Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          M7SjqH/PgFCRRuutxX0q5LCpjFFDdzE4na8u9cXfr9k=
Subject key identifier:   2D:77:4D:BA:ED:84:D1:D0:54:28:6B:7B:B1:03:D8:C3:8A:43:86:49
Certificate issuer:       /CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
Certificate serial:       21B660BCDE143259A9FD343A681C0D131D9AFA65
Authority key identifier: 86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
Signing time:             Mon 23 Feb 2026 19:22:29 +0000
ROA not before:           Mon 23 Feb 2026 19:17:29 +0000
ROA not after:            Mon 22 Feb 2027 19:22:29 +0000
asID:                     269595
IP address blocks:        45.188.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b6:60:bc:de:14:32:59:a9:fd:34:3a:68:1c:0d:13:1d:9a:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
        Validity
            Not Before: Feb 23 19:17:29 2026 GMT
            Not After : Feb 22 19:22:29 2027 GMT
        Subject: CN=3082010A0282010100C7C896F4ACA1B7CE66A4B8E81D2EC849210E3DBFA58C1459F881160C3D987FA9670C79BEBD8C45D37BDE20ECBE9EF6D96BC28397A9550EDD6A3D9F9CF15A668C5F430D1BE38B5D9E95B49EE7661C79AAEC56171D8531F52757E01379935B3CEE5A262B2992D943F6D4657DBE348753A3D17A6B2B56968F2556258B7BBEFF493C65FD29721FF61EC3C3AFF3B630A933CA4451122380F344C4D86EF97C490BEB28BE1FE3C18AC78CA1E65C9D8B85E1145C1B2D266E121F45325A91BCA828E0058691CAA4ED7953151FF92F3CCA2800D758F3B3E30BB0817B2B0795E87652C8E57EE9A602BC837E3FB3F7F728C211EE5C8504C13F23123A51EC695188EC8F2384E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:96:f4:ac:a1:b7:ce:66:a4:b8:e8:1d:2e:
                    c8:49:21:0e:3d:bf:a5:8c:14:59:f8:81:16:0c:3d:
                    98:7f:a9:67:0c:79:be:bd:8c:45:d3:7b:de:20:ec:
                    be:9e:f6:d9:6b:c2:83:97:a9:55:0e:dd:6a:3d:9f:
                    9c:f1:5a:66:8c:5f:43:0d:1b:e3:8b:5d:9e:95:b4:
                    9e:e7:66:1c:79:aa:ec:56:17:1d:85:31:f5:27:57:
                    e0:13:79:93:5b:3c:ee:5a:26:2b:29:92:d9:43:f6:
                    d4:65:7d:be:34:87:53:a3:d1:7a:6b:2b:56:96:8f:
                    25:56:25:8b:7b:be:ff:49:3c:65:fd:29:72:1f:f6:
                    1e:c3:c3:af:f3:b6:30:a9:33:ca:44:51:12:23:80:
                    f3:44:c4:d8:6e:f9:7c:49:0b:eb:28:be:1f:e3:c1:
                    8a:c7:8c:a1:e6:5c:9d:8b:85:e1:14:5c:1b:2d:26:
                    6e:12:1f:45:32:5a:91:bc:a8:28:e0:05:86:91:ca:
                    a4:ed:79:53:15:1f:f9:2f:3c:ca:28:00:d7:58:f3:
                    b3:e3:0b:b0:81:7b:2b:07:95:e8:76:52:c8:e5:7e:
                    e9:a6:02:bc:83:7e:3f:b3:f7:f7:28:c2:11:ee:5c:
                    85:04:c1:3f:23:12:3a:51:ec:69:51:88:ec:8f:23:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:4D:BA:ED:84:D1:D0:54:28:6B:7B:B1:03:D8:C3:8A:43:86:49
            X509v3 Authority Key Identifier:
                keyid:86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:70:4e:ba:c4:94:38:96:3a:f6:eb:fd:56:6f:d7:dd:e4:31:
         0e:74:47:89:3c:a0:6a:87:c5:4c:db:78:2c:e9:3f:bd:4c:be:
         d5:87:26:8c:e2:dd:90:4a:aa:d4:b1:ea:fa:04:59:48:8b:02:
         7c:5d:1b:75:c8:00:f1:9e:66:37:fe:77:23:96:22:79:aa:93:
         cc:d1:e5:d6:92:1f:5e:bc:12:7e:cb:39:0c:9f:8d:45:40:57:
         d6:3b:15:2d:10:75:15:5c:d2:3f:3e:d6:1b:fa:2f:b1:36:e6:
         3c:2e:74:02:ce:82:b3:a1:9a:d6:ad:36:ed:be:33:59:03:b7:
         3e:c4:87:20:d2:89:3b:f9:41:5a:8e:d6:03:f2:c0:b5:65:d0:
         84:27:80:01:ec:cc:d7:9c:ab:b8:1b:ea:0d:23:fd:d8:ed:a1:
         1d:b6:53:de:58:6c:99:cb:d9:4b:b9:da:b8:db:89:bd:3c:73:
         e9:03:28:06:d4:c3:10:28:75:27:6d:ff:2e:01:78:99:7a:ae:
         00:21:3e:45:7d:ce:e4:57:29:93:b2:49:ac:38:97:97:fe:a6:
         a0:39:eb:9d:db:4b:77:d7:06:0b:ee:95:97:4e:62:95:72:d5:
         9b:95:85:0c:0f:41:61:f9:7d:2e:e4:f3:51:ef:fe:ff:98:39:
         a6:5a:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:23:26 2026 by rpki-client