Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/34352e3232382e3230332e302f32342d3234203d3e20323734373437.roa
File:                     34352e3232382e3230332e302f32342d3234203d3e20323734373437.roa (raw, json)
Hash identifier:          nzlnJLdEn9iH9LKsGTe37lyJ1j+Dw9/w4YZHExIrMkc=
Subject key identifier:   4B:08:28:E5:83:58:3B:C4:85:15:CE:4C:D3:76:1E:BB:5F:02:D7:3D
Certificate issuer:       /CN=766ACB10B74EBAD4A27B8E22CBB4166759F8466F
Certificate serial:       1CB6738C4FF69F285D00F050E673E6DADB5F6CC2
Authority key identifier: 76:6A:CB:10:B7:4E:BA:D4:A2:7B:8E:22:CB:B4:16:67:59:F8:46:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/34352e3232382e3230332e302f32342d3234203d3e20323734373437.roa
Signing time:             Mon 09 Feb 2026 20:26:34 +0000
ROA not before:           Mon 09 Feb 2026 20:21:34 +0000
ROA not after:            Mon 08 Feb 2027 20:26:34 +0000
asID:                     274747
IP address blocks:        45.228.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.crl
                          rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b6:73:8c:4f:f6:9f:28:5d:00:f0:50:e6:73:e6:da:db:5f:6c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766ACB10B74EBAD4A27B8E22CBB4166759F8466F
        Validity
            Not Before: Feb  9 20:21:34 2026 GMT
            Not After : Feb  8 20:26:34 2027 GMT
        Subject: CN=4B0828E583583BC48515CE4CD3761EBB5F02D73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:20:dc:8c:be:8a:4d:25:da:f9:0e:ef:a8:
                    91:a9:2d:78:6e:39:d6:31:ed:b0:2b:3c:5b:95:10:
                    60:a9:d5:e4:5f:77:fa:1a:e6:09:59:2e:6c:38:39:
                    ce:11:3f:81:d8:ab:de:48:46:dd:cd:2f:4a:bd:64:
                    35:fe:77:b0:f9:2b:ed:c1:11:d9:4d:cc:68:1c:08:
                    c6:04:ca:39:4b:83:29:2a:3b:e4:aa:97:08:46:ea:
                    8f:fa:d4:67:c0:32:0c:22:94:5e:d0:fe:88:e2:2b:
                    26:12:81:b4:1b:dc:ff:5c:dc:35:6e:68:bb:da:5e:
                    58:92:8e:9b:a7:4a:9f:52:31:9d:d2:b3:37:91:57:
                    41:c0:37:17:84:47:72:c9:ab:ff:0c:c0:1c:58:d8:
                    d9:0c:bd:7d:d2:c1:e2:b1:a1:6e:0b:d2:be:74:87:
                    b6:b0:08:a1:40:13:3f:10:10:1f:0f:0d:21:17:9d:
                    eb:27:d3:b6:83:b2:4f:9f:39:ef:2b:12:88:03:50:
                    cf:51:4c:03:5e:a1:06:d3:d5:19:79:ef:60:61:3e:
                    f4:f3:96:a8:56:7b:51:1a:06:a4:50:51:66:3e:e4:
                    45:6a:02:57:9c:47:52:3d:00:0c:5d:d9:fc:02:d4:
                    a0:4e:dc:3a:9e:c8:8c:ce:c4:40:79:d5:7d:9a:db:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:08:28:E5:83:58:3B:C4:85:15:CE:4C:D3:76:1E:BB:5F:02:D7:3D
            X509v3 Authority Key Identifier:
