Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa
File:                     34352e3233332e35322e302f32322d3234203d3e20323637323939.roa (raw, json)
Hash identifier:          f+0wQQ+1khb9KST4WStr3NShMXgm+a+LeCzciTNAj5E=
Subject key identifier:   AD:46:E0:95:BC:E8:C5:C7:D7:46:9F:DA:99:CC:54:07:66:81:31:70
Certificate issuer:       /CN=F1819F336E15B82769119C5B919D4F6F3543575A
Certificate serial:       71359EFCFD32FB4BDEA7AC95492A9C5E3A6699AD
Authority key identifier: F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa
Signing time:             Thu 05 Feb 2026 16:56:18 +0000
ROA not before:           Thu 05 Feb 2026 16:51:18 +0000
ROA not after:            Thu 04 Feb 2027 16:56:18 +0000
asID:                     267299
IP address blocks:        45.233.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl
                          rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:35:9e:fc:fd:32:fb:4b:de:a7:ac:95:49:2a:9c:5e:3a:66:99:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1819F336E15B82769119C5B919D4F6F3543575A
        Validity
            Not Before: Feb  5 16:51:18 2026 GMT
            Not After : Feb  4 16:56:18 2027 GMT
        Subject: CN=AD46E095BCE8C5C7D7469FDA99CC540766813170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:58:a3:be:1b:97:a9:5e:30:68:22:2f:bf:b8:
                    a4:f7:57:3a:43:2c:39:8b:93:2e:6a:9a:40:43:22:
                    32:3e:76:71:12:29:df:b3:6e:30:d4:7e:86:b7:70:
                    7e:91:88:c9:50:b5:d0:9b:e0:ea:1a:ae:88:91:c5:
                    26:36:74:a1:94:9c:8f:0f:44:ce:d7:79:cf:46:c2:
                    21:0a:7c:50:4b:d2:f7:88:03:c0:9a:ba:3d:75:4f:
                    cf:07:ea:f5:36:fa:a7:1e:46:f9:8e:ec:06:6a:4d:
                    06:0f:13:b7:d8:b2:72:68:4d:cc:f2:50:fa:e2:df:
                    10:6c:97:10:5c:fa:0b:60:7c:ea:b5:11:5d:41:35:
                    3f:f9:aa:5c:98:78:5f:f2:cb:7d:33:73:97:dc:32:
                    39:9d:0d:ec:5c:f6:02:e2:15:4a:87:46:b6:6e:38:
                    30:c7:fc:fa:5a:41:50:4d:1d:aa:2a:c8:29:d0:07:
                    43:68:8a:18:30:bd:e6:e6:20:ef:4e:01:ee:91:a3:
                    7e:a7:f1:9d:5c:b6:36:27:2d:24:f9:f1:93:ff:f1:
                    68:43:ac:87:39:c3:fe:e1:62:58:6c:fb:9c:0d:97:
                    d4:13:5e:8b:39:34:ac:34:e0:56:24:62:03:e1:e8:
                    21:d3:f4:7a:44:19:77:d7:04:3e:78:d3:0c:1a:88:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:46:E0:95:BC:E8:C5:C7:D7:46:9F:DA:99:CC:54:07:66:81:31:70
            X509v3 Authority Key Identifier:
                keyid:F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:62:09:bd:14:39:65:58:2e:dc:55:6c:70:f1:03:e4:5c:1f:
         12:76:20:13:76:32:ab:da:66:22:2b:61:d4:43:8d:73:a9:19:
         ae:b6:64:30:d9:f3:a0:41:20:3c:43:6f:06:f1:f5:26:26:12:
         41:c8:44:b1:ad:28:dc:6c:34:ec:d5:3a:38:7e:5f:05:9b:30:
         19:9b:0e:46:b6:83:01:c5:49:d0:74:c4:6a:de:3b:15:08:f0:
         a7:20:2a:16:1f:59:15:a6:0f:c2:5f:24:6c:20:1b:c5:16:43:
         00:58:8f:4e:0b:6a:63:63:15:a1:9f:ac:e6:35:fa:82:0f:f3:
         d9:e6:67:c3:6a:71:56:9e:74:7f:a9:97:06:5d:56:51:9d:57:
         81:13:f2:60:ab:ed:de:ab:22:d9:4d:f7:4a:da:c6:55:52:7d:
         30:b5:d9:31:67:6f:73:a5:6b:7f:32:56:b4:fd:db:93:06:75:
         ad:21:10:a2:20:2e:74:a7:f9:af:7b:a8:6d:89:e8:15:b8:49:
         9f:d0:2f:ea:79:c4:8f:a7:75:9d:41:2f:c9:d3:5c:17:d5:94:
         60:4e:d0:64:df:66:1a:08:63:fb:da:a1:58:cc:ff:88:7d:ba:
         58:c0:e6:96:37:25:c4:63:00:ef:6d:40:81:f9:34:37:b0:bf:
         30:42:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:25 2026 by rpki-client