Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa
File:                     34352e3232362e35362e302f32332d3234203d3e203532353733.roa (raw, json)
Hash identifier:          AzmcAuclrZgim3gf7aofOZW4TVYJbrRD4nmr57URfto=
Subject key identifier:   D5:0D:0F:2F:5A:5F:5A:19:57:76:7C:A7:99:B2:7D:98:7E:F7:4F:35
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       4EB6158F644A6251EF6D7382BCEE2E1B60684CBB
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa
Signing time:             Thu 19 Feb 2026 14:28:01 +0000
ROA not before:           Thu 19 Feb 2026 14:23:01 +0000
ROA not after:            Thu 18 Feb 2027 14:28:01 +0000
asID:                     52573
IP address blocks:        45.226.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b6:15:8f:64:4a:62:51:ef:6d:73:82:bc:ee:2e:1b:60:68:4c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Feb 19 14:23:01 2026 GMT
            Not After : Feb 18 14:28:01 2027 GMT
        Subject: CN=D50D0F2F5A5F5A1957767CA799B27D987EF74F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:20:ba:bc:9e:85:2b:b1:cc:db:52:f2:ac:
                    2e:16:78:97:05:77:62:73:ae:2f:d0:2a:ef:39:b1:
                    f1:73:3a:04:90:95:81:88:87:cc:d4:0c:e2:0a:7a:
                    70:54:e0:76:a3:13:64:f9:9e:74:e5:ad:0d:82:e1:
                    73:7d:f7:9d:5f:bd:a3:a7:cd:fc:2a:b2:12:a7:f8:
                    ee:a0:3f:f9:7c:99:9e:4e:62:b8:7a:0a:37:71:7a:
                    09:21:65:e6:57:fe:b3:8e:45:42:48:65:97:88:fe:
                    1f:a0:97:d2:4f:69:05:dd:27:6e:5c:4c:40:4b:91:
                    2a:37:92:4a:e5:40:f3:a5:c8:af:c0:2c:94:eb:35:
                    f5:be:14:46:a2:14:34:7c:41:53:b5:50:a5:51:f1:
                    ab:5b:26:00:0d:58:da:67:f8:4e:ac:ba:c6:d7:e1:
                    00:1b:b2:be:06:ab:5e:de:d6:c1:c1:c4:1e:ef:0d:
                    0b:c2:35:1e:39:51:9d:46:d0:d6:ee:bd:e0:9f:50:
                    7f:11:50:ec:cd:b0:52:44:5e:ae:d6:35:d5:37:ab:
                    9b:76:34:4d:e8:18:19:42:1a:43:65:66:86:bb:bb:
                    a2:12:d5:a5:0c:24:c2:63:e2:cc:e3:cb:cb:6d:9a:
                    f8:9a:ce:34:8c:c0:22:ff:65:c1:d7:ed:dd:59:94:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:0F:2F:5A:5F:5A:19:57:76:7C:A7:99:B2:7D:98:7E:F7:4F:35
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:74:7f:a2:93:cb:21:85:0c:af:1c:60:8b:fe:da:86:48:af:
         f2:57:3a:71:df:a6:21:2e:10:31:75:13:e2:64:6a:d1:44:12:
         aa:a1:55:e4:9d:61:75:0d:86:fc:ec:69:9e:4a:fb:ce:27:d0:
         ae:88:c6:ea:30:b6:df:cb:71:f5:2a:3b:37:74:e1:92:1f:33:
         d0:7c:71:02:fa:d1:1d:63:11:e0:8b:ea:95:bd:2b:79:9e:5f:
         3f:15:53:80:55:fd:2d:d3:e0:b2:eb:60:da:b5:2e:0e:40:3d:
         5d:91:3a:82:f0:0f:b6:37:34:5c:bd:c6:1e:45:b5:45:9c:3a:
         c0:32:73:72:41:d0:fb:47:9e:97:68:ba:5b:43:d0:e3:e0:ea:
         2f:3a:53:b9:4c:9b:b9:8e:3e:aa:06:6b:15:a7:e7:d0:53:16:
         09:34:6b:e3:41:66:f1:39:ae:ab:ed:41:36:1f:7a:e6:4d:72:
         4e:f2:cf:7c:1a:5e:f3:78:ec:0c:52:5e:ae:f6:2a:c6:f6:2a:
         90:ef:e1:4b:28:e1:21:c2:b2:24:34:27:32:24:98:53:02:13:
         39:81:30:47:79:be:15:37:5f:67:3d:1f:f7:81:63:eb:5a:d3:
         49:ca:58:62:5e:5f:f4:44:f6:e0:06:3c:c3:dc:34:c6:15:a4:
         a3:e1:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:04 2026 by rpki-client