                keyid:76:6A:CB:10:B7:4E:BA:D4:A2:7B:8E:22:CB:B4:16:67:59:F8:46:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/34352e3232382e3230332e302f32342d3234203d3e20323734373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:c8:9f:b7:7c:26:33:d0:42:43:c2:96:f2:7a:a4:0c:fd:
         59:9e:19:b1:a4:03:41:7e:93:21:78:36:6e:10:61:d4:ea:c5:
         49:79:ce:20:ef:a9:2b:a9:e8:b6:84:e5:a6:a6:24:96:61:46:
         77:b6:e7:8a:7d:55:f0:32:14:d2:d4:37:0e:38:18:f3:6f:76:
         d5:42:2b:84:3e:bd:ae:fe:14:c6:6c:c5:c6:e5:22:35:6e:91:
         46:bb:42:2b:ce:a1:60:9c:c6:ef:4a:83:68:7a:89:58:99:82:
         48:f8:b4:6d:d4:1e:c1:ac:35:87:00:d4:01:51:a6:29:d3:0e:
         5d:42:a1:35:6f:ea:2b:87:82:92:3a:d8:4a:e2:f6:13:27:4f:
         25:56:52:e7:6d:40:6c:8e:56:ad:b0:b7:2a:73:1e:b5:4f:21:
         c6:03:4a:fb:c4:77:d2:c0:8f:81:2d:08:59:f8:a5:f4:58:49:
         eb:86:41:f5:33:02:28:d5:b2:11:45:92:1b:0b:01:91:49:1d:
         28:10:71:42:77:f4:14:a2:9f:62:c5:60:16:1f:93:17:37:81:
         bc:c1:8f:1f:39:5f:3a:6f:80:e7:4f:ac:6c:72:db:57:df:c6:
         5f:7b:9f:cb:40:4e:a3:89:88:2b:cb:b1:2d:08:8c:fd:57:85:
         11:44:c2:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHLZzjE/2nyhdAPBQ5nPm2ttfbMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2QUNCMTBCNzRFQkFENEEyN0I4RTIyQ0JCNDE2Njc1
OUY4NDY2RjAeFw0yNjAyMDkyMDIxMzRaFw0yNzAyMDgyMDI2MzRaMDMxMTAvBgNV
BAMTKDRCMDgyOEU1ODM1ODNCQzQ4NTE1Q0U0Q0QzNzYxRUJCNUYwMkQ3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLiDcjL6KTSXa+Q7vqJGpLXhu
OdYx7bArPFuVEGCp1eRfd/oa5glZLmw4Oc4RP4HYq95IRt3NL0q9ZDX+d7D5K+3B
EdlNzGgcCMYEyjlLgykqO+SqlwhG6o/61GfAMgwilF7Q/ojiKyYSgbQb3P9c3DVu
aLvaXliSjpunSp9SMZ3SszeRV0HANxeER3LJq/8MwBxY2NkMvX3SweKxoW4L0r50
h7awCKFAEz8QEB8PDSEXnesn07aDsk+fOe8rEogDUM9RTANeoQbT1Rl572BhPvTz
lqhWe1EaBqRQUWY+5EVqAlecR1I9AAxd2fwC1KBO3DqeyIzOxEB51X2a2+bjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSwgo5YNYO8SFFc5M03Yeu18C1z0wHwYDVR0j
BBgwFoAUdmrLELdOutSie44iy7QWZ1n4Rm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdSRm1mWkRIWENqcVBTdjV2N0txVVdvQ3JDbzRTUHNFalczdHdWSEQ0
OGsvMC83NjZBQ0IxMEI3NEVCQUQ0QTI3QjhFMjJDQkI0MTY2NzU5Rjg0NjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NkFDQjEwQjc0RUJBRDRB
MjdCOEUyMkNCQjQxNjY3NTlGODQ2NkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHUkZtZlpESFhDanFQU3Y1djdLcVVXb0NyQ280U1BzRWpXM3R3VkhENDhrLzAv
MzQzNTJlMzIzMjM4MmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzQzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5MswDQYJKoZIhvcNAQELBQADggEBAKVmyJ+3
fCYz0EJDwpbyeqQM/VmeGbGkA0F+kyF4Nm4QYdTqxUl5ziDvqSup6LaE5aamJJZh
Rne254p9VfAyFNLUNw44GPNvdtVCK4Q+va7+FMZsxcblIjVukUa7QivOoWCcxu9K
g2h6iViZgkj4tG3UHsGsNYcA1AFRpinTDl1CoTVv6iuHgpI62Eri9hMnTyVWUudt
QGyOVq2wtypzHrVPIcYDSvvEd9LAj4EtCFn4pfRYSeuGQfUzAijVshFFkhsLAZFJ
HSgQcUJ39BSin2LFYBYfkxc3gbzBjx85XzpvgOdPrGxy21ffxl97n8tATqOJiCvL
sS0IjP1XhRFEwhk=
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:06:23 2026 by rpki-client