Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
File:                     34352e3233352e34342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          18yFYL+UFLMOSuXARsZRlAPvjnijkeMx1rbshfdck8Q=
Subject key identifier:   F4:08:63:1F:56:75:78:05:80:EB:8D:EC:2B:DE:FE:F9:A7:78:6F:4C
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       153A4B38B2CDCA39A002CEE70E8331E8A5AEA4B7
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa
Signing time:             Wed 04 Feb 2026 19:23:00 +0000
ROA not before:           Wed 04 Feb 2026 19:18:00 +0000
ROA not after:            Wed 03 Feb 2027 19:23:00 +0000
asID:                     268200
IP address blocks:        45.235.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3a:4b:38:b2:cd:ca:39:a0:02:ce:e7:0e:83:31:e8:a5:ae:a4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Feb  4 19:18:00 2026 GMT
            Not After : Feb  3 19:23:00 2027 GMT
        Subject: CN=F408631F5675780580EB8DEC2BDEFEF9A7786F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:7c:5e:05:8c:18:39:7c:56:cb:94:54:47:
                    cf:f0:db:88:5c:fb:0b:0f:1f:a0:f4:f2:65:f7:88:
                    29:39:0d:41:65:21:93:b8:17:94:d1:a6:e5:bf:3a:
                    49:aa:e4:37:d3:93:a0:4c:0b:4e:06:cb:02:4b:c2:
                    d9:eb:00:aa:d2:a0:6d:d2:b4:f0:62:cd:2e:6e:de:
                    ff:fc:48:5e:a3:ae:fc:9d:6f:5c:3d:77:1a:9b:92:
                    76:41:64:90:77:43:cd:62:5c:2b:a5:d0:4d:57:55:
                    5b:ea:ba:c5:13:89:54:fc:51:07:67:8a:bd:66:df:
                    12:7f:f8:c6:63:fb:89:6e:41:b6:4b:30:40:87:5d:
                    0d:17:45:0a:ff:ec:df:fe:63:ec:fc:11:c7:ea:46:
                    fa:f7:9b:93:07:4f:a8:90:07:d5:c1:9e:de:0e:35:
                    b0:99:44:5a:f4:4a:10:cc:97:13:6d:5f:80:7e:02:
                    81:a1:f9:e6:de:0a:37:ec:2f:ad:91:48:b3:04:91:
                    f6:4f:cc:16:5b:8e:75:a9:6e:72:ab:23:08:5a:0f:
                    34:8c:7a:04:77:73:74:0e:13:b6:b6:61:e4:a6:7d:
                    63:43:22:53:c6:c5:82:53:11:71:72:13:80:a5:77:
                    e4:3f:c0:3a:d5:6d:53:93:05:76:4f:3f:c0:9d:94:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:63:1F:56:75:78:05:80:EB:8D:EC:2B:DE:FE:F9:A7:78:6F:4C
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/34352e3233352e34342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:a2:96:6e:ea:11:bc:43:97:c0:20:31:8f:74:60:93:6e:70:
         2f:3e:57:1a:40:36:51:47:a5:87:c6:c4:cc:91:12:73:f6:17:
         e6:41:ee:82:17:f7:73:e8:de:f1:66:cc:11:f9:5c:cd:1e:07:
         9f:84:21:db:b3:cd:29:48:b2:55:6d:65:f5:22:fb:8d:92:b8:
         44:10:d8:4d:5c:90:40:75:58:49:c9:30:88:64:7e:af:07:6b:
         58:2b:af:e8:b4:4a:f1:7c:1b:0f:b0:28:f5:53:dd:df:7f:e7:
         31:7e:b9:6a:1b:71:69:6d:88:55:5a:5a:50:d3:21:70:e1:d9:
         ad:80:f6:58:7b:7a:01:c3:16:6f:12:a2:d8:41:72:68:d1:8f:
         7b:c5:f0:bc:24:da:87:66:e7:f3:a4:c0:9f:89:10:54:60:ff:
         f4:55:07:06:6e:74:52:0d:0a:11:a5:f1:8f:ca:2e:06:c6:c2:
         4b:2d:22:1e:4d:f9:5f:b8:70:f4:9e:9b:a4:f8:c3:25:a0:9e:
         9e:f2:f4:f0:7b:56:e5:02:80:54:5c:9f:dc:1d:89:59:85:89:
         c6:86:e0:08:81:ef:4b:f5:00:05:d9:80:86:59:4f:93:ed:20:
         3f:62:84:5d:55:7a:a5:45:46:61:a2:b7:5e:e1:ae:3f:a9:4d:
         f3:4c:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:40 2026 by rpki-client