Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          /DO3PRdZwymzuzpi6H0uwd4OYjH9EjOSA2nHqf6HMcM=
Subject key identifier:   9F:6A:22:43:0B:89:A6:23:10:0D:C8:E1:FB:C6:EA:24:0A:03:35:A9
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       6813AA08A22B4D1EE0031FC7227428EEBDD2DBF3
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 05 Feb 2026 07:27:36 +0000
ROA not before:           Thu 05 Feb 2026 07:22:36 +0000
ROA not after:            Thu 04 Feb 2027 07:27:36 +0000
asID:                     267024
IP address blocks:        45.227.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:13:aa:08:a2:2b:4d:1e:e0:03:1f:c7:22:74:28:ee:bd:d2:db:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Feb  5 07:22:36 2026 GMT
            Not After : Feb  4 07:27:36 2027 GMT
        Subject: CN=9F6A22430B89A623100DC8E1FBC6EA240A0335A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:74:8e:79:3f:cd:c5:df:10:d7:1c:5c:07:
                    b1:1a:06:53:3d:3c:0a:7b:5a:9a:73:f1:42:54:cc:
                    58:f2:e9:43:6c:a4:f5:22:ef:c2:8c:4e:eb:a9:ca:
                    0c:2a:d6:37:dc:1d:57:93:63:3d:fb:df:43:3f:62:
                    df:57:60:b6:6e:dc:34:b5:8b:79:1c:21:32:dd:6b:
                    77:31:37:f7:fe:f6:ff:de:b8:11:e9:ec:ac:f6:38:
                    a6:d0:b7:57:b7:a9:7a:53:fa:79:8c:31:a8:b5:4e:
                    ce:c6:bc:a6:b5:4d:39:35:c1:35:6e:fa:a7:70:a7:
                    22:9c:27:9c:14:1c:67:cf:b7:2a:5c:14:6e:63:ce:
                    29:44:94:5e:20:ae:26:3f:0b:78:f7:c6:6a:f8:ac:
                    8d:bf:19:5b:7a:11:93:57:60:4c:51:b6:8f:ae:0f:
                    34:39:2c:46:61:90:95:39:4e:54:a1:b6:b9:cc:04:
                    d8:86:93:7c:6e:74:92:92:d9:00:a1:ee:74:34:02:
                    60:e9:5d:cd:c6:3d:65:cc:e6:28:01:6c:11:b2:1a:
                    a4:5a:df:30:fb:ad:49:0b:94:dc:47:8f:9c:44:c6:
                    c1:61:60:57:75:3a:03:cb:8c:f8:8c:03:11:b4:e7:
                    a7:f2:95:e5:72:ba:28:38:f6:44:34:d1:89:66:81:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6A:22:43:0B:89:A6:23:10:0D:C8:E1:FB:C6:EA:24:0A:03:35:A9
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:91:f7:b0:18:10:fd:c0:4e:3c:2e:e6:86:4f:a2:e4:76:d5:
         0b:c5:80:42:54:7f:35:3f:4e:bb:99:ef:f5:78:77:1e:47:28:
         23:6f:0f:17:10:fb:a3:3c:66:cb:a0:bd:55:d5:bc:e0:a8:23:
         2b:7c:53:b9:d2:31:35:35:8c:f9:4c:63:17:65:a6:66:9d:12:
         65:a7:b1:d3:a8:18:c6:fb:2d:78:78:af:f6:cb:6e:b3:5d:e3:
         14:db:83:cf:62:00:e7:6a:7a:3d:14:49:61:a3:b1:83:74:ac:
         1d:b0:ec:30:65:20:82:ae:cb:0f:6c:25:92:03:86:49:26:b2:
         43:ee:39:52:7d:c0:e7:c9:ec:6a:25:c6:76:b5:69:cd:62:cb:
         10:6d:c0:6a:3f:56:dc:d5:b3:8a:4f:e3:87:27:29:4c:3a:b0:
         b1:6b:3f:22:c0:a9:ab:2e:6a:07:8d:c5:c1:7c:c0:05:37:ba:
         a6:91:0c:b6:5d:7c:78:f2:57:b6:db:d6:05:14:32:85:6c:cf:
         60:15:01:9f:14:5b:17:0d:5f:5a:ca:43:12:a2:2a:5f:96:d0:
         39:37:ba:85:75:cc:de:83:04:d3:bc:3c:22:d0:79:04:90:c4:
         50:68:14:6e:fb:54:1e:46:d8:00:4d:b8:1a:19:9f:40:04:99:
         ae:3b:c9:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaBOqCKIrTR7gAx/HInQo7r3S2/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwQzE2RUEzQTNCODI2NTAxRDAyQUMyRTYyRUY5QTFD
RDk3MTIwQzAeFw0yNjAyMDUwNzIyMzZaFw0yNzAyMDQwNzI3MzZaMDMxMTAvBgNV
BAMTKDlGNkEyMjQzMEI4OUE2MjMxMDBEQzhFMUZCQzZFQTI0MEEwMzM1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRanSOeT/Nxd8Q1xxcB7EaBlM9
PAp7Wppz8UJUzFjy6UNspPUi78KMTuupygwq1jfcHVeTYz3730M/Yt9XYLZu3DS1
i3kcITLda3cxN/f+9v/euBHp7Kz2OKbQt1e3qXpT+nmMMai1Ts7GvKa1TTk1wTVu
+qdwpyKcJ5wUHGfPtypcFG5jzilElF4griY/C3j3xmr4rI2/GVt6EZNXYExRto+u
DzQ5LEZhkJU5TlShtrnMBNiGk3xudJKS2QCh7nQ0AmDpXc3GPWXM5igBbBGyGqRa
3zD7rUkLlNxHj5xExsFhYFd1OgPLjPiMAxG056fyleVyuig49kQ00YlmgZiZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn2oiQwuJpiMQDcjh+8bqJAoDNakwHwYDVR0j
BBgwFoAU3AwW6jo7gmUB0CrC5i75oc2XEgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZ3dEM1b2g0OFpqR2FFS211SFJEUmo0Y05VN3M0U3ZhVXY2dnd0V3Vn
MU4vMS9EQzBDMTZFQTNBM0I4MjY1MDFEMDJBQzJFNjJFRjlBMUNEOTcxMjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMEMxNkVBM0EzQjgyNjUw
MUQwMkFDMkU2MkVGOUExQ0Q5NzEyMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGd3RDNW9oNDhaakdhRUttdUhSRFJqNGNOVTdzNFN2YVV2NnZ3dFd1ZzFOLzEv
MzQzNTJlMzIzMjM3MmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt43EwDQYJKoZIhvcNAQELBQADggEBAJOR97AY
EP3ATjwu5oZPouR21QvFgEJUfzU/TruZ7/V4dx5HKCNvDxcQ+6M8ZsugvVXVvOCo
Iyt8U7nSMTU1jPlMYxdlpmadEmWnsdOoGMb7LXh4r/bLbrNd4xTbg89iAOdqej0U
SWGjsYN0rB2w7DBlIIKuyw9sJZIDhkkmskPuOVJ9wOfJ7Golxna1ac1iyxBtwGo/
VtzVs4pP44cnKUw6sLFrPyLAqasuageNxcF8wAU3uqaRDLZdfHjyV7bb1gUUMoVs
z2AVAZ8UWxcNX1rKQxKiKl+W0Dk3uoV1zN6DBNO8PCLQeQSQxFBoFG77VB5G2ABN
uBoZn0AEma47yVY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:51 2026 by rpki-client