Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa (raw, json)
Hash identifier:          Eqn5CJzYNHQStrZaMaoB9+juhfmAG6PRmaDACkpHXSo=
Subject key identifier:   F8:79:E3:64:FC:DF:D2:88:F7:87:81:38:9D:07:3F:EC:CB:35:AC:3D
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       2E4AA43AC582FE52F43A41DEB86A4020AEA99A1B
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa
Signing time:             Wed 04 Feb 2026 22:46:09 +0000
ROA not before:           Wed 04 Feb 2026 22:41:09 +0000
ROA not after:            Wed 03 Feb 2027 22:46:09 +0000
asID:                     268106
IP address blocks:        45.169.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4a:a4:3a:c5:82:fe:52:f4:3a:41:de:b8:6a:40:20:ae:a9:9a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Feb  4 22:41:09 2026 GMT
            Not After : Feb  3 22:46:09 2027 GMT
        Subject: CN=F879E364FCDFD288F78781389D073FECCB35AC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:88:2c:36:71:fa:83:7f:60:e1:a4:47:c9:
                    27:38:ef:c4:40:be:63:56:0f:af:60:cd:b0:3b:e4:
                    0e:b6:d0:36:af:49:f3:25:cf:86:e8:86:8f:7c:24:
                    64:d3:2c:03:ab:16:37:e2:bc:19:2b:6c:c2:eb:58:
                    b0:8a:2e:57:f5:cf:21:f4:73:c0:c4:5e:db:81:58:
                    7a:58:7f:4b:2b:78:fd:4e:71:13:ae:8f:5c:95:36:
                    fe:d9:94:2e:d2:7b:9d:1a:d0:40:75:8b:7c:03:df:
                    85:73:4e:98:3f:f4:76:28:55:43:ad:91:e3:8b:46:
                    73:f8:72:2f:9e:58:98:05:86:c0:9b:84:00:bf:a5:
                    ee:88:03:18:0e:1b:2d:24:f4:99:90:75:81:06:e2:
                    e9:82:bc:66:4c:be:1e:c4:d8:89:42:4c:c0:b9:7d:
                    f4:28:be:05:81:65:50:20:4c:2b:9f:82:0b:98:66:
                    23:62:69:3f:cf:e8:c9:25:ae:ff:de:6b:81:a0:f6:
                    ce:e5:b7:9b:fd:09:9f:cf:80:be:f0:9b:83:43:b6:
                    47:8b:c7:e5:85:f3:a2:03:22:f2:6f:7f:13:83:e4:
                    b9:eb:ee:40:39:4f:c3:3e:dc:42:72:8b:90:cf:bc:
                    85:84:f2:2f:39:79:f3:8b:d3:0d:4d:59:4f:45:66:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:E3:64:FC:DF:D2:88:F7:87:81:38:9D:07:3F:EC:CB:35:AC:3D
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:95:13:ff:b1:f4:c9:0b:07:4e:9d:2a:ae:60:81:1d:c5:c5:
         ad:0d:0c:46:72:66:84:9b:90:2a:0d:ae:6b:fb:a2:38:76:de:
         30:67:99:5f:1c:69:0d:87:0c:45:a3:67:9e:23:b5:1c:b7:ad:
         c5:c4:06:17:a6:31:f2:4d:dc:29:a6:d2:83:b4:8a:e3:d0:c6:
         fe:44:70:d3:e9:0c:63:b0:1f:6f:2e:64:61:e1:d8:6f:7d:18:
         26:46:6a:89:75:b4:20:0d:ba:4c:21:e4:e9:51:48:f4:34:2a:
         65:ec:05:f4:e6:bc:d3:4f:1f:5a:f4:06:b2:cf:a8:7d:7c:a0:
         09:ee:bb:22:fc:a5:c2:25:04:e4:a1:b1:aa:1e:9e:0e:74:1a:
         d8:ac:84:57:26:99:c0:b4:83:82:04:37:f7:43:48:ba:82:59:
         42:e0:ab:26:12:2f:8b:16:6d:a1:0b:00:8a:02:f4:51:bc:b6:
         69:cc:c3:10:48:34:e8:78:4d:51:1f:87:b9:5a:ec:96:2b:b0:
         74:a5:d6:29:09:5a:67:e5:7b:e6:df:05:47:28:e2:ef:bd:a1:
         ef:d7:f5:33:0d:be:ee:bb:b0:34:79:6a:03:71:16:af:50:52:
         81:ee:f7:8e:59:83:63:31:54:c5:77:85:e8:70:e8:27:0b:d4:
         10:c2:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:01 2026 by rpki-client