Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          FMyRNBFwU4nzq/yLQM/Lxn0iyKH/Jf3NQFf8DEzrAm0=
Subject key identifier:   EE:FD:64:87:79:40:C7:8D:2A:75:5C:AE:CF:22:E6:45:8E:72:22:77
Certificate issuer:       /CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
Certificate serial:       6DA57201270C25C263879C706D3FCAB9A4F10DEA
Authority key identifier: 54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa
Signing time:             Mon 02 Feb 2026 22:31:47 +0000
ROA not before:           Mon 02 Feb 2026 22:26:47 +0000
ROA not after:            Mon 01 Feb 2027 22:31:47 +0000
asID:                     269539
IP address blocks:        45.187.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl
                          rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:72:01:27:0c:25:c2:63:87:9c:70:6d:3f:ca:b9:a4:f1:0d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
        Validity
            Not Before: Feb  2 22:26:47 2026 GMT
            Not After : Feb  1 22:31:47 2027 GMT
        Subject: CN=EEFD64877940C78D2A755CAECF22E6458E722277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:9e:08:12:0f:6f:a3:d9:49:ef:05:51:5d:
                    61:11:7d:6a:00:a2:63:d3:d8:97:b3:ae:fc:b5:fd:
                    3e:fb:64:53:32:c3:e0:a8:0f:29:7b:71:b1:05:28:
                    26:da:3d:6c:9f:01:98:a5:21:21:4a:e1:db:f5:ac:
                    cd:c4:c8:1a:7b:83:e9:60:ca:7c:df:94:c9:e2:27:
                    d3:b9:7f:5b:9f:55:55:98:5f:02:29:0a:9c:da:bb:
                    8c:4e:a1:ba:6f:3e:d3:7d:2a:47:41:9b:c6:83:3a:
                    b8:ed:b7:c5:ad:72:30:0a:c8:d0:80:6d:3a:63:a9:
                    d0:60:c3:59:85:28:84:e7:6c:93:89:a8:e3:a7:fd:
                    cc:ec:6c:de:90:9e:ac:ec:1d:d7:05:5f:0e:56:35:
                    8f:5e:53:4a:99:ac:dc:07:f2:12:d1:86:7d:1c:31:
                    14:24:d9:63:47:80:3f:d7:a0:d5:09:6c:95:08:1e:
                    b5:2f:f9:9e:f9:c6:94:6c:11:b4:53:95:26:a2:18:
                    7d:64:f3:5b:d4:cd:3c:b9:34:76:84:bb:91:a4:1b:
                    ce:a0:c7:e1:0a:2b:01:47:78:81:e6:fd:4d:dd:44:
                    67:55:33:5e:d3:74:f0:7e:dd:ff:68:dc:18:d8:87:
                    bc:ac:a3:57:42:60:97:09:9c:4c:58:cf:ce:82:71:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:64:87:79:40:C7:8D:2A:75:5C:AE:CF:22:E6:45:8E:72:22:77
            X509v3 Authority Key Identifier:
                keyid:54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:61:bb:a4:d9:e3:d5:e3:5c:04:ba:db:7b:99:2a:87:91:
         4d:9c:2c:a4:fe:c4:93:85:80:00:2e:fe:71:b7:7e:31:68:49:
         03:d7:78:26:85:98:da:d6:e5:37:d4:2b:f3:db:93:42:5c:df:
         c9:9f:a3:bd:cc:f5:74:b2:f0:0e:a1:04:23:8e:3d:d1:f8:1f:
         66:8c:aa:5b:40:96:d0:e5:d0:83:7a:ac:9e:ba:cb:bf:3a:ac:
         19:a9:ab:71:9c:bb:c0:b8:f5:1e:e7:ce:18:59:51:38:25:a4:
         db:7c:33:a8:7a:b9:77:22:83:13:62:21:5e:cb:80:40:87:6d:
         e1:5d:ff:b4:14:25:a4:76:58:25:87:50:73:c0:7c:87:58:d8:
         35:32:f3:c3:61:33:8d:83:ba:7f:b2:f4:9e:fd:f6:ce:b5:56:
         b5:19:e4:a1:60:7b:73:0f:60:44:1d:c9:d9:a5:a8:6d:26:27:
         de:3d:63:db:d3:15:57:a4:9f:26:4f:54:14:df:57:3b:7f:cb:
         68:c4:8b:7c:7f:41:ea:c9:a8:58:4c:2d:49:06:d3:31:19:04:
         6e:3a:16:cf:45:dc:37:d6:d3:8a:cf:2c:94:c3:80:15:3b:c3:
         5c:52:41:1e:9c:c6:6f:5b:39:39:02:15:e4:2f:2d:bb:c7:4c:
         36:7d:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:36:27 2026 by rpki-client