Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e372e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e372e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          qX3a6C0++BPO9uQf8ZHNkLmp2JiNWeetHCwscW37bYg=
Subject key identifier:   54:81:74:15:69:C0:9A:12:D8:FE:61:11:82:2B:D0:D5:6A:FE:38:F6
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       77865A652E1881D0FF394F670043E170B5AC8522
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e372e302f32342d3234203d3e20323639333535.roa
Signing time:             Fri 06 Feb 2026 01:54:25 +0000
ROA not before:           Fri 06 Feb 2026 01:49:25 +0000
ROA not after:            Fri 05 Feb 2027 01:54:25 +0000
asID:                     269355
IP address blocks:        45.185.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:86:5a:65:2e:18:81:d0:ff:39:4f:67:00:43:e1:70:b5:ac:85:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Feb  6 01:49:25 2026 GMT
            Not After : Feb  5 01:54:25 2027 GMT
        Subject: CN=5481741569C09A12D8FE6111822BD0D56AFE38F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:2b:3f:94:b0:29:50:ec:6a:f9:e2:11:ad:
                    08:aa:8a:1d:84:ed:66:66:69:95:30:c5:85:52:95:
                    dc:c0:82:f3:9e:70:45:dc:b0:1d:9b:d6:ee:8c:50:
                    e8:26:1b:1c:53:df:c7:67:f0:8b:30:c2:2a:67:2f:
                    b3:e9:73:d3:19:3b:5a:2b:6e:99:24:58:86:9c:6a:
                    95:a3:90:97:92:2e:0a:c5:01:67:92:b7:77:0f:e9:
                    fa:7d:0f:e5:fe:34:57:6a:69:0f:d6:06:ff:9f:89:
                    56:9d:87:9a:ac:b5:84:ea:37:a5:06:92:40:17:15:
                    a1:67:38:aa:65:b5:ae:c8:cc:d0:fa:41:93:67:47:
                    fa:5b:41:a3:ff:79:ce:06:9d:c1:b2:55:14:38:f3:
                    65:97:9c:bd:52:8e:16:4f:a3:ae:61:a4:05:08:3d:
                    83:5a:eb:b3:69:7e:c1:ba:7a:76:7a:02:95:ba:50:
                    47:6b:0e:a4:ee:55:02:b3:0c:82:71:6a:fd:e7:87:
                    9f:61:ec:5d:70:25:ca:d2:19:a9:b1:97:ea:fc:84:
                    5d:0d:c3:34:d2:56:ec:7b:25:f6:24:1d:23:20:6e:
                    2a:40:d1:f6:8d:f0:04:12:d5:a0:13:68:ad:67:0c:
                    29:8a:e2:19:ca:59:95:fd:ee:7d:5f:1c:cb:9b:3c:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:81:74:15:69:C0:9A:12:D8:FE:61:11:82:2B:D0:D5:6A:FE:38:F6
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e372e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a6:31:f6:fe:ef:91:96:17:4d:14:99:3b:85:08:39:80:a7:
         14:98:c5:a6:60:94:f9:0d:27:62:c1:a6:4d:0e:b9:0f:df:c4:
         45:7d:69:58:7b:53:30:93:ea:97:49:64:4e:04:f3:6b:71:00:
         9a:a7:92:32:aa:2a:92:eb:3c:6d:e7:c5:17:87:63:ba:3c:1a:
         14:ef:07:99:d4:02:f8:bd:21:b4:7b:90:5a:8d:69:ac:2d:63:
         89:36:70:a5:f9:c9:5d:a4:8e:d5:06:07:ad:34:65:c7:28:3e:
         5e:ac:40:43:63:01:05:dc:e8:f5:03:44:cb:ae:bd:3e:18:d3:
         c9:f0:71:68:77:92:06:4d:18:11:c0:24:a3:11:b8:31:9d:f1:
         bc:f7:9a:f4:e3:99:dc:90:15:a8:6a:82:41:21:2e:23:f7:9a:
         c1:bc:6a:90:63:96:5b:61:e0:e8:fa:fc:5e:a4:18:7c:65:1a:
         5c:2c:2a:57:88:c5:97:ed:fb:37:1f:a6:99:f9:84:72:fb:b1:
         6b:c1:25:71:53:5f:9f:51:ae:be:53:77:3a:ad:9d:b9:da:fd:
         19:5d:d2:fa:ae:71:da:50:8a:1f:77:ec:bd:98:ac:5b:54:b9:
         53:7a:91:88:cf:d0:34:9d:a3:c1:eb:fc:b7:a0:a5:f9:1e:25:
         fb:79:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:25 2026 by rpki-client