not After : Feb 18 20:18:57 2027 GMT
        Subject: CN=ABF0FBCC91C73DA26B3687E628AAEC1D17AE9BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:f9:6d:eb:05:d7:9e:d5:d3:87:1c:ed:81:
                    c9:66:92:82:e3:a9:45:ea:6e:f9:81:c5:06:38:70:
                    a8:51:a2:3a:ec:a5:f0:6d:74:c0:41:ed:1f:9e:2a:
                    95:0b:f6:dc:71:24:87:7f:e8:57:c7:a5:3f:79:62:
                    5f:d2:41:8d:aa:c4:26:99:ee:1b:e4:3d:d0:82:ea:
                    5e:4a:f7:8e:c4:7f:1c:ce:26:b5:82:d3:a2:28:91:
                    02:ee:7d:ec:a9:5e:b3:26:32:7e:aa:31:13:2c:ac:
                    91:d6:0b:e1:d5:d1:33:9b:c6:b8:db:2c:81:6f:e1:
                    03:9d:ab:4d:e6:fa:dc:0f:b4:b2:15:3a:32:54:b1:
                    99:b0:d4:39:56:6e:a4:2f:b9:ee:fe:ae:de:bb:81:
                    fe:ce:8e:b1:ce:08:84:01:48:b6:f1:78:6c:b1:b0:
                    d2:c6:7b:fd:5f:80:97:ea:5f:f4:44:9d:60:0f:13:
                    8b:67:37:16:d4:ad:84:45:eb:a9:20:60:ec:0c:13:
                    7c:b1:3e:c0:e7:6d:5c:75:47:da:cc:9a:a8:50:e8:
                    29:48:c8:d6:a5:7d:e7:0a:20:20:c6:c7:f1:e6:c3:
                    d6:e8:cb:90:65:3e:59:68:62:50:14:60:4a:17:2d:
                    7d:6a:a0:63:58:be:50:6a:9b:5e:cb:3d:0a:12:7b:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:FB:CC:91:C7:3D:A2:6B:36:87:E6:28:AA:EC:1D:17:AE:9B:B5
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:71:f8:64:08:26:1c:16:8c:cc:63:38:e6:3a:0a:eb:4a:
         0e:c4:74:ea:89:a6:0b:5a:bd:01:c8:c2:d4:c5:bf:ee:27:32:
         27:1c:1a:6c:35:ab:c8:c0:23:6b:03:9d:57:c8:91:3c:4c:82:
         75:3e:af:06:a2:b0:89:e9:06:f4:c5:6d:e9:86:70:a8:43:ef:
         11:08:fa:71:5a:a5:54:93:b7:67:7c:67:7b:f1:84:95:d7:13:
         8b:76:dc:93:96:60:c7:9a:f2:b6:60:6b:60:2f:1b:68:67:91:
         d0:5a:7c:87:96:39:ee:69:aa:d0:22:af:e7:15:ee:45:b7:83:
         19:16:1a:ed:96:7b:49:fc:ae:d2:99:c1:07:e2:3a:a1:ab:7d:
         fc:44:38:79:6b:18:87:1c:c7:95:15:14:82:81:43:27:18:08:
         3b:8d:7d:f2:f3:90:9e:86:4f:76:e7:ba:8d:07:50:9c:f4:8a:
         c9:9f:f3:f7:e2:0f:d7:bd:61:82:cd:2e:81:41:4e:95:a8:17:
         9a:8d:f3:70:81:5a:e1:5b:73:4e:43:3c:4a:5b:01:a8:ef:b9:
         c2:ce:4e:58:9b:72:b8:c7:53:45:9b:e6:72:83:f6:4e:ef:22:
         83:62:70:0e:62:4c:b4:61:20:07:ab:3e:79:44:93:ba:d7:5b:
         e2:89:b3:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULa8TVXuCTdGwlsPhHujcd8KduKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzNTA1NUVFODRDQ0ZGMkYzODMzNjQxMTVBNDAxRkU4
NTM1RUM3NDAeFw0yNjAyMTkyMDEzNTdaFw0yNzAyMTgyMDE4NTdaMDMxMTAvBgNV
BAMTKEFCRjBGQkNDOTFDNzNEQTI2QjM2ODdFNjI4QUFFQzFEMTdBRTlCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCINPlt6wXXntXThxztgclmkoLj
qUXqbvmBxQY4cKhRojrspfBtdMBB7R+eKpUL9txxJId/6FfHpT95Yl/SQY2qxCaZ
7hvkPdCC6l5K947EfxzOJrWC06IokQLufeypXrMmMn6qMRMsrJHWC+HV0TObxrjb
LIFv4QOdq03m+twPtLIVOjJUsZmw1DlWbqQvue7+rt67gf7OjrHOCIQBSLbxeGyx
sNLGe/1fgJfqX/REnWAPE4tnNxbUrYRF66kgYOwME3yxPsDnbVx1R9rMmqhQ6ClI
yNalfecKICDGx/Hmw9boy5BlPlloYlAUYEoXLX1qoGNYvlBqm17LPQoSews7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq/D7zJHHPaJrNofmKKrsHReum7UwHwYDVR0j
BBgwFoAUKjUFXuhMz/LzgzZBFaQB/oU17HQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzRFOVpHNDd6V1FqanpCRDlCaXFWSFRza0tpMnpSV3R3MTN5Q0VDR0Vx
ZXQvMC8yQTM1MDU1RUU4NENDRkYyRjM4MzM2NDExNUE0MDFGRTg1MzVFQzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzUwNTVFRTg0Q0NGRjJG
MzgzMzY0MTE1QTQwMUZFODUzNUVDNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RTlaRzQ3eldRamp6QkQ5QmlxVkhUc2tLaTJ6Uld0dzEzeUNFQ0dFcWV0LzAv
MzQzNTJlMzEzNjM2MmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtppQwDQYJKoZIhvcNAQELBQADggEBADzfcfhk
CCYcFozMYzjmOgrrSg7EdOqJpgtavQHIwtTFv+4nMiccGmw1q8jAI2sDnVfIkTxM
gnU+rwaisInpBvTFbemGcKhD7xEI+nFapVSTt2d8Z3vxhJXXE4t23JOWYMea8rZg
a2AvG2hnkdBafIeWOe5pqtAir+cV7kW3gxkWGu2We0n8rtKZwQfiOqGrffxEOHlr
GIccx5UVFIKBQycYCDuNffLzkJ6GT3bnuo0HUJz0ismf8/fiD9e9YYLNLoFBTpWo
F5qN83CBWuFbc05DPEpbAajvucLOTlibcrjHU0Wb5nKD9k7vIoNicA5iTLRhIAer
PnlEk7rXW+KJsxU=
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:11 2026 by rpki-client