Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
File:                     34352e3138342e342e302f32322d3234203d3e20323639343338.roa (raw, json)
Hash identifier:          Mg4p5eDeRffvmYut+28pkCRqZgEX55qtsgfKGIPC/VY=
Subject key identifier:   BF:99:E3:0F:ED:5C:64:CE:9A:35:37:ED:9E:BC:F4:46:5B:17:E5:36
Certificate issuer:       /CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Certificate serial:       027EEC9B7C75A190B230E90D1A1827AA3C018F3B
Authority key identifier: DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
Signing time:             Thu 05 Feb 2026 20:28:30 +0000
ROA not before:           Thu 05 Feb 2026 20:23:30 +0000
ROA not after:            Thu 04 Feb 2027 20:28:30 +0000
asID:                     269438
IP address blocks:        45.184.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl
                          rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7e:ec:9b:7c:75:a1:90:b2:30:e9:0d:1a:18:27:aa:3c:01:8f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
        Validity
            Not Before: Feb  5 20:23:30 2026 GMT
            Not After : Feb  4 20:28:30 2027 GMT
        Subject: CN=BF99E30FED5C64CE9A3537ED9EBCF4465B17E536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:51:76:f9:17:48:96:2a:38:a4:75:24:bb:
                    7e:00:7b:86:14:47:ed:a4:12:e7:9f:2a:30:ee:d2:
                    a8:be:d2:fd:5d:00:8e:bc:5e:13:f0:0d:77:6d:4a:
                    56:88:28:ef:c3:62:86:41:ed:e4:97:58:c6:ce:7e:
                    dd:3a:cd:c9:c6:cb:0c:93:0b:9f:97:77:eb:c6:f4:
                    62:67:c7:72:14:e4:3f:47:19:42:88:de:b7:2f:a1:
                    b5:e6:88:15:60:d5:f2:c7:48:ed:9f:9a:60:b8:e5:
                    8d:63:af:41:bf:26:09:eb:86:28:26:65:62:00:71:
                    58:4a:c9:ad:97:aa:c5:5c:92:98:bb:ad:f6:43:2f:
                    9b:f5:2e:f1:e0:6a:b0:c3:28:49:ac:dc:e1:75:d6:
                    42:12:0a:8e:09:f8:41:8f:60:7b:98:51:b2:c0:69:
                    f7:e4:68:5d:99:f0:76:22:b9:dc:e6:83:aa:1b:e1:
                    05:9c:60:7d:e2:f7:50:b3:4e:0b:65:84:26:9f:73:
                    d4:7c:7c:e2:9d:95:7e:af:c2:5e:3b:48:93:1c:d3:
                    10:f6:c0:bd:be:2e:91:13:d2:f5:ad:34:9b:ab:f3:
                    35:0c:09:b5:ff:ea:a5:89:8f:af:40:5a:cd:d8:30:
                    90:4d:56:73:38:c9:d3:f8:7b:2c:06:7e:e6:15:e6:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:E3:0F:ED:5C:64:CE:9A:35:37:ED:9E:BC:F4:46:5B:17:E5:36
            X509v3 Authority Key Identifier:
                keyid:DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:90:88:a1:cb:23:d7:b9:82:d2:d7:69:16:0e:8d:a6:2d:61:
         20:0b:55:40:e4:46:1a:20:f1:9c:e5:d7:4a:60:51:bc:95:d5:
         f6:c6:cf:e3:2a:6c:cd:7a:17:c4:88:10:ea:2d:8b:f4:f0:51:
         89:54:dc:6d:74:7e:d8:3b:63:cc:f1:a0:8c:d6:e7:c5:60:20:
         91:21:98:54:97:09:1d:ca:6f:b7:06:67:5a:1a:be:03:5e:95:
         67:c2:70:7d:0d:6c:03:d2:5d:8b:23:e0:13:55:aa:0a:91:9d:
         e5:a7:d8:73:21:9b:a9:47:30:fb:a2:3d:ce:77:4d:08:bf:54:
         1a:0e:17:9b:1c:03:a9:b4:3c:41:00:0c:3b:b7:89:c8:66:41:
         56:8c:a1:d5:a8:c8:d8:65:1b:f1:3e:ac:dd:dd:50:bc:01:93:
         57:82:a1:d1:dc:36:e1:21:7f:84:1d:fd:4c:40:3a:54:20:ca:
         09:ec:fe:ef:99:d8:40:a6:b4:d1:c2:d3:0a:8b:2d:c1:d2:bd:
         f1:bf:bd:b5:67:ae:4f:45:63:07:e7:6c:be:d5:e0:fe:99:09:
         e3:25:62:d6:ea:83:cf:60:51:2d:0f:0c:4f:1f:3b:e1:5c:f4:
         be:38:7b:cc:f9:54:91:25:e8:ed:c2:d8:52:b0:78:51:c7:5f:
         a9:bb:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:22:23 2026 by rpki-client