Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          Mqb0XWibuBKftHT48z7K1HpAdKR9vDTSTtbNYwiJQ6o=
Subject key identifier:   98:50:C5:02:A3:0E:D1:3E:1E:34:15:5E:5D:54:8C:1D:B8:85:7A:BE
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       74C6940D67B10DEA9253373C908D92F31FDD2F06
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     268011
IP address blocks:        45.167.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c6:94:0d:67:b1:0d:ea:92:53:37:3c:90:8d:92:f3:1f:dd:2f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=9850C502A30ED13E1E34155E5D548C1DB8857ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:11:ad:b7:05:a3:5d:31:24:1a:a1:6d:0d:
                    50:17:46:c5:05:0f:39:6f:9a:59:d8:35:29:96:05:
                    1a:df:2a:87:e9:6d:b3:ea:ac:04:52:29:5c:9b:27:
                    74:fd:ef:f8:ac:73:63:f5:f8:3d:5f:bf:1b:49:ab:
                    50:9c:12:99:53:b0:2a:0f:bd:fc:53:4c:01:00:93:
                    26:de:22:09:71:b7:81:0f:c9:5f:0b:46:b9:e8:f1:
                    68:c0:94:2f:94:33:0f:50:49:a2:74:77:7c:b9:1a:
                    b5:df:1a:ba:6a:33:d4:a7:88:fb:88:06:a3:0e:32:
                    1c:4a:4b:83:ee:de:81:56:0d:48:ad:c3:aa:80:aa:
                    76:3a:6e:4b:bf:68:0f:cb:46:dd:9e:86:6f:be:96:
                    0c:8a:71:50:dc:46:0d:79:fb:66:d4:2f:ad:bd:dc:
                    f6:4b:39:22:13:f8:b5:59:0c:9a:1e:97:3b:f3:86:
                    ba:59:99:c6:cc:43:fc:71:b0:33:6d:32:22:a6:c0:
                    8c:1c:ae:9d:0c:03:a1:38:41:2b:7b:b2:61:e7:f1:
                    c2:84:08:74:e7:5d:22:d2:b0:b8:99:e8:30:8b:19:
                    d1:54:4e:8d:b1:ce:39:da:21:ee:d5:83:44:77:99:
                    eb:a1:fe:02:9c:2e:8f:6d:64:54:92:2b:77:fe:fb:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:50:C5:02:A3:0E:D1:3E:1E:34:15:5E:5D:54:8C:1D:B8:85:7A:BE
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:15:b9:38:0e:22:62:77:21:c8:07:9e:83:82:c3:13:be:b7:
         cb:41:73:ab:96:2a:b5:85:d0:cf:1a:af:a2:60:e1:aa:c2:24:
         63:b3:32:7c:17:2c:ee:df:41:0f:1d:ea:cc:f6:72:7b:06:e7:
         9c:ee:2b:cf:c6:19:ea:63:ee:f3:62:be:9f:82:1f:36:d8:43:
         52:d9:03:aa:24:f5:f8:06:7f:15:15:b3:34:4d:52:3e:38:63:
         62:9a:fd:bd:de:5d:d6:8d:cc:e5:3b:73:c5:3b:22:0c:96:04:
         f9:93:d9:a1:91:9f:0b:52:2d:9b:8b:e4:0d:00:90:3b:94:cd:
         3a:94:c5:3b:e2:a1:28:b4:f7:d1:7a:b2:a8:cd:62:d8:42:7b:
         2e:1d:f2:c6:49:19:18:a2:f5:78:fe:5d:0a:a1:b4:11:b7:07:
         5f:6a:ab:a9:af:16:f3:26:f4:13:a0:70:6f:16:72:0a:87:71:
         ea:27:8a:aa:1b:ff:57:2d:2c:e2:8c:8d:b6:99:af:dd:06:24:
         b9:69:ca:9b:c3:84:e6:2d:d5:9b:fe:88:60:14:b4:5d:b1:fd:
         07:fb:ed:6e:40:28:38:79:fa:c2:50:00:18:ab:3d:60:30:79:
         5c:52:da:4f:ca:01:e7:a9:f2:d3:67:00:8b:14:dd:65:12:f2:
         9f:36:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:46:44 2026 by rpki-client