Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa
File:                     34352e3233362e342e302f32322d3234203d3e20323638323130.roa (raw, json)
Hash identifier:          DUMuHmCpbiC8Co3lKi+CkLxGCQfpB2SXZLMVtHNEgM8=
Subject key identifier:   44:28:5D:4E:40:2F:8B:03:74:0A:9E:3F:B1:27:B6:03:CC:54:D2:11
Certificate issuer:       /CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Certificate serial:       5A07982A66FF061BF371EB6B19A4A913CBEDF0EE
Authority key identifier: 0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     268210
IP address blocks:        45.236.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
                          rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:07:98:2a:66:ff:06:1b:f3:71:eb:6b:19:a4:a9:13:cb:ed:f0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:38:58:92:cd:44:ad:7b:73:76:e5:5d:e6:
                    a9:b1:70:b5:ca:6f:67:f0:43:09:88:e3:1a:56:be:
                    3e:92:bd:04:dc:48:68:37:b1:85:54:31:f7:91:d9:
                    10:32:fc:0f:36:a9:e2:61:e0:a5:60:2c:39:53:6f:
                    03:68:68:23:61:54:9b:dd:86:a5:ab:3c:d4:f0:65:
                    00:e2:7b:29:4a:93:9f:31:69:1c:e1:d7:a7:03:1e:
                    06:ed:3e:81:93:17:5b:10:d3:6f:07:1a:64:f0:1c:
                    96:58:2a:2e:a3:06:91:66:ea:9c:d6:3e:c6:90:a6:
                    e2:bc:8b:9c:9c:c0:cd:04:2d:b6:e1:c0:7e:e2:6f:
                    9f:bb:39:ff:b0:19:c0:16:33:66:e6:27:ef:4c:5f:
                    83:2a:01:b4:4a:4d:e4:d3:69:24:6d:9b:9a:67:f6:
                    5c:66:0c:40:a6:0d:53:71:d4:83:a8:ea:bc:67:4f:
                    9e:40:35:c7:88:eb:95:3f:dd:b5:a5:6d:e3:20:11:
                    d3:1b:cd:31:23:a7:51:29:41:b0:2f:ea:c6:32:a2:
                    d5:93:f4:bf:60:ba:38:e9:d1:3d:6a:39:1b:4a:8e:
                    ee:b6:24:0a:2b:43:00:81:61:5c:17:dd:cf:15:a5:
                    4f:49:4a:43:f5:21:6a:38:a5:78:4f:cd:c7:d4:b3:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:28:5D:4E:40:2F:8B:03:74:0A:9E:3F:B1:27:B6:03:CC:54:D2:11
            X509v3 Authority Key Identifier:
                keyid:0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/34352e3233362e342e302f32322d3234203d3e20323638323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:16:eb:84:0f:25:42:ec:62:3c:bc:ac:49:fb:d8:96:05:
         5a:42:41:79:59:28:6d:7d:af:c6:2b:32:79:a1:2d:0d:b8:d1:
         2b:cf:c6:b6:f3:db:03:d1:77:ef:27:97:53:aa:bd:79:20:78:
         f3:93:f0:7e:01:74:cc:77:0f:03:07:fd:d4:be:e1:08:ed:7d:
         98:ff:c3:15:46:ee:18:95:58:a3:fd:39:e0:5f:34:56:bc:60:
         30:ad:38:db:ac:76:20:49:c5:02:ac:ac:cf:75:ff:40:31:cf:
         f3:f2:ad:20:5f:84:84:04:97:54:e7:8e:89:c3:f0:b9:94:ee:
         8c:39:51:6c:4d:0b:5b:df:f5:1b:82:77:08:be:59:81:f8:90:
         5a:97:3b:49:a8:c5:9c:2d:4a:09:86:84:1c:59:37:d8:95:d5:
         a4:9e:43:44:27:45:a5:db:1e:aa:93:19:8f:ef:fb:80:07:ac:
         bd:0d:01:5c:a9:c1:09:65:bd:6f:8f:00:18:29:e1:f3:bb:92:
         d9:1b:a8:d2:b4:47:93:74:6e:1e:c1:1b:9f:cd:0d:73:93:7a:
         7a:bf:7f:e6:39:61:db:b1:c3:1e:16:a0:54:18:51:68:8e:34:
         08:dc:f1:e2:e0:14:f1:78:d7:87:c2:e4:36:8c:f0:29:84:d6:
         ae:6a:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:53:41 2026 by rpki-client