Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa
File:                     34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (raw, json)
Hash identifier:          CQ/J0wAfqPEH6Per5sfN/KphaNJpVC+lcMxJNlQ1HHU=
Subject key identifier:   30:F6:F7:37:76:82:0A:CF:D5:FD:CD:07:43:B1:B8:9E:54:03:21:15
Certificate issuer:       /CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
Certificate serial:       58223708AE59B48D2CCD2B1CBAACE7CFFB2E1B62
Authority key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa
Signing time:             Sat 07 Feb 2026 23:14:58 +0000
ROA not before:           Sat 07 Feb 2026 23:09:58 +0000
ROA not after:            Sat 06 Feb 2027 23:14:58 +0000
asID:                     269034
IP address blocks:        45.178.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl
                          rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:22:37:08:ae:59:b4:8d:2c:cd:2b:1c:ba:ac:e7:cf:fb:2e:1b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
        Validity
            Not Before: Feb  7 23:09:58 2026 GMT
            Not After : Feb  6 23:14:58 2027 GMT
        Subject: CN=30F6F73776820ACFD5FDCD0743B1B89E54032115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:be:a4:5c:2c:7d:d5:b0:0b:74:74:7a:b0:
                    a8:ab:68:9e:3c:32:12:9f:b6:ec:92:d8:9d:ac:1a:
                    24:a9:ee:8c:23:3e:cc:ce:bc:91:68:15:18:de:b2:
                    b6:83:3e:3e:7d:01:5c:fc:94:f0:e6:c7:18:d8:db:
                    34:14:54:fc:c4:67:e8:ad:cf:92:48:b3:a7:96:32:
                    db:2d:3b:ae:17:7a:1e:9a:16:10:b7:1d:d0:a2:e0:
                    2f:02:23:bc:ae:0c:30:8e:c0:7e:4d:1d:94:ff:d7:
                    a4:9b:58:84:85:bb:e6:72:4e:49:0d:13:53:85:51:
                    f2:61:8d:61:f7:67:4e:63:c6:80:0a:e4:99:03:6c:
                    1a:77:db:1f:7e:d7:b8:39:21:87:8e:ac:85:91:db:
                    e6:60:7f:90:cf:d7:04:78:60:4a:c7:c0:d5:82:0f:
                    1d:ab:aa:a3:21:47:c2:47:52:6a:ea:eb:af:a7:bd:
                    dc:e1:51:22:fb:ef:6e:5c:c0:3f:de:be:dd:07:b8:
                    bf:eb:7a:77:e7:cc:ee:56:81:b1:77:61:79:a4:c0:
                    56:c9:de:d5:d5:bd:35:fb:ad:8f:45:d8:7a:c4:51:
                    a5:a5:89:79:fe:19:46:6d:8d:2a:a0:53:3c:7e:14:
                    fd:3e:de:85:99:44:f9:5e:13:60:d3:c4:3f:65:e3:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:F7:37:76:82:0A:CF:D5:FD:CD:07:43:B1:B8:9E:54:03:21:15
            X509v3 Authority Key Identifier:
                keyid:BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:52:e6:6e:6a:0f:8b:4a:bd:a5:34:14:3d:7c:40:04:1d:
         e5:de:d5:16:db:b1:99:a8:fc:e7:6d:12:58:b9:3d:cd:97:b0:
         f4:04:35:dd:8f:5c:30:7b:41:4d:1d:5d:6c:2f:07:e5:70:76:
         ad:3a:44:06:e4:0a:7b:3a:f6:e1:63:51:df:20:57:32:cf:a7:
         68:3c:d2:f4:93:d8:8c:7a:9f:d1:a1:ee:26:0b:d6:ad:6a:fb:
         28:e7:2a:b5:10:e1:9f:18:7a:06:da:49:c0:67:4e:6d:43:74:
         83:1d:54:48:af:5d:8b:a1:2d:8e:73:4b:19:a2:49:f0:3c:fa:
         24:25:af:b8:72:4b:d2:4a:71:3f:06:3d:58:f6:a4:58:0b:bf:
         33:48:2f:2a:5c:a8:c9:c5:17:f5:12:cc:51:86:9e:ea:cb:86:
         59:fb:d1:ee:2d:56:d0:93:4e:c3:d9:0f:73:df:3a:45:81:90:
         1d:75:1e:5d:7c:94:83:dc:4c:10:72:4f:55:27:51:73:50:b7:
         03:a6:6f:45:8e:67:01:e1:6c:3e:32:a7:94:91:dd:f4:29:95:
         48:e6:89:48:cf:c7:13:75:35:68:13:56:60:fa:ef:b6:f9:dd:
         09:e7:0b:a4:c7:92:6c:28:f3:0f:86:dc:4b:83:7a:2c:dd:a0:
         b6:ea:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:44:04 2026 by rpki-client