Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32342d3234203d3e20323637343132.roa
File:                     34352e3233352e36362e302f32342d3234203d3e20323637343132.roa (raw, json)
Hash identifier:          P9UfcbpEs8fQWfbbPdWcfRyMd8JFbM5/LCEA+z2Fo+M=
Subject key identifier:   CB:E3:1B:48:9F:0E:D1:C0:17:15:74:41:1A:A4:D4:6F:6B:4C:20:42
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       34F042D3422F429AADF2A8EF09E9AAF9DD1C4989
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32342d3234203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 18:46:46 +0000
ROA not before:           Mon 05 Jan 2026 18:41:46 +0000
ROA not after:            Mon 04 Jan 2027 18:46:46 +0000
asID:                     267412
IP address blocks:        45.235.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:42:d3:42:2f:42:9a:ad:f2:a8:ef:09:e9:aa:f9:dd:1c:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 18:41:46 2026 GMT
            Not After : Jan  4 18:46:46 2027 GMT
        Subject: CN=CBE31B489F0ED1C0171574411AA4D46F6B4C2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:5a:13:41:a8:2b:38:26:28:90:6e:a5:c1:
                    87:c1:a1:54:fc:58:91:1a:ec:7d:9e:20:93:7e:cb:
                    d1:78:9b:82:20:79:43:5f:4a:d7:5e:db:51:29:36:
                    8d:10:20:e3:a3:37:68:99:4f:7b:42:54:dd:a7:4d:
                    2e:29:6e:91:1e:7e:0e:22:e5:8b:f8:7b:ec:a8:72:
                    c6:86:44:16:e4:db:de:59:80:d1:bc:f1:df:4d:1d:
                    11:4a:a1:88:a3:16:73:cb:17:39:17:b9:dc:49:97:
                    2d:55:cb:9d:0b:53:b0:51:21:8a:8e:af:89:f8:e3:
                    1d:b4:0c:e1:79:f1:a0:07:fc:6d:bd:da:ac:ee:dd:
                    bf:a0:16:d5:f2:20:9d:7f:1d:da:a4:4c:2f:34:d0:
                    e6:36:1c:0c:de:59:92:99:bf:cb:b0:b9:52:8f:f9:
                    fb:ea:68:17:8d:80:32:5e:a6:f8:20:5b:5a:d4:93:
                    23:6d:42:98:af:17:ae:c3:c2:52:0a:7e:52:ec:15:
                    fc:e0:10:eb:9e:6e:e2:45:1f:24:28:ca:4c:a4:df:
                    6a:5b:c2:9e:a3:0d:38:d1:82:1b:25:dc:b8:35:ab:
                    e6:ca:49:96:39:5c:6c:79:dc:c6:26:c7:c7:af:4d:
                    62:6d:fd:8d:71:c2:8c:98:15:b7:5b:04:bb:67:c9:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E3:1B:48:9F:0E:D1:C0:17:15:74:41:1A:A4:D4:6F:6B:4C:20:42
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32342d3234203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:73:83:f8:08:0c:20:4a:94:30:f3:20:96:6e:e9:04:4d:0e:
         bc:01:9b:98:31:cf:ca:9b:82:69:92:05:16:55:84:de:7c:09:
         00:75:51:97:e9:00:51:0e:d4:5d:fa:7b:a4:f1:46:42:5f:23:
         d5:6c:1c:9e:48:be:cb:aa:87:f1:4c:b6:c8:57:32:9e:37:70:
         11:3b:27:2f:a0:7a:c0:8b:80:fa:0e:05:f1:77:41:a8:c9:14:
         37:a7:2a:f6:40:91:35:23:06:9e:7d:ab:58:64:80:29:c8:bf:
         4b:a7:84:60:85:24:ea:a6:71:58:76:0f:0a:54:a7:6a:f6:e6:
         30:27:81:af:6c:49:9b:f8:ff:54:2a:e6:60:50:30:60:a4:c9:
         f6:20:6b:e5:b1:6a:2a:8b:e7:a8:2a:23:28:26:d0:00:07:00:
         fd:1b:97:d5:f3:1a:7d:ed:94:a3:35:8b:24:03:04:2e:48:81:
         2a:28:1d:dc:12:38:a7:80:9d:cd:dc:7c:8b:77:63:ce:26:ce:
         2b:33:a2:f7:a4:e6:ba:a1:a3:e1:8e:eb:a7:73:cd:05:55:82:
         0e:80:e2:4a:f6:f4:b5:47:2a:44:db:ee:53:9e:74:ec:50:46:
         c3:03:cb:10:3f:1c:64:01:27:e0:66:bc:cf:a4:f5:18:86:32:
         2e:fe:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:02 2026 by rpki-client