Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa (raw, json)
Hash identifier:          YVLbIPb2QGdO/rru8BTV5VqWTCm4q6VKJyltkYwzpDs=
Subject key identifier:   A1:7B:8B:76:6E:2B:59:0B:27:12:BD:DB:4F:8E:56:7D:57:52:55:BA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       5ED90B98D1B703C8039ED7FF9CFEC7FF5734BE0D
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:20 +0000
ROA not before:           Thu 05 Feb 2026 18:53:20 +0000
ROA not after:            Thu 04 Feb 2027 18:58:20 +0000
asID:                     263347
IP address blocks:        45.162.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d9:0b:98:d1:b7:03:c8:03:9e:d7:ff:9c:fe:c7:ff:57:34:be:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:20 2026 GMT
            Not After : Feb  4 18:58:20 2027 GMT
        Subject: CN=A17B8B766E2B590B2712BDDB4F8E567D575255BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:be:d2:d4:9d:f5:0b:62:3d:2f:41:74:bd:
                    08:0c:a9:77:2c:6d:d4:de:32:6b:4b:cb:78:4e:55:
                    57:e0:86:18:86:6a:5e:03:23:94:75:6c:01:d2:e3:
                    6b:13:f3:f2:e0:86:b9:1c:22:2c:7f:13:6e:15:6b:
                    12:4c:d9:c8:b6:93:6a:3b:45:3c:b3:05:9d:83:e2:
                    c5:16:fd:72:e9:7b:63:31:d6:14:c6:a5:d1:9f:72:
                    49:af:5d:67:82:79:b3:94:5a:62:85:cc:aa:bc:67:
                    fd:7d:f1:e7:2c:2c:1d:be:45:da:bc:ad:b9:ef:6c:
                    12:7f:6a:e1:3a:cc:19:1b:7b:45:aa:c0:ec:5e:c5:
                    60:fb:88:c2:de:5e:cc:9e:d6:61:0c:aa:51:41:e6:
                    54:c4:98:b9:e9:a8:6f:bf:44:9c:b4:ff:80:6f:39:
                    5c:50:b6:84:46:5d:f8:35:91:9b:51:93:c2:aa:5d:
                    0b:f9:cc:ed:98:16:a3:ed:23:99:4f:38:5a:77:3e:
                    a8:0d:4c:72:c3:8f:b5:94:10:36:ac:18:3e:bc:69:
                    7a:ab:3c:95:2a:e9:35:21:da:e8:28:54:49:57:2c:
                    fc:93:86:13:22:89:f2:74:f1:74:64:71:67:16:21:
                    9f:e3:33:e6:12:7d:89:ea:fb:34:26:91:20:9e:0d:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:8B:76:6E:2B:59:0B:27:12:BD:DB:4F:8E:56:7D:57:52:55:BA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:44:0a:2a:ad:bd:8f:0d:8f:1d:4c:e4:70:92:cf:3f:dc:
         58:02:00:82:56:a8:05:7d:37:d9:a2:f3:04:a2:a6:96:fd:c7:
         5b:5b:68:b3:1f:1f:43:8f:66:98:b0:ca:2a:5c:9f:66:bd:b5:
         e1:87:84:00:64:6a:56:9e:bf:bf:ed:e6:6e:b6:b7:97:8e:ed:
         ca:8d:03:4f:ce:52:9b:c1:17:77:d1:ef:b9:71:ea:86:4d:d7:
         76:06:f0:15:ce:5e:a1:6e:b3:0d:04:1f:3c:88:a7:ad:87:34:
         f5:50:ab:c3:01:7e:18:b6:40:bc:38:45:b6:0c:d6:e4:c4:d2:
         66:db:6b:3a:e6:81:45:6d:3d:27:60:04:77:41:f8:9d:f0:11:
         8c:4e:62:88:25:01:b0:17:8e:26:c2:6e:d2:6a:8c:c3:02:01:
         e3:cb:c9:81:6a:7d:df:5d:2d:5f:d5:73:08:41:8b:af:19:b2:
         7c:1e:86:c8:9e:87:ea:cf:a7:4d:a1:b1:b5:52:c4:bc:41:d9:
         2a:e9:55:d8:7b:69:0b:c8:8b:29:ea:87:74:90:23:ef:5f:f8:
         b0:be:e3:09:94:4a:75:32:f1:99:ec:a4:b6:61:5b:05:10:7f:
         76:1d:3b:97:37:7d:33:91:42:94:3a:74:18:01:46:36:23:d0:
         2d:f1:da:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXtkLmNG3A8gDntf/nP7H/1c0vg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNjAyMDUxODUzMjBaFw0yNzAyMDQxODU4MjBaMDMxMTAvBgNV
BAMTKEExN0I4Qjc2NkUyQjU5MEIyNzEyQkREQjRGOEU1NjdENTc1MjU1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Pr7S1J31C2I9L0F0vQgMqXcs
bdTeMmtLy3hOVVfghhiGal4DI5R1bAHS42sT8/LghrkcIix/E24VaxJM2ci2k2o7
RTyzBZ2D4sUW/XLpe2Mx1hTGpdGfckmvXWeCebOUWmKFzKq8Z/198ecsLB2+Rdq8
rbnvbBJ/auE6zBkbe0WqwOxexWD7iMLeXsye1mEMqlFB5lTEmLnpqG+/RJy0/4Bv
OVxQtoRGXfg1kZtRk8KqXQv5zO2YFqPtI5lPOFp3PqgNTHLDj7WUEDasGD68aXqr
PJUq6TUh2ugoVElXLPyThhMiifJ08XRkcWcWIZ/jM+YSfYnq+zQmkSCeDdIJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoXuLdm4rWQsnEr3bT45WfVdSVbowHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzQzNTJlMzEzNjMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItopgwDQYJKoZIhvcNAQELBQADggEBAHn/RAoq
rb2PDY8dTORwks8/3FgCAIJWqAV9N9mi8wSippb9x1tbaLMfH0OPZpiwyipcn2a9
teGHhABkalaev7/t5m62t5eO7cqNA0/OUpvBF3fR77lx6oZN13YG8BXOXqFusw0E
HzyIp62HNPVQq8MBfhi2QLw4RbYM1uTE0mbbazrmgUVtPSdgBHdB+J3wEYxOYogl
AbAXjibCbtJqjMMCAePLyYFqfd9dLV/VcwhBi68Zsnwehsieh+rPp02hsbVSxLxB
2SrpVdh7aQvIiynqh3SQI+9f+LC+4wmUSnUy8ZnspLZhWwUQf3YdO5c3fTORQpQ6
dBgBRjYj0C3x2i4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:11 2026 by rpki-client