Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
File:                     34352e3137302e342e302f32322d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          ncwTOoc+mNDVBWX1XYsqLYEaCqb03rAmAt6444aTZMo=
Subject key identifier:   16:60:1A:51:9E:80:20:BD:15:3B:28:5F:24:20:CF:64:4F:03:F8:12
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       72580E3940196D87B36D2EF2B03829AAA0509608
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
Signing time:             Wed 04 Feb 2026 21:50:09 +0000
ROA not before:           Wed 04 Feb 2026 21:45:09 +0000
ROA not after:            Wed 03 Feb 2027 21:50:09 +0000
asID:                     268135
IP address blocks:        45.170.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:58:0e:39:40:19:6d:87:b3:6d:2e:f2:b0:38:29:aa:a0:50:96:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Feb  4 21:45:09 2026 GMT
            Not After : Feb  3 21:50:09 2027 GMT
        Subject: CN=16601A519E8020BD153B285F2420CF644F03F812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:fb:cf:bb:a8:48:a0:fc:89:c5:42:f3:45:
                    8b:28:0f:06:63:74:79:91:8b:3a:52:32:9e:b7:e8:
                    8b:ec:23:45:3e:28:02:fb:4c:dc:1f:21:e8:9a:29:
                    9f:e1:c4:c8:14:98:2c:34:c4:c4:4c:c3:0e:3d:d6:
                    b9:03:20:15:a4:c0:6d:c6:5c:0e:79:ed:e4:d2:c4:
                    90:5a:ab:09:ee:ea:e5:ee:d1:57:61:2e:63:4c:8c:
                    ca:c8:c6:95:5f:1e:52:36:81:2d:65:80:97:92:07:
                    ae:90:b8:34:4d:5c:83:88:c4:b4:4b:e8:62:9e:4a:
                    f4:a8:bf:b1:5b:ae:5c:05:4c:95:5d:43:fc:fe:a7:
                    2f:78:b4:51:69:51:bb:1c:f0:94:07:e3:d9:84:24:
                    5a:73:e1:c1:5d:97:e9:b6:2f:9c:f2:e8:40:47:ee:
                    d8:dc:39:24:a6:7d:13:b2:8e:f1:fc:70:d7:c7:44:
                    0a:3c:78:e8:21:9e:84:5f:95:ba:81:21:a2:97:be:
                    b4:81:c1:a8:e0:f2:64:b6:c2:77:4d:d8:c1:75:28:
                    2a:b2:96:26:57:26:d8:01:c7:b0:ef:e8:ca:66:45:
                    85:28:3b:0c:57:26:71:ad:a4:9b:72:ad:24:09:7f:
                    e9:f5:0b:a1:31:31:df:88:1e:4b:e2:f5:f9:47:a0:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:60:1A:51:9E:80:20:BD:15:3B:28:5F:24:20:CF:64:4F:03:F8:12
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:4e:d1:43:34:27:9e:29:98:5d:29:5a:27:18:69:42:3e:
         df:4c:89:a8:43:a6:9b:7d:b4:e3:ad:9b:58:e9:ed:04:4a:fc:
         a2:5b:df:14:7b:0e:f2:c8:e3:e9:f7:70:1f:78:25:1a:ea:ce:
         f1:2d:78:46:ea:e1:91:ca:3b:e2:37:ae:ec:92:2b:b8:36:d3:
         6d:91:d3:bb:17:5e:8d:72:b6:40:16:c9:db:a2:c3:49:eb:ef:
         bf:e0:4b:c6:60:c1:90:bb:00:d3:4a:33:1a:35:8b:03:42:35:
         ec:89:12:73:b6:ba:29:62:07:03:72:19:87:0e:c9:4c:4e:22:
         43:8a:c6:de:6c:dc:f0:e1:86:0d:1f:f5:d5:00:de:57:6f:4a:
         8a:80:c2:6d:be:f3:22:51:01:4d:be:bd:fa:e3:0d:66:f7:28:
         d1:7e:02:83:1b:fc:4d:a5:9c:e3:37:ab:5b:e0:7c:6a:db:02:
         f8:b8:63:5c:dc:d2:06:48:a5:25:7b:22:f9:06:77:84:69:fe:
         04:8d:6a:05:2a:77:52:ae:ce:c8:bb:f0:6e:d7:11:aa:3a:53:
         df:82:a8:b8:8d:59:23:0b:a5:09:1e:08:0d:dc:77:4d:24:32:
         80:4a:2b:9b:d3:9d:f0:3a:a3:f5:f6:61:dc:f7:df:a0:a6:5c:
         57:97:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:58:37 2026 by rpki-client