Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa
File:                     34352e3138362e34302e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          v2/xXXd1MrhyO5p118ithF/C1eLNOS7dADdgLl59tjs=
Subject key identifier:   37:01:54:70:57:57:90:07:53:C0:21:0F:22:DD:2B:31:53:4B:72:E8
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       195490B4155D3B4C57DBFF63C49A3A056B9A2169
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa
Signing time:             Mon 23 Feb 2026 13:51:31 +0000
ROA not before:           Mon 23 Feb 2026 13:46:31 +0000
ROA not after:            Mon 22 Feb 2027 13:51:31 +0000
asID:                     266514
IP address blocks:        45.186.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:54:90:b4:15:5d:3b:4c:57:db:ff:63:c4:9a:3a:05:6b:9a:21:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Feb 23 13:46:31 2026 GMT
            Not After : Feb 22 13:51:31 2027 GMT
        Subject: CN=370154705757900753C0210F22DD2B31534B72E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:fe:6c:5c:30:72:b6:96:be:14:ac:99:f6:
                    a0:4b:19:5e:6e:70:c9:21:2c:b4:df:18:58:fa:87:
                    2f:87:e0:dd:2a:40:f7:f0:4a:5b:bd:8f:c1:7a:35:
                    61:54:c8:b7:82:46:45:c0:af:67:4e:c3:2b:3d:59:
                    ca:f1:9f:38:68:cd:27:f7:20:93:c9:d8:5f:db:a8:
                    63:23:3d:49:70:45:01:d9:78:36:96:1b:44:53:0f:
                    f7:21:56:b0:17:19:e4:7d:10:7f:96:a9:3f:c8:e5:
                    1b:95:64:46:22:60:e3:65:aa:bd:db:a8:07:46:24:
                    41:d2:e9:e8:79:bc:81:87:69:69:df:30:c1:cd:53:
                    af:fd:c5:77:1f:c0:36:42:b1:7d:90:d9:ea:ae:65:
                    9f:14:24:1f:30:7a:b7:c1:c0:e8:48:95:bb:cc:13:
                    ac:2e:d9:3d:ac:82:12:30:bb:37:2c:f8:77:73:08:
                    28:89:0c:50:bd:71:51:08:fb:f7:5d:3c:c7:b5:75:
                    6c:e8:97:03:e4:5d:a3:b9:bc:88:ec:e2:50:eb:78:
                    41:17:c1:99:2e:2f:49:35:88:50:02:26:7e:69:ed:
                    bd:9d:37:4f:d1:2b:eb:6b:e7:b3:54:2a:2d:f4:a4:
                    e0:f8:74:ca:da:57:18:db:cd:1a:5a:d3:9f:6f:17:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:01:54:70:57:57:90:07:53:C0:21:0F:22:DD:2B:31:53:4B:72:E8
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:f2:14:77:f1:c8:c4:38:ec:87:07:cf:a8:dd:46:e6:36:
         3d:f9:14:39:bd:93:44:81:28:36:d9:3f:38:3c:02:a9:14:b8:
         97:8f:a2:f2:a6:d4:b0:59:eb:aa:37:96:e7:a2:a9:38:39:b8:
         a8:37:ca:f3:47:10:33:77:c0:84:da:a9:8f:da:a7:f1:d5:65:
         55:6b:61:14:45:6b:53:db:1f:89:3f:8d:0b:02:09:62:80:bc:
         36:a7:35:0f:52:85:4d:ef:09:37:cb:d3:cd:f0:b6:4a:b2:cf:
         09:e3:f2:eb:06:12:ec:14:29:6d:57:b2:a5:86:c4:b9:f4:76:
         01:d2:d1:d5:23:ea:69:8a:1d:01:f6:af:cb:c9:30:8f:a4:b6:
         08:a4:ab:dc:59:e2:79:b0:ce:1c:7a:6b:5b:86:ca:99:d7:b2:
         69:5f:ac:df:1c:6d:99:26:8b:22:0d:ac:ba:85:02:9f:f9:c8:
         bc:7a:b6:01:c6:f9:0c:4f:4d:6c:31:f8:62:05:64:cc:e0:49:
         45:80:30:02:60:ba:7c:a7:4c:2c:26:07:84:93:16:c1:39:69:
         dd:12:5d:19:64:75:d2:c5:48:68:9f:69:bd:2c:cc:54:d0:29:
         01:1a:62:24:b4:2d:7c:df:ee:7c:12:18:42:cb:a0:96:f2:f2:
         ec:62:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:22:54 2026 by rpki-client