Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          D5agjyjCwBe5ipn5oLEjv+NdMpMDeiMPvSCYkkAoptY=
Subject key identifier:   AF:A8:B2:B8:5E:3F:F3:C8:51:E6:B7:3F:3D:06:57:68:63:19:5F:E4
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       01259489FC894A7B1FB9E4F8500EE782F978151B
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 05 Feb 2026 04:44:39 +0000
ROA not before:           Thu 05 Feb 2026 04:39:39 +0000
ROA not after:            Thu 04 Feb 2027 04:44:39 +0000
asID:                     268513
IP address blocks:        45.161.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:94:89:fc:89:4a:7b:1f:b9:e4:f8:50:0e:e7:82:f9:78:15:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Feb  5 04:39:39 2026 GMT
            Not After : Feb  4 04:44:39 2027 GMT
        Subject: CN=AFA8B2B85E3FF3C851E6B73F3D06576863195FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:a8:ff:79:3e:f3:43:bd:68:fb:4e:06:33:
                    43:b9:84:94:ab:8f:37:29:7a:64:5b:69:f1:8e:61:
                    8f:25:ef:90:e9:9d:ad:9b:7d:98:39:db:56:9e:05:
                    ab:47:e1:73:90:93:ee:af:89:c4:13:7b:04:68:cf:
                    e4:e9:b1:2b:78:53:4a:86:c4:b3:c6:b6:68:13:cf:
                    7c:c7:85:1f:11:2e:7a:b7:4a:86:b7:67:29:7f:db:
                    d1:4d:7f:ff:1c:d0:4e:75:4e:83:df:76:e7:e9:10:
                    7b:2f:57:ec:8d:e5:6e:66:bc:8e:da:d7:d3:b2:b7:
                    7f:ad:39:86:dc:26:61:da:23:3d:04:b4:d1:0e:1d:
                    6f:de:4f:2d:69:9a:cb:bc:db:9c:fc:75:9d:0f:68:
                    d9:36:25:85:43:b2:3b:96:d3:ce:84:8c:00:fc:4c:
                    92:05:f5:32:f6:ca:84:98:8e:7f:2a:85:5d:c4:28:
                    10:79:94:c6:2d:ea:15:51:fa:7e:a8:be:9a:ec:a0:
                    3a:2c:82:86:a4:78:b2:45:c9:32:6e:b8:f6:ec:99:
                    95:f8:df:a7:86:13:41:5b:d1:e6:d6:e9:07:e1:7c:
                    5a:01:a4:d1:4c:a3:20:62:d8:12:0e:ce:d3:94:40:
                    8f:89:c7:8a:e6:60:6b:66:4c:f1:f7:c3:df:0e:84:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:B2:B8:5E:3F:F3:C8:51:E6:B7:3F:3D:06:57:68:63:19:5F:E4
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:56:84:b8:ec:c5:c9:ba:8d:61:d4:01:4c:1d:0f:8e:aa:0d:
         3b:75:db:9a:b3:41:69:e0:34:da:56:54:61:b4:d3:b6:13:2d:
         81:ec:bc:fc:51:55:24:fb:51:3b:b8:9f:b3:39:44:1e:b2:0c:
         c4:2a:f7:70:86:c9:22:5c:51:bd:2d:ce:8a:85:d4:29:b8:5d:
         0c:92:32:13:96:82:f7:a5:d1:de:39:91:0b:43:62:6f:1c:c1:
         46:7e:d6:25:49:38:3d:83:12:40:03:7e:17:72:32:2c:ef:32:
         85:c3:89:5a:69:8f:d7:6c:2f:0f:57:ed:f7:1b:c4:cb:b8:a0:
         1d:9a:55:d9:23:96:08:2f:56:2b:24:f4:a6:66:06:ab:e3:e7:
         c6:76:90:0a:5a:78:15:8b:cc:2f:86:56:a1:d1:d6:33:c8:33:
         65:f7:b9:ad:b8:84:6e:db:03:4a:51:a6:17:aa:72:1b:97:28:
         4c:9b:f7:bb:69:2a:da:b8:57:35:0a:6c:e5:b1:58:95:0e:0a:
         8c:07:75:1f:79:f7:e8:21:a8:e9:2f:46:83:0f:26:38:cb:3c:
         7b:b7:7f:5c:69:8c:60:06:a4:61:25:2b:d4:e8:01:5e:a2:d7:
         f9:95:82:e6:1b:30:51:e9:1d:20:14:9b:d0:5b:9e:e8:2a:fa:
         8f:c3:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:51:13 2026 by rpki-client