Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34322e302f32332d3233203d3e20323636353134.roa
File:                     34352e3138362e34322e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          hLW2xLSxyTDjLsDg8kl9wwWWazxihSn0RaHhlm6AJzw=
Subject key identifier:   34:BE:EC:71:3E:CD:B6:AF:CA:7B:22:C5:19:89:B0:85:F5:D9:03:3F
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       5AD113A1F295B0C7F12D0C7DEAC0493D4E406436
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34322e302f32332d3233203d3e20323636353134.roa
Signing time:             Mon 23 Feb 2026 13:51:31 +0000
ROA not before:           Mon 23 Feb 2026 13:46:31 +0000
ROA not after:            Mon 22 Feb 2027 13:51:31 +0000
asID:                     266514
IP address blocks:        45.186.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d1:13:a1:f2:95:b0:c7:f1:2d:0c:7d:ea:c0:49:3d:4e:40:64:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Feb 23 13:46:31 2026 GMT
            Not After : Feb 22 13:51:31 2027 GMT
        Subject: CN=34BEEC713ECDB6AFCA7B22C51989B085F5D9033F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:03:b8:2a:b1:d7:99:d5:0f:31:16:4f:1f:
                    d0:7b:cb:eb:21:bd:28:6b:a9:f5:88:72:59:df:2f:
                    ef:9b:5a:97:89:f5:c4:28:d0:38:0d:c2:ed:42:b0:
                    1d:eb:28:c9:d3:96:8b:12:9b:74:93:3f:3d:08:37:
                    97:e0:2e:63:6d:96:4e:76:66:5d:10:df:11:f0:92:
                    b4:10:41:d5:7d:1b:89:c1:a2:c6:97:c3:bd:91:8e:
                    ef:80:b3:b6:4d:6d:a8:da:65:ab:16:98:59:a7:99:
                    27:b9:bc:67:54:35:57:47:15:d5:5c:88:c2:80:af:
                    f2:b3:53:00:8e:7c:a0:ba:ed:67:a1:96:98:7e:91:
                    9d:23:ab:96:47:aa:29:f2:36:cb:83:07:03:9d:82:
                    69:c8:da:c2:c8:31:f8:4d:70:3b:c5:f7:2f:ea:85:
                    bf:0e:f1:eb:f3:b1:e8:97:43:34:29:96:c6:a6:94:
                    6d:e2:ba:63:f9:87:70:03:52:2b:9c:e4:4b:91:24:
                    58:0c:61:08:7b:43:df:dd:b6:b1:d8:aa:50:93:c9:
                    e7:5e:0b:d1:6a:0e:23:db:63:f5:e4:1a:5c:cd:32:
                    cd:47:9e:a7:04:51:cc:30:b5:7c:43:b8:8f:25:9f:
                    f2:c4:ae:ec:21:9b:19:6d:99:79:ff:6b:00:8a:a8:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BE:EC:71:3E:CD:B6:AF:CA:7B:22:C5:19:89:B0:85:F5:D9:03:3F
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34322e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:50:63:f1:d5:61:4f:3e:50:3a:98:4d:f6:d4:65:7a:0e:
         76:18:21:46:3a:93:c2:8e:63:2d:4d:d0:60:24:f8:8f:15:a2:
         82:0a:e3:6f:8e:15:c8:b8:4c:29:8f:5f:13:a7:e0:8d:c1:88:
         72:e5:ce:03:ef:38:2d:be:4c:76:3f:60:4c:20:ca:d6:24:b6:
         ec:e4:5b:35:fb:c2:da:fd:26:04:af:80:00:27:39:b2:ec:48:
         ee:f4:cd:6e:cf:24:59:96:7f:0c:84:ed:ba:ee:82:a8:a7:ff:
         2a:16:b9:eb:81:95:aa:dc:c6:7f:93:4a:6e:68:71:c0:32:26:
         ff:55:3e:2b:1b:c8:10:5d:2b:d9:22:cb:4c:81:0c:93:dc:7e:
         b3:5f:4b:b4:53:b5:ff:29:03:c0:5b:c5:09:71:c3:4d:cc:96:
         e2:98:fd:8d:89:9e:ee:fe:f5:aa:74:25:df:ad:68:97:cf:63:
         e3:dc:4d:f1:ae:e4:83:da:73:1d:0b:59:1c:3e:e7:5f:8a:94:
         8a:f1:65:0d:d8:7e:37:2b:a0:17:d8:c9:de:e0:8e:1e:6c:d1:
         c4:8b:83:c6:b8:52:34:a9:e8:a7:d6:cb:93:ab:f4:4c:40:41:
         2b:1d:f1:83:ce:29:e6:08:52:9f:ab:7c:04:e9:20:fb:fd:9c:
         02:71:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:19 2026 by rpki-client