Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/34352e3233352e3137362e302f32322d3234203d3e20323638313931.roa
File:                     34352e3233352e3137362e302f32322d3234203d3e20323638313931.roa (raw, json)
Hash identifier:          hnXd/iOdH4JXns5fg33bWFWuefMrhwcxY+wt+pJ/bt4=
Subject key identifier:   35:0D:D9:E8:43:4A:22:F7:E3:68:B7:77:03:94:7B:05:59:98:3C:B0
Certificate issuer:       /CN=FB312B695002991692AA256D1A3BB7199954FBB8
Certificate serial:       6F6659F55A1B3B73493F6C0ED684BAA0B6A1129D
Authority key identifier: FB:31:2B:69:50:02:99:16:92:AA:25:6D:1A:3B:B7:19:99:54:FB:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB312B695002991692AA256D1A3BB7199954FBB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/34352e3233352e3137362e302f32322d3234203d3e20323638313931.roa
Signing time:             Wed 11 Feb 2026 14:58:42 +0000
ROA not before:           Wed 11 Feb 2026 14:53:42 +0000
ROA not after:            Wed 10 Feb 2027 14:58:42 +0000
asID:                     268191
IP address blocks:        45.235.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/FB312B695002991692AA256D1A3BB7199954FBB8.crl
                          rsync://rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/FB312B695002991692AA256D1A3BB7199954FBB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB312B695002991692AA256D1A3BB7199954FBB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:66:59:f5:5a:1b:3b:73:49:3f:6c:0e:d6:84:ba:a0:b6:a1:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB312B695002991692AA256D1A3BB7199954FBB8
        Validity
            Not Before: Feb 11 14:53:42 2026 GMT
            Not After : Feb 10 14:58:42 2027 GMT
        Subject: CN=350DD9E8434A22F7E368B77703947B0559983CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:7d:87:19:b4:3e:46:f5:3b:11:61:ad:16:
                    61:fd:23:f8:da:7b:f4:82:6c:ad:1d:43:1f:fa:17:
                    0f:af:0c:26:fe:9b:4c:c9:df:7e:5d:f1:72:e9:61:
                    34:e7:28:ec:9f:1b:b5:bf:b0:b2:3a:dd:4b:d5:0b:
                    3f:7d:c3:14:68:e8:dd:99:9e:54:50:b2:56:93:b5:
                    ef:53:85:e9:43:1b:71:cd:19:5e:07:eb:82:a6:66:
                    01:72:95:27:e5:6f:e7:ae:eb:c7:4c:34:df:a1:64:
                    8f:a2:c1:c4:15:23:3e:7d:76:0f:0a:95:c0:30:92:
                    2d:a7:aa:72:28:58:89:ea:9f:71:89:ce:7a:6f:be:
                    c1:70:f3:b6:1d:8b:a4:c4:aa:18:6b:ac:31:ea:f2:
                    95:2b:d5:48:c9:56:f4:1a:ec:6c:f5:e3:ea:e2:59:
                    36:ef:f8:99:e9:0c:ac:9b:43:50:2e:60:de:88:a2:
                    4a:71:7b:17:2c:50:49:fd:bc:9d:39:d0:8d:0a:c8:
                    c1:34:ba:a7:fb:ba:30:43:46:2c:08:e3:05:19:5b:
                    01:4b:26:32:5a:b7:e6:3a:b0:74:b5:cc:86:0f:32:
                    aa:11:3c:27:90:a2:78:aa:08:96:87:2b:cf:04:22:
                    95:88:21:bf:f8:87:48:88:c5:33:8b:9e:04:2e:76:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:D9:E8:43:4A:22:F7:E3:68:B7:77:03:94:7B:05:59:98:3C:B0
            X509v3 Authority Key Identifier:
                keyid:FB:31:2B:69:50:02:99:16:92:AA:25:6D:1A:3B:B7:19:99:54:FB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/FB312B695002991692AA256D1A3BB7199954FBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB312B695002991692AA256D1A3BB7199954FBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/coyaHgm6dYt8zRHpKJYE4e82VSydzK14CiTYmrPaHgA/0/34352e3233352e3137362e302f32322d3234203d3e20323638313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:23:30:34:88:f2:66:a9:82:96:b1:4b:1a:00:54:08:9a:
         d7:3f:56:b2:ef:76:c9:62:a2:1d:e4:62:aa:d3:d1:b5:b6:0a:
         4d:50:18:05:b9:0e:98:21:34:6a:82:ba:6e:99:9f:8f:27:3f:
         67:7b:db:6d:57:b3:b1:c7:9c:3c:e2:1e:f2:da:25:04:b7:6a:
         b5:7c:d7:60:6b:2a:16:1e:1d:20:f2:f6:bc:95:ca:77:4c:a3:
         c4:c9:bb:43:65:71:b4:d4:fb:df:e2:2e:b6:74:b7:47:be:75:
         9b:11:0b:28:38:f6:bb:25:ce:38:4a:50:44:96:c9:c4:c1:c7:
         ef:70:5e:e1:ff:5f:7b:e9:c2:fb:18:36:b0:20:58:93:18:75:
         62:72:6b:42:4b:cc:81:3b:6d:df:d2:a9:29:30:a6:a5:9c:53:
         c3:cd:07:a3:e8:5b:96:d8:07:f1:f9:03:b5:cd:3e:54:61:71:
         61:b1:96:07:f1:5e:34:f8:f8:a1:7a:15:f7:0e:65:ae:05:24:
         85:58:93:ac:fc:55:c1:9d:06:6d:f4:78:07:19:d9:fd:9d:a3:
         dc:b7:52:ce:44:de:3b:10:c9:1a:c7:4a:bf:21:bc:8b:c0:3e:
         25:3b:c1:32:4b:08:6c:74:5f:90:e8:81:4c:93:cd:4c:2b:93:
         87:30:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:36 2026 by rpki-client