Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
File:                     34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (raw, json)
Hash identifier:          RPK8BBGHBwVQZ+BaFVBK8lz6L9Ez10m2QojCai0Dk2E=
Subject key identifier:   AB:C7:BA:D5:E5:4C:39:B8:04:2A:F7:CE:BD:08:6D:D8:0B:9D:C9:2C
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       1A1DD9A2FDFB872AB041D3D002B61874F22B2020
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
Signing time:             Thu 05 Feb 2026 21:08:42 +0000
ROA not before:           Thu 05 Feb 2026 21:03:42 +0000
ROA not after:            Thu 04 Feb 2027 21:08:42 +0000
asID:                     268526
IP address blocks:        45.162.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1d:d9:a2:fd:fb:87:2a:b0:41:d3:d0:02:b6:18:74:f2:2b:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Feb  5 21:03:42 2026 GMT
            Not After : Feb  4 21:08:42 2027 GMT
        Subject: CN=ABC7BAD5E54C39B8042AF7CEBD086DD80B9DC92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:7e:38:f6:02:7b:df:07:53:62:82:98:3f:
                    15:31:bf:df:5b:12:51:b7:fa:fc:21:2b:28:d4:17:
                    1d:c9:e0:0b:d4:35:47:4c:21:7e:8a:1a:60:84:92:
                    a3:92:07:71:a6:f5:8b:75:3a:17:cd:7b:8e:2b:f4:
                    9b:01:75:0b:ef:21:49:20:70:da:d4:fd:23:4f:ae:
                    d7:b6:f6:99:3c:4a:6a:8d:42:d8:21:30:ea:fa:11:
                    3f:b8:48:1e:d1:ef:a3:6b:ed:33:78:1b:4a:9c:0c:
                    46:16:37:32:0c:84:a8:05:e6:67:4f:f5:cd:fe:99:
                    00:9c:d1:e4:9c:19:fd:7f:ef:ca:3f:65:65:2a:e8:
                    1b:b4:e7:7e:e9:02:d3:38:15:5e:8c:11:05:a2:e9:
                    6d:5f:aa:f8:3a:30:ab:0f:2c:17:29:12:58:b4:ad:
                    df:26:aa:02:c7:4c:e1:bf:71:cb:31:05:ba:01:05:
                    ab:6b:af:db:97:88:f7:ef:b8:63:2f:7a:54:d8:e6:
                    ce:85:21:d1:cc:d6:63:14:72:37:b9:b2:c7:0f:ef:
                    80:08:18:77:df:db:00:0d:44:91:46:df:94:2e:74:
                    01:52:92:69:61:53:33:32:0e:bf:6c:6c:ae:ef:4d:
                    a7:e3:24:41:37:a6:e0:bb:c8:1b:8f:a2:ed:ae:59:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:BA:D5:E5:4C:39:B8:04:2A:F7:CE:BD:08:6D:D8:0B:9D:C9:2C
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:46:7d:57:e5:af:21:c2:9b:e0:27:ef:23:2e:78:31:f9:
         a6:1b:62:f1:d4:7c:ec:72:a8:33:87:22:55:22:d8:9b:19:46:
         e4:9c:64:4b:3b:16:f2:be:e9:09:e4:fa:14:da:fe:d6:5d:6e:
         d8:b7:b7:01:fa:e3:81:b9:8e:47:64:1c:4d:3d:81:db:01:7e:
         39:44:03:fd:e1:5f:d9:48:78:f0:18:00:98:9a:b4:d1:b8:99:
         76:3b:2d:b6:74:0a:db:b4:b6:f9:d8:42:2c:24:4a:00:63:2f:
         ba:ef:d4:07:46:f7:cf:6a:80:2e:c6:d8:49:e4:8f:32:ed:04:
         d6:87:91:06:4c:60:e0:d2:0b:67:e6:0e:71:cd:b6:49:f4:94:
         d7:30:09:87:37:03:54:a1:e3:04:f9:bf:d4:a8:c3:d1:93:e4:
         c1:30:28:1f:ee:38:54:1e:f2:72:65:72:e8:e6:65:dc:ca:77:
         25:ee:f8:ec:e2:70:08:61:11:7c:46:5e:03:66:fa:b9:11:89:
         e3:06:80:0d:74:bf:20:4c:b3:e3:ad:6f:a5:dc:cc:41:c3:76:
         1e:f3:68:e9:a8:f8:f8:5e:db:70:c6:85:58:75:88:3b:f3:f3:
         52:c2:72:f0:4d:cc:6d:59:ca:4c:6d:2b:f4:a9:77:9e:dd:24:
         a9:4f:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:22 2026 by rpki-client