Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa
File:                     34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (raw, json)
Hash identifier:          tlMkqHSQTNEifoLRoyyP4xM6jhVB7QcDI9pX1vY4cDY=
Subject key identifier:   36:00:80:85:A0:5B:97:89:E8:42:58:31:8F:D7:C1:84:A1:46:8C:F1
Certificate issuer:       /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial:       6287F55B87334430A4AE8D28F4EFBA4DBBC36DFF
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     269435
IP address blocks:        45.186.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
                          rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:f5:5b:87:33:44:30:a4:ae:8d:28:f4:ef:ba:4d:bb:c3:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=36008085A05B9789E84258318FD7C184A1468CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:ca:e0:25:80:c1:42:3a:25:d2:ad:c4:b6:
                    80:4f:b2:0e:4c:0d:d5:cc:63:99:66:77:67:ce:ec:
                    d5:4a:54:94:83:86:54:4e:e9:1c:f8:9a:f9:24:84:
                    03:ee:68:67:97:03:36:02:88:f3:9a:b6:37:13:89:
                    a5:f8:59:fb:5a:0a:00:5c:73:21:42:8f:f9:32:bc:
                    e3:ea:a8:27:4d:b4:35:6c:07:41:66:37:49:e7:f6:
                    40:07:e6:25:eb:f5:73:30:b8:5a:03:38:96:be:43:
                    c1:83:59:6e:00:c6:eb:b0:89:c9:2d:f9:84:c0:9b:
                    98:8f:ac:a2:6e:ff:31:26:09:c4:79:10:1d:a2:76:
                    e8:d9:d3:7a:89:a5:aa:a4:5c:74:2c:63:8f:a0:b4:
                    44:5f:98:fa:64:05:c5:4d:ff:cc:27:e8:71:f5:57:
                    9a:8c:94:ed:64:94:b6:e6:a5:39:60:0a:e5:b0:52:
                    fd:eb:52:4a:7c:ac:e8:00:be:b7:60:99:5a:1a:62:
                    ef:db:f4:f7:02:42:f6:06:0d:34:5c:99:b8:92:a5:
                    c6:b1:0e:3a:18:c9:b3:e0:81:05:98:72:2d:70:dc:
                    cb:6a:87:6d:20:d3:0d:2b:5e:76:dc:b4:35:a6:ec:
                    7c:c9:1c:ff:d6:0b:38:93:05:d5:3f:63:aa:94:cf:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:00:80:85:A0:5B:97:89:E8:42:58:31:8F:D7:C1:84:A1:46:8C:F1
            X509v3 Authority Key Identifier:
                keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:33:7a:dc:52:51:fc:f0:9f:4d:8e:81:7b:09:ab:39:25:3f:
         12:41:25:5c:06:d5:a9:5a:dd:f0:55:ac:41:37:7e:7c:0f:3a:
         4e:ec:4c:fc:d7:3d:2f:ec:e6:85:71:9c:80:32:82:8f:b8:61:
         5c:12:3b:ec:b5:df:d4:00:09:d9:8c:26:23:25:fa:87:54:f5:
         38:6a:f7:ca:5b:30:3d:9c:28:e5:67:8a:96:0f:8c:22:fe:e4:
         29:3d:b6:34:f4:1f:2f:d9:18:9f:09:17:07:ec:13:44:74:7e:
         f6:26:f7:52:34:0e:1b:2f:3e:8e:1c:63:4e:58:a6:91:08:07:
         a8:2e:9c:e8:af:4a:33:2d:23:63:b9:3c:c4:c8:75:c0:8b:52:
         c8:62:4e:ed:9a:7a:e8:7a:9c:30:3d:b1:71:2d:73:0c:68:2a:
         29:d3:44:48:0f:ee:ea:0c:cc:94:13:8a:4e:fb:08:2c:09:70:
         11:cc:dc:44:dd:db:bf:a7:c1:d8:39:09:77:a5:f2:0c:6f:8c:
         63:73:75:0b:84:c0:d3:d1:8b:a0:14:5d:08:32:60:30:fa:7a:
         0b:88:44:c6:89:35:3a:19:fb:32:7e:5c:68:41:82:69:7b:db:
         a6:c2:3a:fd:ce:d6:64:bc:3d:6b:a7:48:ae:d9:c4:43:03:77:
         72:93:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:53 2026 by rpki-client