Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa
File:                     34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa (raw, json)
Hash identifier:          JBnF6cCitKW6BDGRt6/03/1LZ8q2Y0FdfJNokpgiU/w=
Subject key identifier:   48:CD:01:6C:41:32:47:87:5A:72:8C:57:27:D8:99:93:3D:14:58:52
Certificate issuer:       /CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
Certificate serial:       3803E0FB914CE73E0FFBDFE57D17ADF0C348AE52
Authority key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa
Signing time:             Thu 05 Feb 2026 10:06:30 +0000
ROA not before:           Thu 05 Feb 2026 10:01:30 +0000
ROA not after:            Thu 04 Feb 2027 10:06:30 +0000
asID:                     268089
IP address blocks:        45.168.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl
                          rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:03:e0:fb:91:4c:e7:3e:0f:fb:df:e5:7d:17:ad:f0:c3:48:ae:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
        Validity
            Not Before: Feb  5 10:01:30 2026 GMT
            Not After : Feb  4 10:06:30 2027 GMT
        Subject: CN=48CD016C413247875A728C5727D899933D145852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:38:7d:f8:72:46:7d:fb:e8:53:2c:6d:f3:
                    a3:37:20:4e:d3:f0:8b:3a:5b:cc:e1:ce:df:66:18:
                    05:cb:d7:81:3e:33:37:bc:14:a6:48:c9:0d:95:22:
                    d1:b5:7a:33:02:dd:01:a0:01:0c:6a:bc:1a:41:20:
                    9b:24:97:f5:ad:35:6e:02:eb:18:36:f8:c0:27:bc:
                    51:0e:d5:5b:fb:8c:11:56:42:df:73:b1:ef:41:dd:
                    b0:17:c2:c3:ba:37:e5:f1:6c:e0:55:73:65:b0:92:
                    91:dc:09:41:18:89:e4:da:f9:f1:38:06:57:97:44:
                    f9:77:51:f3:e3:61:34:81:98:ea:61:27:3f:82:92:
                    6e:03:ba:e6:a1:5b:3d:f2:fd:e3:16:03:f8:8b:92:
                    34:82:50:8e:99:e8:52:c1:8e:dd:f8:b1:15:dc:b9:
                    5b:ff:57:cb:d3:64:26:8f:34:42:19:1a:14:71:55:
                    aa:62:10:70:0b:70:43:8c:85:e4:db:78:45:8c:d4:
                    fe:d7:f9:e1:83:61:38:71:bb:45:67:76:ec:31:de:
                    23:93:88:77:79:19:9f:d8:2b:cf:95:40:71:18:5a:
                    a2:f1:1f:cc:f4:85:20:15:8b:f0:fe:d9:c4:03:6e:
                    24:f7:99:88:1b:9b:59:13:43:a6:3e:ba:ff:c0:50:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CD:01:6C:41:32:47:87:5A:72:8C:57:27:D8:99:93:3D:14:58:52
            X509v3 Authority Key Identifier:
                keyid:7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:e1:dd:a2:6c:b0:41:71:ac:bb:24:bd:09:21:78:bf:bf:
         ba:0c:be:f9:e1:90:c8:88:cb:a9:6b:f6:a7:b7:7b:d3:d5:e1:
         fa:68:d8:8a:2e:e7:cf:1b:f1:04:35:6f:70:0d:e3:77:f1:30:
         bd:fc:d5:f5:4b:fc:1f:20:21:6b:5f:e2:ca:38:17:62:0a:57:
         47:c9:d2:53:b6:4f:f3:ff:e1:69:39:6c:69:bd:16:62:d1:41:
         31:da:e0:db:04:f0:da:45:3e:a8:f9:d0:b2:15:d1:f3:98:30:
         bf:2c:20:01:6e:aa:0d:bc:54:9c:bb:c3:41:d1:59:1c:bd:d4:
         61:1d:e6:a6:d4:63:0a:6d:17:ac:57:88:61:9c:58:8d:dd:a5:
         9c:a5:f6:c2:4d:55:24:6e:20:71:a5:e6:ea:34:ab:78:14:f5:
         e8:9e:14:76:bc:99:3c:dd:43:a8:af:d2:b7:e0:5b:69:02:56:
         f4:fd:30:a5:45:db:29:1f:3a:bf:ba:e3:ff:44:d1:de:a0:c4:
         1f:29:2a:50:6c:4b:ce:bc:01:43:88:29:d8:90:c2:4b:7e:04:
         18:95:60:9a:06:30:3d:3c:b8:b8:fe:9b:07:39:42:6f:5a:28:
         db:a7:51:74:ae:33:aa:70:88:2d:da:3d:22:38:ee:90:bf:8e:
         cc:6b:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:34 2026 by rpki-client