Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3233203d3e20323638343037.roa
File:                     34352e3136302e39382e302f32332d3233203d3e20323638343037.roa (raw, json)
Hash identifier:          LQBJNug1DAERwKaYGzkq9HkMEm0+0P8w0gGD1gwLtOw=
Subject key identifier:   53:90:31:BD:AA:37:91:F5:80:25:D2:DF:7B:2A:A8:F1:81:B4:EB:81
Certificate issuer:       /CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
Certificate serial:       676EEAC5FD8CDE556002E587497060D45A80C4BB
Authority key identifier: EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3233203d3e20323638343037.roa
Signing time:             Wed 28 Jan 2026 14:01:23 +0000
ROA not before:           Wed 28 Jan 2026 13:56:23 +0000
ROA not after:            Wed 27 Jan 2027 14:01:23 +0000
asID:                     268407
IP address blocks:        45.160.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl
                          rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6e:ea:c5:fd:8c:de:55:60:02:e5:87:49:70:60:d4:5a:80:c4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
        Validity
            Not Before: Jan 28 13:56:23 2026 GMT
            Not After : Jan 27 14:01:23 2027 GMT
        Subject: CN=539031BDAA3791F58025D2DF7B2AA8F181B4EB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:3b:2c:58:20:62:10:52:b8:49:da:46:0e:
                    c4:72:14:ad:1a:e3:d2:bb:a5:7a:2e:eb:ad:3f:cb:
                    48:3f:dd:92:40:96:38:56:86:c6:f5:9b:08:13:fc:
                    fb:ed:d4:dc:3b:8c:87:86:b6:35:00:9e:7b:56:84:
                    fd:15:07:15:4d:ec:84:a5:d1:04:72:0d:7c:8b:a8:
                    d4:83:4b:14:a8:64:29:f3:68:88:9e:b2:c8:79:38:
                    78:ff:13:a7:a0:9b:f5:58:8b:7b:87:34:9f:54:0d:
                    60:7c:6b:16:52:25:d6:7f:9c:7f:ab:74:ff:f6:2a:
                    a6:29:9b:d4:22:97:85:c7:e8:23:d7:1c:19:b5:d1:
                    50:0b:6e:ae:3c:92:6d:8e:5c:73:16:1d:9a:ea:51:
                    a8:eb:f5:e2:fa:cc:2e:ac:a2:5e:70:ca:86:c8:27:
                    69:a6:3a:03:ad:40:c9:f9:66:bb:a7:3a:86:5c:05:
                    4d:6f:aa:9f:84:a9:f8:6a:02:4b:d1:a4:6e:25:f5:
                    c8:77:32:66:76:27:2d:7b:b9:c7:16:ba:55:ed:d8:
                    7d:83:69:98:97:e7:61:9a:9e:ea:d9:b7:e6:f6:5a:
                    91:73:20:a6:23:ed:74:cc:57:0d:e3:87:b0:c7:f2:
                    e7:8d:3d:04:ae:63:3a:32:76:9d:e1:01:75:c6:a9:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:90:31:BD:AA:37:91:F5:80:25:D2:DF:7B:2A:A8:F1:81:B4:EB:81
            X509v3 Authority Key Identifier:
                keyid:EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3233203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:88:c3:ba:20:74:bd:b3:64:c7:a0:78:0a:60:49:6d:eb:
         87:84:87:7c:79:d5:29:40:44:6f:e1:75:c8:4a:75:a1:95:2d:
         c5:d9:47:47:eb:8a:33:e7:49:76:80:d0:f2:a8:40:bc:46:b9:
         b9:a3:58:8e:8c:82:fa:31:72:7c:0d:bf:3b:c7:e0:8c:0b:97:
         11:6b:8a:9b:2e:30:6a:65:a2:b2:ee:96:ce:5f:b5:78:97:3b:
         db:cb:66:05:f8:66:e9:88:95:f2:39:a6:66:22:d0:92:11:71:
         67:ce:18:8f:f5:97:00:9e:89:d7:7d:d9:b7:8a:4a:d0:6d:94:
         14:27:cc:7d:a4:e7:4b:6a:eb:38:0e:66:4d:70:b6:c6:fd:42:
         42:e5:27:79:b7:b4:a8:55:0d:1e:1e:5f:cb:7d:05:6a:35:34:
         99:31:1f:29:fd:3a:5a:18:6d:5a:41:82:c4:ba:dd:aa:d9:a0:
         8b:98:95:73:8b:1b:04:65:9e:1f:68:9f:01:14:71:80:4a:42:
         b2:1d:27:75:b6:6f:ff:c5:3b:da:f0:a1:5e:35:78:8b:81:ee:
         15:57:7f:49:35:76:dc:69:d4:da:af:02:09:6a:16:78:1c:f9:
         ee:53:3b:c5:64:5b:d5:d8:34:13:5d:5a:17:eb:22:fd:75:4d:
         a2:d3:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:55:40 2026 by rpki-client