Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (raw, json)
Hash identifier:          Df19r/JglK8hg3VuZpsgUn3Be4G933JJv/eHT0oykec=
Subject key identifier:   4B:B2:7B:6C:77:E5:04:13:6D:0E:8D:FB:E3:EA:A9:73:2F:68:B0:1B
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       72CB6508EDF547CDE4CA81C3479312E3A3125CB3
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
Signing time:             Thu 05 Feb 2026 19:36:08 +0000
ROA not before:           Thu 05 Feb 2026 19:31:08 +0000
ROA not after:            Thu 04 Feb 2027 19:36:08 +0000
asID:                     268674
IP address blocks:        45.165.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cb:65:08:ed:f5:47:cd:e4:ca:81:c3:47:93:12:e3:a3:12:5c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Feb  5 19:31:08 2026 GMT
            Not After : Feb  4 19:36:08 2027 GMT
        Subject: CN=4BB27B6C77E504136D0E8DFBE3EAA9732F68B01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:78:21:b5:d1:61:ea:87:89:f6:be:31:f9:
                    7b:aa:21:23:e9:5f:50:77:80:dd:ad:10:6d:e1:2d:
                    41:ad:17:63:13:7c:47:04:c4:52:0d:f5:3f:0f:d0:
                    82:40:0a:93:b7:a3:bd:02:22:da:03:8c:2f:1e:61:
                    e1:d2:97:b3:1b:4d:5f:ee:70:0a:0a:1a:55:72:e6:
                    20:50:96:ea:26:a0:8b:36:b0:f9:10:25:70:69:13:
                    37:e4:07:e9:98:41:b6:ae:33:43:39:fa:4b:28:c4:
                    1b:92:6f:f8:70:b3:fe:35:27:6b:c1:e8:4d:d9:b5:
                    32:21:a1:1c:35:e3:68:1d:a8:cc:1f:7a:dd:24:a0:
                    00:0c:0a:9b:f9:d9:09:f7:81:76:9b:b6:fd:52:15:
                    b5:68:f6:f6:09:56:d1:00:36:cf:5b:92:4a:9b:18:
                    0e:5b:f4:7a:37:ca:7c:4c:ea:b1:6d:67:39:1a:c5:
                    f4:b6:b7:5d:d4:da:aa:6a:0b:12:99:6a:98:25:7e:
                    b8:c6:c5:cc:d8:2c:5d:cb:5e:e0:3a:56:1c:92:85:
                    f7:69:db:c7:cd:f6:f7:83:56:11:a4:43:24:6a:79:
                    3b:db:b3:c1:68:4a:3f:95:c5:13:92:b5:7f:c0:ea:
                    40:7c:9c:72:19:d5:ed:4a:4c:08:90:7e:fc:36:d9:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B2:7B:6C:77:E5:04:13:6D:0E:8D:FB:E3:EA:A9:73:2F:68:B0:1B
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:82:ea:3d:83:75:5a:85:9c:3d:8f:a3:db:bd:20:6e:f9:ee:
         f0:43:f1:a7:0d:25:22:a0:67:fe:ca:62:0e:cd:e0:58:55:5d:
         cd:9d:ac:62:ae:14:81:c2:60:c0:40:0f:bb:ad:66:71:9c:66:
         81:d2:64:d1:b7:48:bb:f1:a6:0b:02:dd:16:e8:eb:8e:60:0f:
         56:77:c5:45:61:61:55:7d:45:e5:7d:38:c3:c1:e5:68:ef:da:
         1d:e6:10:31:dd:ee:1c:4d:28:c6:65:53:a4:c4:e7:ca:d7:32:
         7f:b9:e1:fe:2f:48:2d:15:1e:55:b4:00:1e:15:bf:78:49:ac:
         33:c5:de:f7:8a:81:91:39:91:80:9c:c8:cc:1e:b4:3d:98:68:
         9b:f9:9b:7e:dd:53:34:63:3e:33:5f:3e:c9:49:91:75:b1:b2:
         bd:b4:12:4c:4b:64:8f:3f:4f:74:07:66:0b:11:39:03:c7:16:
         3d:b6:aa:ac:cc:7f:33:82:f3:7e:09:65:9a:48:ab:74:1f:44:
         b4:9c:de:43:60:da:78:9f:71:e1:33:80:67:45:10:a8:ab:54:
         ba:34:1e:16:c3:30:ff:0f:ab:5c:0f:2b:ee:87:6e:f2:73:15:
         91:22:06:2a:67:34:c3:df:f9:07:4b:bd:92:ff:75:6b:e4:0d:
         bf:59:c7:4b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcstlCO31R83kyoHDR5MS46MSXLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBNDc4Q0YzNEExMUMyMDE2REQ3RUQyNkZEQzk0MjFB
NkVFMjk0RDAeFw0yNjAyMDUxOTMxMDhaFw0yNzAyMDQxOTM2MDhaMDMxMTAvBgNV
BAMTKDRCQjI3QjZDNzdFNTA0MTM2RDBFOERGQkUzRUFBOTczMkY2OEIwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfnghtdFh6oeJ9r4x+XuqISPp
X1B3gN2tEG3hLUGtF2MTfEcExFIN9T8P0IJACpO3o70CItoDjC8eYeHSl7MbTV/u
cAoKGlVy5iBQluomoIs2sPkQJXBpEzfkB+mYQbauM0M5+ksoxBuSb/hws/41J2vB
6E3ZtTIhoRw142gdqMwfet0koAAMCpv52Qn3gXabtv1SFbVo9vYJVtEANs9bkkqb
GA5b9Ho3ynxM6rFtZzkaxfS2t13U2qpqCxKZapglfrjGxczYLF3LXuA6VhyShfdp
28fN9veDVhGkQyRqeTvbs8FoSj+VxROStX/A6kB8nHIZ1e1KTAiQfvw22VdBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUS7J7bHflBBNtDo374+qpcy9osBswHwYDVR0j
BBgwFoAU3qR4zzShHCAW3X7Sb9yUIabuKU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2F2TE5TdVR3emdKMUR2a3FDUm5jWTVkUzZiM21ibjdieXBaVEg5Rjk1
eW0vMS9ERUE0NzhDRjM0QTExQzIwMTZERDdFRDI2RkRDOTQyMUE2RUUyOTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFQTQ3OENGMzRBMTFDMjAx
NkREN0VEMjZGREM5NDIxQTZFRTI5NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhdkxOU3VUd3pnSjFEdmtxQ1JuY1k1ZFM2YjNtYm43YnlwWlRIOUY5NXltLzEv
MzQzNTJlMzEzNjM1MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzYzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaVgMA0GCSqGSIb3DQEBCwUAA4IBAQA1guo9g3Va
hZw9j6PbvSBu+e7wQ/GnDSUioGf+ymIOzeBYVV3NnaxirhSBwmDAQA+7rWZxnGaB
0mTRt0i78aYLAt0W6OuOYA9Wd8VFYWFVfUXlfTjDweVo79od5hAx3e4cTSjGZVOk
xOfK1zJ/ueH+L0gtFR5VtAAeFb94Sawzxd73ioGROZGAnMjMHrQ9mGib+Zt+3VM0
Yz4zXz7JSZF1sbK9tBJMS2SPP090B2YLETkDxxY9tqqszH8zgvN+CWWaSKt0H0S0
nN5DYNp4n3HhM4BnRRCoq1S6NB4WwzD/D6tcDyvuh27ycxWRIgYqZzTD3/kHS72S
/3Vr5A2/WcdL
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:44 2026 by rpki-client