Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa
File:                     34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          G5M7rKIDZAq92HTjm5hQCAo8mL9fpR+4vpZ8oj95t70=
Subject key identifier:   3D:A8:BF:6D:04:B4:6B:52:AB:BA:A9:B4:CC:58:95:AB:16:B3:36:E8
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       0A8ECCFA75ACCB90EB8E99B66F76A7AB4C09ADF6
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa
Signing time:             Thu 05 Feb 2026 03:27:36 +0000
ROA not before:           Thu 05 Feb 2026 03:22:36 +0000
ROA not after:            Thu 04 Feb 2027 03:27:36 +0000
asID:                     262459
IP address blocks:        45.182.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8e:cc:fa:75:ac:cb:90:eb:8e:99:b6:6f:76:a7:ab:4c:09:ad:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Feb  5 03:22:36 2026 GMT
            Not After : Feb  4 03:27:36 2027 GMT
        Subject: CN=3DA8BF6D04B46B52ABBAA9B4CC5895AB16B336E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:bc:b1:0e:3e:50:b8:2c:34:9a:77:0e:2d:
                    0e:34:d4:f9:e4:ce:17:af:2c:fe:30:58:f0:ce:58:
                    a0:11:2c:36:97:ea:0e:15:40:ed:e4:eb:d5:f4:7c:
                    2c:ce:43:87:c3:8e:2d:fc:2b:33:26:07:bd:86:1c:
                    ac:07:f8:eb:55:21:2b:e3:ae:e1:ec:70:44:e5:2e:
                    2f:6f:5d:e6:8b:de:ed:de:ac:cc:eb:8e:4e:98:8b:
                    5a:85:df:e4:80:d6:5e:b7:36:9a:3d:47:43:cb:11:
                    95:52:ef:f4:39:72:8e:a8:cc:f3:a2:ca:8a:ff:4b:
                    f0:93:98:33:39:9a:42:97:ab:8d:3c:c8:6e:e2:00:
                    bf:c9:9d:b7:b0:3f:ab:03:05:9a:ae:20:96:98:b8:
                    29:5c:29:0d:31:7d:44:4d:c1:11:66:e8:5f:21:39:
                    0c:77:51:8c:b5:a4:55:0b:fd:a7:09:e7:59:dd:64:
                    21:69:24:85:8f:f7:48:92:02:2c:6f:4e:84:b2:c0:
                    0a:3b:f4:28:2a:44:64:88:c1:84:53:e8:68:87:26:
                    43:af:c9:85:50:fd:20:1d:e4:80:4b:6b:db:f9:07:
                    d5:39:06:d0:8b:ef:10:2b:b3:ba:0b:fb:1a:3d:13:
                    88:8f:90:07:9d:d8:19:12:a7:12:d8:85:fd:c3:6c:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:BF:6D:04:B4:6B:52:AB:BA:A9:B4:CC:58:95:AB:16:B3:36:E8
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e3138322e3138342e302f32332d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:14:1e:b9:ec:bb:8a:86:da:75:ca:65:6a:11:fd:d7:20:
         d8:1f:ac:d9:e6:ad:0f:c9:7e:20:5b:2a:aa:b5:10:b7:44:a6:
         a9:c2:48:de:9f:14:d0:83:c5:65:9b:f5:b0:d6:44:7b:62:b3:
         8c:7e:9e:43:6f:a1:c5:02:1a:ef:4b:0a:f2:33:1f:36:db:82:
         d7:e3:b6:4c:26:10:ce:23:d3:38:10:9d:db:e6:9a:77:3e:44:
         50:64:bd:d7:01:6b:45:dd:68:9c:14:17:a3:63:ec:3f:d4:94:
         10:29:00:ed:ef:01:93:8f:69:8e:5a:65:84:87:ef:27:6a:47:
         52:59:53:40:cf:2e:7b:15:1c:30:11:06:e6:1c:7d:69:26:93:
         a7:fb:e4:54:0a:d6:0a:c9:1a:c4:97:86:e1:0e:71:37:95:fa:
         aa:b4:f3:ec:26:5a:49:16:da:af:e7:b1:61:41:c8:91:7b:88:
         2f:74:d7:49:61:4a:ec:c9:3e:c2:e7:c4:a3:e1:3c:49:7a:dc:
         1f:d8:b2:a1:ab:e6:65:4a:b6:fd:e3:b8:07:ac:11:01:c3:41:
         08:5a:62:a0:17:bc:9f:28:65:b5:af:b7:4a:70:59:46:b2:62:
         c4:df:74:a8:f8:fc:4f:bc:62:d1:cf:e8:23:94:da:fc:9b:38:
         b7:b6:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:33 2026 by rpki-client