Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa
File:                     34352e3233352e36342e302f32322d3232203d3e20323637343132.roa (raw, json)
Hash identifier:          ND1awb0pX5ZQ9E1wjyqouJ875QdemsVPGG/74dG+a6c=
Subject key identifier:   AB:FC:35:5C:1A:1C:2B:B5:E4:A0:E7:CE:FE:55:AB:24:ED:9D:AB:47
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       0DF1C397B8B749D5543D16B8047118F3DF899EF6
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 17:46:45 +0000
ROA not before:           Mon 05 Jan 2026 17:41:45 +0000
ROA not after:            Mon 04 Jan 2027 17:46:45 +0000
asID:                     267412
IP address blocks:        45.235.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f1:c3:97:b8:b7:49:d5:54:3d:16:b8:04:71:18:f3:df:89:9e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 17:41:45 2026 GMT
            Not After : Jan  4 17:46:45 2027 GMT
        Subject: CN=ABFC355C1A1C2BB5E4A0E7CEFE55AB24ED9DAB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:d0:b4:d7:5e:f6:f1:ef:a4:18:a4:81:38:
                    dc:4f:ec:40:0d:f7:2b:ef:97:28:71:cb:13:5c:8e:
                    dc:64:2e:a3:c9:04:db:2c:8e:4b:0a:82:be:f3:d9:
                    3f:c2:e2:f7:4c:c3:8a:3a:5b:c5:97:c9:19:49:8e:
                    f0:49:c3:04:8e:fb:da:82:20:e6:05:79:c8:70:08:
                    06:9f:1a:b7:cd:18:75:44:30:24:5e:ff:3e:cd:9b:
                    4d:4a:dd:23:15:83:cb:e7:36:f2:8c:ca:90:28:25:
                    d2:cb:a2:64:0d:99:6f:84:ff:bd:74:61:6f:70:4e:
                    10:98:de:20:44:80:9f:61:33:77:ac:59:2e:30:74:
                    99:47:31:2f:47:ee:d7:b1:29:d4:89:64:ec:46:03:
                    c1:ac:70:79:b3:13:af:81:37:5b:32:46:53:95:1e:
                    8e:0a:3e:73:ea:a4:59:df:a9:6c:8d:43:38:64:78:
                    00:12:9a:09:72:8f:75:a8:df:a8:3b:b1:67:8e:58:
                    2d:42:77:7b:66:77:1f:37:a0:c7:cc:da:d6:95:2c:
                    3e:e6:68:31:e8:c4:08:00:6e:c5:d2:da:ec:51:92:
                    e0:34:3d:4c:0d:00:38:ca:47:3c:64:26:e6:14:bc:
                    dc:cf:c7:54:e0:8f:0d:92:78:19:6d:23:fa:59:70:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:35:5C:1A:1C:2B:B5:E4:A0:E7:CE:FE:55:AB:24:ED:9D:AB:47
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:72:38:9e:3e:db:8b:dd:a6:43:02:97:a4:8e:72:da:75:9e:
         55:21:f8:9a:83:50:96:cf:af:ea:cc:68:8d:37:c0:fc:85:77:
         9d:d3:4a:df:a4:84:69:76:39:5b:29:b2:6b:d7:f2:7f:2f:0c:
         bd:9e:9b:16:1a:2b:0f:dd:91:48:20:fb:3a:57:0e:5e:00:50:
         97:0e:f0:05:99:75:af:67:c4:71:07:4a:cb:e3:c6:0f:0b:23:
         1d:6c:6c:83:78:e2:94:1b:7a:8b:86:9b:36:27:d5:be:73:31:
         b1:f6:70:a2:9e:0b:bf:83:a6:d8:97:bf:23:17:ed:3f:b6:af:
         6d:a0:67:60:4a:b4:56:d4:0a:01:bc:a9:a1:6c:53:56:bf:52:
         90:b1:1b:e8:2c:34:cd:15:ba:65:a1:ec:c2:e4:31:1a:dc:13:
         ea:c7:dc:90:97:5e:0e:3f:13:f2:99:a3:93:2d:c3:c6:04:33:
         f9:42:c6:77:90:32:5f:8c:06:c2:34:03:ef:13:c1:7c:a1:b8:
         b1:76:30:08:f1:3a:fc:b5:a6:bc:7e:8e:8c:1b:cb:22:81:76:
         61:10:e4:95:3a:09:65:75:36:de:f9:2e:54:40:2d:67:0d:87:
         c5:db:73:8f:01:ce:3c:54:71:e7:f4:e9:48:2c:eb:f9:d9:03:
         a0:c0:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:27 2026 by rpki-client