Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
File:                     34352e3233382e33322e302f32322d3332203d3e20323633313535.roa (raw, json)
Hash identifier:          byw5d1Enp6RyxMhP2lpj3lrzhFBY5FPKXDsDniOevzI=
Subject key identifier:   CD:28:68:53:67:9C:5E:AC:F2:B9:26:30:5F:56:39:F2:60:EA:12:BF
Certificate issuer:       /CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
Certificate serial:       60A0AA2866DD6BD3556491775FCC89424A264E79
Authority key identifier: B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
Signing time:             Wed 04 Feb 2026 23:24:22 +0000
ROA not before:           Wed 04 Feb 2026 23:19:22 +0000
ROA not after:            Wed 03 Feb 2027 23:24:22 +0000
asID:                     263155
IP address blocks:        45.238.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl
                          rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a0:aa:28:66:dd:6b:d3:55:64:91:77:5f:cc:89:42:4a:26:4e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
        Validity
            Not Before: Feb  4 23:19:22 2026 GMT
            Not After : Feb  3 23:24:22 2027 GMT
        Subject: CN=CD286853679C5EACF2B926305F5639F260EA12BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:79:19:46:b5:95:8e:fd:c2:5e:54:dc:47:
                    1d:bc:e0:fc:10:0e:e8:74:b9:b2:a8:6d:5b:ca:cf:
                    48:af:d6:bb:7d:f6:95:5d:22:a7:58:ef:9e:3b:66:
                    eb:27:45:ed:4c:ad:11:5f:6e:e3:e0:51:42:38:59:
                    79:c2:2e:fc:e0:de:17:c2:db:cb:d2:c7:f8:6d:c4:
                    b9:2e:fe:0a:3a:f7:a5:4f:6a:f3:60:c0:0c:1b:f7:
                    e0:71:cd:60:2d:b2:19:36:09:0b:2b:8b:7a:b1:c7:
                    c4:c2:a9:e1:81:f0:a4:c9:66:06:02:a7:9e:4f:14:
                    2b:dd:df:72:09:1b:50:f1:87:37:eb:ef:f8:54:ff:
                    ba:15:be:d1:6f:ce:4a:3a:84:94:8a:96:49:65:94:
                    fa:e0:47:18:dd:69:56:b2:6b:84:c8:fe:8a:1a:41:
                    4e:3c:7e:21:81:26:3f:b4:24:e5:f8:bb:a3:d9:62:
                    57:5d:37:da:61:9b:97:80:66:9b:61:7e:8f:b9:50:
                    dd:87:54:cb:cc:05:f4:65:0d:7f:1b:a9:bd:d4:4e:
                    34:9e:51:3c:28:91:51:13:5e:08:e5:e6:49:cd:1a:
                    56:20:f9:dc:9b:31:11:5f:1e:5c:de:00:bc:e4:f4:
                    fa:f3:d2:ae:d0:51:57:70:f0:8e:37:1d:95:a1:0c:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:68:53:67:9C:5E:AC:F2:B9:26:30:5F:56:39:F2:60:EA:12:BF
            X509v3 Authority Key Identifier:
                keyid:B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:02:ec:e8:b6:7a:8a:16:20:ba:ea:29:ff:6f:0c:90:11:
         10:b3:5a:69:36:50:ed:94:46:83:78:ae:d9:b9:93:44:20:08:
         07:1f:71:b7:63:3d:2e:71:f7:c5:68:2e:06:48:0e:cc:c0:40:
         bb:2b:e1:37:09:8b:c0:8f:e6:56:42:85:fa:81:f6:ac:b2:d3:
         13:c5:7b:8d:76:bc:13:70:61:92:cd:44:b2:47:c7:19:11:5f:
         80:dc:d2:d4:59:ec:5a:ab:f0:2d:23:34:49:3b:06:fc:c0:67:
         24:e0:f6:4f:73:62:b2:c0:29:1f:9d:34:91:11:f6:58:cc:7b:
         40:61:a5:3b:2a:0d:c9:25:e2:32:e3:af:e5:08:58:57:d7:fb:
         af:f5:ac:72:7a:9b:97:2b:b7:32:56:b2:04:b9:54:fc:ef:b6:
         9c:b6:04:49:db:d8:ce:50:1c:11:a0:0b:bd:36:9a:93:55:cd:
         46:7d:ca:bf:11:08:dc:21:ed:d3:8e:50:62:b0:ae:14:45:aa:
         ef:b7:80:f1:70:d0:1d:ff:dc:5f:0f:a3:83:c9:b6:3c:6d:20:
         a1:1a:6e:07:c5:37:06:9b:75:e4:8a:41:a8:ae:e1:f6:90:0c:
         ee:cf:f4:80:d6:0d:84:f4:cc:a9:86:d4:b8:96:14:27:fd:83:
         66:99:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:06 2026 by rpki-client