Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          Z+6J8NUnOqlayqp8iuCV5J0GxG3WMqljg64wP41KlNs=
Subject key identifier:   A8:7E:5E:0B:C0:2C:7D:7A:44:52:FF:DD:04:A0:0D:53:FE:AA:94:EF
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       4D952690FF63A2474A7F61661ADDFE3889D0859B
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
Signing time:             Thu 05 Feb 2026 09:28:35 +0000
ROA not before:           Thu 05 Feb 2026 09:23:35 +0000
ROA not after:            Thu 04 Feb 2027 09:28:35 +0000
asID:                     267222
IP address blocks:        45.229.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:95:26:90:ff:63:a2:47:4a:7f:61:66:1a:dd:fe:38:89:d0:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Feb  5 09:23:35 2026 GMT
            Not After : Feb  4 09:28:35 2027 GMT
        Subject: CN=A87E5E0BC02C7D7A4452FFDD04A00D53FEAA94EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:d0:e2:27:5b:cb:b9:f5:80:98:75:0d:e9:
                    1b:43:b4:70:ef:81:26:4b:37:c7:1f:0c:77:92:79:
                    8c:2d:96:25:8a:43:44:5e:0e:e2:95:32:da:8d:26:
                    8d:6e:85:08:cf:7f:5c:4c:8b:c3:bb:ab:b8:51:a5:
                    68:64:ea:7a:55:ce:96:05:8b:79:fe:43:47:1d:36:
                    ad:b4:c6:66:3e:7a:08:23:ac:26:09:f8:2e:31:8d:
                    b3:78:6d:2c:f4:55:43:c2:20:01:3c:08:a8:3b:6e:
                    b9:a5:f7:d8:8e:3a:3b:dc:10:51:13:33:84:52:c1:
                    05:64:e9:76:b9:e8:fb:bd:ae:92:cc:85:bd:12:62:
                    ee:e9:fb:fa:2a:37:fb:a1:68:1c:72:89:78:74:bb:
                    29:83:7a:06:06:e3:17:b1:b8:a3:8d:5b:f8:08:15:
                    df:b4:8c:aa:80:73:03:27:9d:cc:a1:1a:fe:8d:e5:
                    65:43:13:43:28:5c:4e:58:31:e1:25:25:b7:de:fe:
                    22:82:b2:27:dd:44:32:c0:eb:7d:f8:9f:95:e1:11:
                    73:3c:c7:36:3e:bc:f0:95:ed:dc:56:88:7a:ff:4b:
                    7e:1f:fc:6c:30:0c:63:33:6c:5d:7f:eb:35:eb:03:
                    a9:ff:db:54:3e:c8:45:af:be:a7:db:94:25:6f:3e:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:5E:0B:C0:2C:7D:7A:44:52:FF:DD:04:A0:0D:53:FE:AA:94:EF
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:07:5d:fb:89:36:ba:f0:b7:7a:74:e1:aa:26:f8:55:63:10:
         ad:87:98:05:85:b2:72:b0:8e:1a:ff:0f:e7:ca:fb:0f:78:bb:
         59:05:90:d4:d6:b0:24:9a:79:c1:c7:36:c0:a5:23:fd:3e:4a:
         90:19:55:f2:58:67:12:cc:16:56:5a:a3:56:90:37:0e:c1:12:
         1a:a7:6a:b0:b5:7a:e8:05:19:89:ad:c2:50:00:9f:30:79:22:
         05:98:3f:cb:2c:6b:db:db:08:2d:2b:15:1c:25:71:76:6f:51:
         15:2d:6b:63:c3:4a:fb:48:99:fc:94:4f:61:76:49:eb:2a:ea:
         ea:dd:d2:ad:f7:fc:cc:bc:70:86:63:5c:ed:66:b8:1f:f3:c8:
         f6:89:a1:ed:de:7b:a5:2c:80:b7:17:bd:cc:a6:a5:de:23:dc:
         79:17:5e:ee:4d:c6:f2:6a:3a:3c:3b:73:c6:91:74:21:c1:c9:
         59:d6:f4:b3:15:5f:4e:30:4d:bc:8d:29:ce:6c:d4:0e:5a:93:
         35:a2:f8:55:5c:52:62:23:d7:cd:e1:99:fa:ca:6b:5c:87:35:
         35:0f:18:f6:ea:9f:b8:77:f6:0e:b6:37:9c:8c:15:d8:21:6c:
         6a:47:8c:5d:b2:67:1e:ed:df:81:e9:a1:a6:ea:dc:43:fd:ba:
         ea:2c:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:13 2026 by rpki-client