Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
File:                     34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (raw, json)
Hash identifier:          C0pX84zBEhKRhl9C5gFvhi/VFuecxZXh/uAPLmzVMVw=
Subject key identifier:   4B:D6:31:74:3D:71:EF:35:4A:C9:A6:EA:BF:53:74:6A:D7:80:A8:5A
Certificate issuer:       /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
Certificate serial:       14B3792DAF258F1A0036DED16D3FAC8632800B99
Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
Signing time:             Sat 07 Feb 2026 23:15:00 +0000
ROA not before:           Sat 07 Feb 2026 23:10:00 +0000
ROA not after:            Sat 06 Feb 2027 23:15:00 +0000
asID:                     269139
IP address blocks:        45.180.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl
                          rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b3:79:2d:af:25:8f:1a:00:36:de:d1:6d:3f:ac:86:32:80:0b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
        Validity
            Not Before: Feb  7 23:10:00 2026 GMT
            Not After : Feb  6 23:15:00 2027 GMT
        Subject: CN=4BD631743D71EF354AC9A6EABF53746AD780A85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:04:be:e0:b9:1f:a6:8a:9d:0d:f5:b4:cd:
                    e7:16:d7:c1:c4:04:86:a1:51:2e:91:33:ab:a1:fa:
                    23:b0:02:16:fb:97:bc:8c:cf:80:18:ef:3f:df:ba:
                    d7:bc:d9:36:63:36:b3:e7:a3:d1:69:85:74:84:91:
                    2e:69:d9:fe:58:86:a7:50:9f:5d:2c:70:29:fb:b7:
                    cd:f7:72:82:4c:01:88:e6:e3:fa:a1:23:a2:a9:3c:
                    38:6e:83:50:7e:3f:ab:4e:11:42:95:b1:24:47:45:
                    31:c4:21:f1:8d:38:84:91:ae:06:5a:42:0c:60:11:
                    43:02:96:76:8c:10:ad:f7:e8:4f:9c:b6:c0:56:32:
                    56:e5:1b:69:0a:79:60:03:95:ee:f6:b7:3b:6f:21:
                    c4:5c:04:23:de:fa:e8:d8:d0:8a:1c:b8:b5:6e:dc:
                    93:ec:00:69:7d:03:db:3e:7e:f2:b6:0b:96:42:25:
                    ba:95:41:d0:1f:ff:69:df:8c:a4:5f:85:52:62:2a:
                    0a:b6:2a:3d:61:e4:7f:cb:06:5e:8f:85:81:41:56:
                    f4:67:6b:e8:d7:db:17:e8:c9:40:4a:8b:65:e4:63:
                    11:f9:14:55:a3:de:3f:f2:b2:8b:fa:19:86:70:73:
                    5c:14:46:3b:08:c7:44:0b:11:23:9d:0a:a9:14:a1:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:31:74:3D:71:EF:35:4A:C9:A6:EA:BF:53:74:6A:D7:80:A8:5A
            X509v3 Authority Key Identifier:
                keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:89:c8:4f:9b:e3:01:e7:c3:32:ea:59:47:11:c9:c4:29:
         83:a4:45:4e:c1:b2:dc:08:b9:99:ab:ea:fd:1b:40:b3:f3:e8:
         f4:12:e5:e5:1b:50:3c:27:19:89:93:45:0f:5d:53:c6:61:d3:
         89:a4:e3:cc:ed:60:e8:32:27:43:a1:27:a4:a7:18:10:ad:3d:
         c9:28:d6:64:01:9b:15:2d:e2:d4:89:11:03:34:c3:94:71:01:
         88:d6:25:a4:73:5b:50:cc:b4:b4:4b:ba:d9:87:81:a5:89:3f:
         1f:5d:ab:5e:e9:e3:8b:90:9d:cf:b0:22:c5:66:6e:83:63:73:
         07:65:02:20:ac:3d:b9:4f:f1:ae:40:ec:51:c8:04:bc:7d:60:
         80:4e:d0:49:5d:6f:9e:c1:b9:bd:9f:48:d8:f1:03:3c:3e:c3:
         98:cb:18:49:85:40:64:6c:61:2e:65:b9:87:31:ee:a3:27:3c:
         05:12:02:d4:ff:fe:b6:15:98:2f:1d:62:76:e5:74:ab:e6:26:
         22:54:73:1b:e6:24:0c:e2:25:c4:a5:9f:2f:8f:72:8f:dd:64:
         65:d4:53:d1:70:6a:c6:2a:fb:83:cd:f8:64:cd:eb:f6:47:bb:
         fb:83:6c:95:bb:7a:eb:ef:aa:38:d4:12:be:cb:23:bf:86:35:
         bf:84:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:29 2026 by rpki-client