Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e362e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          E3hVnuE1gvPxJvaRANcdydcloCPz9XWx/ewwa7LVc5E=
Subject key identifier:   49:FC:AC:00:1D:9E:4C:84:2A:00:AE:A0:B8:A2:0F:67:E6:92:14:DC
Certificate issuer:       /CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
Certificate serial:       04027CA18AF89FC43FC7F518C191379A480F8654
Authority key identifier: 66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
Signing time:             Mon 12 Jan 2026 17:57:33 +0000
ROA not before:           Mon 12 Jan 2026 17:52:33 +0000
ROA not after:            Mon 11 Jan 2027 17:57:33 +0000
asID:                     268914
IP address blocks:        45.174.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:02:7c:a1:8a:f8:9f:c4:3f:c7:f5:18:c1:91:37:9a:48:0f:86:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
        Validity
            Not Before: Jan 12 17:52:33 2026 GMT
            Not After : Jan 11 17:57:33 2027 GMT
        Subject: CN=49FCAC001D9E4C842A00AEA0B8A20F67E69214DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:cd:11:f2:45:6f:dd:65:e1:f1:0d:ed:04:
                    5f:2f:ec:6a:54:8e:ea:3d:26:b7:1f:be:f5:68:0c:
                    9a:76:66:72:ef:b3:ff:66:df:07:6e:5c:2f:43:47:
                    dd:f2:aa:a4:c4:80:98:f5:86:3a:86:7d:69:01:1a:
                    b3:46:f0:25:ea:95:b6:d6:6f:13:1c:95:f3:b3:d0:
                    a7:60:83:18:f4:1e:c1:a7:ee:68:b6:1f:e1:dc:1a:
                    30:c0:70:09:9c:95:fa:a6:7b:84:1d:38:f0:52:c3:
                    15:34:fa:90:2a:42:8c:f2:4f:39:8a:71:01:33:3d:
                    d2:68:2a:f2:77:c0:6a:84:db:2c:34:13:f2:72:49:
                    a2:df:76:28:a9:7f:5d:b0:1b:a8:77:b1:a8:af:21:
                    24:bd:ed:f9:96:98:85:da:05:5f:af:67:43:f8:97:
                    89:f7:ae:5f:4a:00:e6:29:6b:bc:65:7a:0e:93:c8:
                    cd:ea:93:45:d6:56:75:5c:18:1a:04:06:fd:70:04:
                    ba:1d:9c:54:5b:3a:64:19:76:01:f4:1d:e1:d8:a8:
                    d5:ce:26:45:bf:55:41:94:18:ed:f5:95:55:14:d7:
                    1d:f8:71:d8:f6:4b:59:70:00:eb:72:79:f1:a3:89:
                    fd:50:be:27:e0:27:d0:de:a1:7e:4f:92:0a:98:b9:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FC:AC:00:1D:9E:4C:84:2A:00:AE:A0:B8:A2:0F:67:E6:92:14:DC
            X509v3 Authority Key Identifier:
                keyid:66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/34352e3137342e362e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:57:6c:20:88:45:04:55:1c:2e:b6:54:56:81:30:b2:69:
         30:49:86:b4:11:72:2a:d7:58:44:eb:c7:ee:09:19:59:8c:7f:
         ba:56:a9:21:d1:c4:f9:98:ed:ac:35:36:5a:6d:21:d9:20:f9:
         23:4f:34:9b:17:bc:07:6f:c4:b7:f6:46:b6:f3:b2:43:8e:43:
         cd:07:01:89:c0:bd:da:9a:55:8d:4e:30:64:ab:18:23:3a:12:
         51:62:ae:cb:2a:ea:d8:0c:23:b5:b8:cf:ee:e4:69:0e:f3:ca:
         dd:30:3e:6f:45:c9:68:74:cf:74:1a:78:d8:b3:60:f3:00:ba:
         b7:51:c3:b1:59:02:da:f3:87:5a:7b:f7:44:7f:27:b6:1a:6e:
         fe:fd:44:7c:33:45:74:75:b4:a4:80:27:b0:a5:69:fb:44:95:
         99:b0:d6:a9:97:a0:a2:2e:3a:0a:92:d6:0a:04:82:d4:13:50:
         1f:33:fc:23:46:18:7d:73:1f:a5:f5:87:ca:25:56:7d:e5:99:
         7d:d5:90:aa:c3:7a:48:37:60:23:7a:62:1d:c1:79:68:b4:00:
         7d:bb:eb:db:7c:29:97:86:83:41:bb:19:01:ac:8e:e0:9c:88:
         e6:d9:a2:b3:0e:00:4c:19:e6:f3:f2:95:78:23:4a:23:a1:68:
         e0:01:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:11 2026 by rpki-client