Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
File:                     34352e3136342e382e302f32332d3233203d3e20323638353835.roa (raw, json)
Hash identifier:          yD9XmufoPM/kvxAdJ1CQzt1sSAThMSXGwhfigtCYYZw=
Subject key identifier:   A4:F7:88:9E:FE:46:CA:1A:CE:82:99:0E:99:1D:48:A8:8F:15:66:0F
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       1F795DACAB20EC6E12324F70749D8BC0989DA3D9
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa
Signing time:             Thu 05 Feb 2026 23:00:12 +0000
ROA not before:           Thu 05 Feb 2026 22:55:12 +0000
ROA not after:            Thu 04 Feb 2027 23:00:12 +0000
asID:                     268585
IP address blocks:        45.164.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:79:5d:ac:ab:20:ec:6e:12:32:4f:70:74:9d:8b:c0:98:9d:a3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Feb  5 22:55:12 2026 GMT
            Not After : Feb  4 23:00:12 2027 GMT
        Subject: CN=A4F7889EFE46CA1ACE82990E991D48A88F15660F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:95:3c:12:36:e4:ff:9e:fb:5d:4e:d5:92:
                    e6:6a:38:26:f6:5b:fb:ff:77:1c:ed:98:8e:c4:18:
                    fc:07:f4:6d:ea:1d:bb:f2:cd:59:30:28:d5:5a:b2:
                    e4:d9:2e:53:92:e9:17:5e:3e:c0:87:4b:14:be:a5:
                    a2:25:05:14:fb:3c:ce:50:2d:dd:d9:e5:19:ed:78:
                    9d:ec:2b:db:e2:72:d7:3a:4d:6c:2b:29:51:39:67:
                    ea:cd:28:ba:21:75:33:da:d2:29:37:c6:12:a2:d1:
                    97:a3:74:6e:da:0e:82:6f:c7:3e:76:9d:73:57:a0:
                    92:9e:b6:46:b9:fb:00:90:6f:a7:53:c6:b0:29:12:
                    88:49:08:4e:b7:59:d4:67:f0:57:85:a0:81:a2:a6:
                    c5:03:65:7c:8b:6f:07:26:71:38:ef:18:4c:86:fe:
                    58:76:fa:9e:5e:73:64:0c:72:a0:31:e1:29:46:cd:
                    39:ed:2f:98:24:f7:5c:97:bd:e6:a4:a3:5c:9b:d3:
                    ba:ba:54:a4:38:5f:a0:2e:6d:70:62:2a:16:96:73:
                    bd:b5:fa:b9:a3:60:7c:c8:d0:18:3b:9a:0b:36:c4:
                    38:eb:0d:7e:42:16:57:46:65:9e:46:f8:89:d6:65:
                    d1:e2:74:ad:82:47:2a:66:4c:cc:9b:f3:d1:ba:8f:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:88:9E:FE:46:CA:1A:CE:82:99:0E:99:1D:48:A8:8F:15:66:0F
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32332d3233203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:45:3e:73:46:a7:cb:46:b0:b6:b5:a3:bc:01:a6:99:b2:
         38:16:75:41:39:e3:14:98:82:b8:9b:82:8e:d6:aa:cc:ba:0f:
         6e:62:66:6a:37:3a:01:3e:36:3d:9d:90:20:12:b2:14:8d:c8:
         f6:2c:e5:ae:92:9c:84:61:75:6a:6e:8d:16:a3:f3:c9:ac:8c:
         06:50:ae:26:39:9b:c0:f1:67:53:33:44:9a:70:7a:98:fd:f3:
         bf:8d:95:ae:6f:25:44:15:6f:f0:5a:be:22:5b:37:d6:6f:0e:
         f2:96:d9:28:38:f9:d2:33:2e:35:63:ec:1b:d0:8d:08:cd:1b:
         f8:6b:e9:70:45:75:c9:4a:23:d3:4f:a9:54:7a:c4:87:f2:33:
         50:43:4e:7e:e5:7b:9d:e0:da:b6:58:12:a5:af:b8:50:14:ec:
         e1:ef:9f:82:bb:f6:89:c0:1e:b0:9c:91:3d:f0:4c:e2:6f:8e:
         61:1d:e2:41:d2:17:a4:c9:11:de:0a:ac:c4:59:ee:a8:c7:1b:
         fa:7a:26:32:0d:72:76:72:5a:a1:32:25:d5:66:23:8b:57:1b:
         c5:3e:bb:e3:d4:f3:30:4e:d7:04:bb:68:10:72:f7:16:de:4b:
         2d:b1:6c:f8:e4:fb:bc:16:d6:8b:21:36:32:aa:5a:b2:bc:75:
         24:80:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:19 2026 by rpki-client