Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
File:                     3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          P5+MXyiK66gCKoumPVPhXXLrjnsh3zoBlz9wavqPWP4=
Subject key identifier:   A4:1E:EE:FC:97:3D:5F:6D:29:F3:6C:31:79:11:D4:D9:BB:8B:6F:83
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       543321D7AC8F7F9567B693017DBF7E552C157B7C
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
Signing time:             Thu 05 Feb 2026 09:50:48 +0000
ROA not before:           Thu 05 Feb 2026 09:45:48 +0000
ROA not after:            Thu 04 Feb 2027 09:50:48 +0000
asID:                     61834
IP address blocks:        143.137.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:33:21:d7:ac:8f:7f:95:67:b6:93:01:7d:bf:7e:55:2c:15:7b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Feb  5 09:45:48 2026 GMT
            Not After : Feb  4 09:50:48 2027 GMT
        Subject: CN=A41EEEFC973D5F6D29F36C317911D4D9BB8B6F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:5a:d0:2f:1b:ba:e5:38:5f:19:f3:5f:b8:
                    b9:ba:e2:be:96:5b:e6:c0:54:40:bf:1d:0f:2f:c2:
                    8f:d7:34:e1:00:a4:a8:d0:b5:50:05:66:d3:6a:b7:
                    80:ca:b1:c0:38:5b:46:a5:21:61:24:6b:b8:d7:a8:
                    f3:1c:1e:b0:7e:84:11:04:c8:56:11:2a:ac:02:e7:
                    b0:6c:10:67:89:a7:0b:65:6f:53:95:35:67:1c:0a:
                    b8:96:2b:81:97:cf:a2:6b:fd:b5:6c:a1:2a:87:78:
                    17:60:73:df:7e:67:63:61:1d:3c:0e:0f:15:7a:11:
                    51:f0:ea:b6:72:a4:4f:26:47:6b:6b:e9:c4:c3:4d:
                    ae:65:ce:2e:4f:8a:82:09:58:e3:08:04:a4:6c:6a:
                    d3:a2:42:5e:3b:61:e5:64:fc:7c:9a:09:21:a6:99:
                    4d:3d:b9:fc:12:ef:f2:82:2e:81:bf:28:cb:31:70:
                    da:91:5e:d6:ab:f0:0f:33:31:1c:78:24:2a:89:46:
                    6f:67:51:34:79:18:16:e0:b5:06:55:2a:a3:90:57:
                    b3:be:af:da:fa:5d:19:af:44:d8:ae:e1:48:c7:bd:
                    0b:d0:77:39:e4:66:2b:ba:6d:c6:e1:7c:e3:5f:aa:
                    db:26:be:0b:6a:92:8c:c7:b4:03:22:85:f9:9f:ab:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:EE:FC:97:3D:5F:6D:29:F3:6C:31:79:11:D4:D9:BB:8B:6F:83
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:87:7d:b4:67:5f:21:6e:62:5a:ba:6c:e2:dc:c1:2f:23:bd:
         da:93:6e:ac:25:a9:51:2c:87:78:26:0d:b9:5c:68:6e:5d:c8:
         62:a9:79:92:22:11:b1:14:d0:c1:1d:10:eb:57:3f:4e:63:ef:
         71:61:9d:dc:c0:b8:6c:ce:4f:58:66:3d:ae:e8:79:5a:53:d2:
         82:03:f4:4d:66:57:fe:ab:d9:17:66:59:37:54:1a:33:bd:9f:
         0d:56:d5:c9:ad:95:ab:e5:eb:84:ec:ac:83:bd:70:63:54:3c:
         d0:f6:c2:c0:fb:b7:5d:ff:13:04:c5:c0:16:82:1e:c0:17:0a:
         45:cf:f2:d6:c1:c1:13:aa:ce:f0:16:dd:6e:09:de:b2:16:3a:
         b2:cc:69:c0:19:fe:36:16:85:27:cf:4a:0d:49:ae:6b:04:59:
         f7:0a:4a:0a:81:65:25:ef:16:b4:d6:ef:6a:61:31:fa:35:60:
         9a:74:35:78:70:f8:bf:04:a4:ff:a0:8d:f9:68:cf:9b:ec:01:
         af:96:38:39:7f:09:91:83:4b:0f:b4:22:c0:26:a0:6c:38:44:
         dd:bf:19:3d:05:7c:7f:66:a7:bc:ba:3f:2d:c3:8d:83:a2:bc:
         69:41:2f:77:5a:f5:30:73:c6:18:5e:05:28:04:7b:40:9c:03:
         6d:a3:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:03 2026 by rpki-client