Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa (raw, json)
Hash identifier:          +xRuOAx4kYFsIBblyjpmaU8YAoStJPUPYqNyDZq4El8=
Subject key identifier:   23:03:42:67:AE:86:9D:1A:C7:38:6E:2A:19:BC:C9:22:8E:C2:EC:CF
Certificate issuer:       /CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
Certificate serial:       0FDA455B5A82C28840568EB0561842582A05D9F0
Authority key identifier: 86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa
Signing time:             Mon 23 Feb 2026 19:22:29 +0000
ROA not before:           Mon 23 Feb 2026 19:17:29 +0000
ROA not after:            Mon 22 Feb 2027 19:22:29 +0000
asID:                     269595
IP address blocks:        45.188.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:da:45:5b:5a:82:c2:88:40:56:8e:b0:56:18:42:58:2a:05:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
        Validity
            Not Before: Feb 23 19:17:29 2026 GMT
            Not After : Feb 22 19:22:29 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:42:93:7a:21:1d:9c:34:ad:e6:4f:1d:d9:
                    72:42:4d:b1:ac:4b:c9:30:8a:6f:fe:58:2c:3c:9b:
                    c0:25:fc:18:6f:53:2e:a5:fb:33:02:59:2e:30:e1:
                    74:57:b6:d4:00:1e:0e:98:ca:75:18:fd:1d:2d:bb:
                    04:70:49:8d:a3:fd:29:93:bf:5c:49:e4:23:0b:23:
                    11:ab:09:e7:7c:ac:f4:97:f8:13:d5:29:7b:10:27:
                    52:e9:96:bc:5c:c7:bb:b8:ba:5c:0f:44:cb:64:cc:
                    6b:27:e6:42:e7:30:51:77:02:c8:02:ed:83:f4:ac:
                    0b:7a:ac:cb:40:36:79:4f:f5:67:a8:fa:8e:07:2f:
                    02:97:f6:f8:80:df:d5:fb:42:48:e1:bb:f1:93:86:
                    b1:d0:14:0c:b8:22:b4:f6:8e:0e:a9:35:4e:25:d5:
                    19:3b:5d:24:7b:09:6a:89:d8:df:f0:e9:11:58:02:
                    a6:0c:33:b3:f8:32:61:6f:cd:27:39:78:f0:ea:e1:
                    1a:4e:a8:3c:38:ed:10:5e:a5:40:c2:03:93:45:08:
                    ac:5e:0a:2f:89:e9:93:e6:a2:b4:51:26:d7:25:d8:
                    05:8e:38:6f:9d:e1:bf:af:39:49:67:0e:db:74:a5:
                    8a:47:6d:8f:9b:38:90:23:b8:48:a8:fb:d3:f5:50:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:42:67:AE:86:9D:1A:C7:38:6E:2A:19:BC:C9:22:8E:C2:EC:CF
            X509v3 Authority Key Identifier:
                keyid:86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:6a:c7:3e:a5:65:9c:18:3b:3e:11:5e:9a:b4:4d:06:58:
         ec:35:be:7b:ce:ce:ba:65:03:3e:38:80:b9:0e:de:10:4e:42:
         36:35:54:4e:5e:1b:90:f9:70:f7:9b:0f:57:05:3c:34:2b:25:
         ed:df:61:b2:ed:a7:61:f1:9e:29:ff:53:dc:c3:b7:7a:24:37:
         25:31:6f:8e:3e:62:16:ba:39:53:17:e0:61:f3:48:7e:f4:a7:
         61:9b:02:3d:3b:4a:96:4c:77:bc:37:80:2c:fd:36:92:11:1d:
         52:93:8f:6b:7d:d4:ce:1a:02:3c:a5:92:fc:bd:e4:aa:ca:fa:
         9e:10:80:8f:19:17:6c:f3:56:da:5a:ac:24:7e:46:f3:83:07:
         f3:26:96:97:21:d6:9c:9f:77:2c:14:9a:46:f8:b5:32:6e:c7:
         44:61:75:0b:9b:ee:b7:c8:40:31:23:3e:98:5a:72:c8:65:9b:
         03:2b:45:e3:eb:cd:8c:74:e0:03:ce:5c:fe:4c:73:c2:0e:76:
         47:e5:d6:af:1a:6e:af:c3:ae:79:96:71:cd:41:49:2a:74:a2:
         d8:fd:4a:b8:84:9f:fd:96:ca:59:07:17:18:0e:f3:d7:3c:e9:
         66:fc:57:e1:44:8f:86:3b:af:ef:fc:05:5e:26:dc:c4:09:ea:
         af:07:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:27 2026 by rpki-client