Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa
File:                     34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa (raw, json)
Hash identifier:          ukNHqPJic6dAseLepb3VMiwhMuLoWpZ1shSyvBXaBo8=
Subject key identifier:   FB:3A:4E:E5:E4:E6:55:45:97:D1:49:90:25:9D:1D:CD:B2:76:9B:43
Certificate issuer:       /CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
Certificate serial:       567A52C3558E3AE6A97CDA05612E82FB3E7E508F
Authority key identifier: 68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa
Signing time:             Sat 31 Jan 2026 13:12:22 +0000
ROA not before:           Sat 31 Jan 2026 13:07:22 +0000
ROA not after:            Sat 30 Jan 2027 13:12:22 +0000
asID:                     269084
IP address blocks:        45.179.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl
                          rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7a:52:c3:55:8e:3a:e6:a9:7c:da:05:61:2e:82:fb:3e:7e:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
        Validity
            Not Before: Jan 31 13:07:22 2026 GMT
            Not After : Jan 30 13:12:22 2027 GMT
        Subject: CN=FB3A4EE5E4E6554597D14990259D1DCDB2769B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:42:0f:6c:cf:3d:ed:25:fd:31:6e:77:37:
                    19:ae:d3:28:75:78:7f:0d:0c:16:08:1e:14:59:13:
                    d3:34:0a:5f:2d:11:87:be:b8:6c:6b:1b:d2:2e:35:
                    a0:c8:0c:d2:73:b0:1a:7d:52:42:9c:4f:f6:97:8e:
                    d9:7b:62:33:bf:f5:0b:c6:d4:fb:60:40:a2:a8:84:
                    d8:0e:63:b9:27:b4:8e:35:65:64:b0:0e:15:53:c6:
                    98:11:f8:80:e4:dd:fc:16:61:d4:6d:fc:eb:86:a5:
                    17:24:ff:28:d0:a6:2f:5a:07:9d:af:6f:61:06:1e:
                    78:d0:f4:28:92:ee:56:5d:65:ba:8b:73:95:1d:59:
                    3a:f6:09:7e:f6:c1:23:5a:f7:ae:c1:82:c5:98:ce:
                    08:ca:d8:62:0a:2e:17:06:83:a4:57:39:41:c0:52:
                    a7:dc:aa:3f:19:75:1e:00:19:dd:de:f1:7c:eb:0e:
                    e6:7c:49:f0:8a:be:80:da:63:75:35:8d:f2:6a:02:
                    fc:9c:0b:0a:bc:a4:ae:8e:64:2b:27:60:d4:f8:25:
                    95:6b:64:e3:8a:3f:c7:6b:f3:7e:92:14:d6:0c:10:
                    08:e2:5e:ff:8c:d8:23:f8:79:34:19:ed:98:56:15:
                    b8:a9:8f:0a:9c:18:05:e3:e7:bd:a1:bf:d2:41:34:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3A:4E:E5:E4:E6:55:45:97:D1:49:90:25:9D:1D:CD:B2:76:9B:43
            X509v3 Authority Key Identifier:
                keyid:68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:fa:50:83:1e:b6:79:5a:6d:08:a7:81:47:68:0c:7f:03:
         37:f1:c1:53:71:bc:e9:5e:30:b1:17:be:f2:14:95:85:37:b1:
         8a:04:1d:65:58:86:47:14:32:5c:9d:68:5d:7b:5e:eb:ae:47:
         17:b7:eb:03:10:47:80:6a:02:ab:79:9c:cf:d4:69:74:bb:be:
         3c:dc:e4:69:0d:90:7b:20:d1:84:8c:fb:51:cb:42:17:ee:c1:
         99:93:16:e1:c7:a7:95:0e:34:e2:93:ea:24:18:ca:b5:f5:60:
         f7:13:7c:39:4d:4d:ff:63:da:ff:74:d5:8a:c8:54:57:be:52:
         7e:f4:9d:9f:3d:a7:eb:ce:d1:46:11:46:a3:08:f7:97:0e:b6:
         a4:bb:ce:c3:fa:9f:94:f8:81:79:74:7c:0c:fc:57:2e:1c:40:
         cb:44:f3:92:8f:88:7f:1f:87:49:26:0a:09:7b:50:a7:01:4e:
         59:4b:3c:0b:06:14:0f:da:46:85:e6:d7:5a:89:85:ff:7b:c4:
         74:df:e5:88:6d:fd:46:40:d9:1a:a0:a1:2f:27:5f:67:75:46:
         0a:42:44:46:dc:c5:b3:67:74:e3:26:08:4b:54:d0:a2:16:a1:
         61:b9:2b:41:86:87:3e:48:ff:41:b6:c8:20:f0:89:3c:13:75:
         c3:56:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:23 2026 by rpki-client