Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=
Subject key identifier:   73:7F:8A:F4:8A:1E:4A:C2:58:73:76:5D:8E:11:6C:94:52:24:09:74
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       1139321BBAE6015986EEF2ECCA2A4103141AE932
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267334
IP address blocks:        45.233.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:32:1b:ba:e6:01:59:86:ee:f2:ec:ca:2a:41:03:14:1a:e9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=737F8AF48A1E4AC25873765D8E116C9452240974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:ea:95:46:82:fa:41:a7:1c:d9:04:8d:2f:
                    4a:5e:e7:f9:21:c5:ee:12:e9:07:99:28:87:2b:a0:
                    b9:b0:63:ae:14:52:7e:dc:9f:13:60:3c:ef:98:15:
                    44:b4:83:d1:3e:16:88:1c:da:2a:95:18:7c:a5:23:
                    32:8e:04:08:be:bd:b4:99:b5:ec:6a:94:8f:49:36:
                    c0:b7:7c:e5:52:c9:c1:fd:bf:13:9e:5e:f3:24:45:
                    e3:df:5a:63:39:eb:15:60:e1:fb:47:11:ba:a1:f5:
                    63:be:29:0c:8e:db:77:4e:85:83:89:10:86:79:1f:
                    df:b0:7f:28:d4:da:ca:39:91:18:64:d8:3c:5f:22:
                    4f:3c:27:f8:a5:b3:c7:26:66:ec:10:da:c1:46:2f:
                    1e:7f:e9:bf:42:07:9c:04:eb:bc:08:45:a4:1b:a6:
                    10:1f:fd:1b:e7:95:03:2a:c5:0e:42:c5:5e:90:47:
                    a2:00:75:b5:87:cc:18:76:80:0e:8f:56:ba:8b:5d:
                    d1:37:24:7d:ee:44:ac:a6:4d:d7:0c:5a:5b:76:d1:
                    01:86:07:f3:87:12:f7:54:59:3f:6c:36:9b:10:fe:
                    bd:73:40:af:58:05:e7:8b:7a:64:33:6f:0a:f8:1f:
                    26:a2:9c:11:1e:31:70:be:d0:2e:62:a8:a1:72:68:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:8A:F4:8A:1E:4A:C2:58:73:76:5D:8E:11:6C:94:52:24:09:74
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:44:2d:e1:d5:f2:59:d9:ed:27:73:55:db:05:f4:e2:9d:
         46:fd:46:5c:5b:5d:ff:51:7c:07:94:22:3c:79:14:0f:3e:09:
         37:32:a8:3e:48:2d:fd:d5:88:cf:5e:5d:0d:60:06:58:e6:a1:
         ee:53:eb:d6:32:79:49:bc:de:b2:cc:d9:50:f7:73:ef:01:04:
         66:d0:92:8c:e8:07:86:fb:df:2f:fb:22:55:4f:e2:d4:06:64:
         2e:ac:66:46:30:96:8a:2a:b0:9d:87:e6:38:8e:fe:94:c1:ad:
         e7:2a:01:c9:d0:b1:ad:dd:a0:a7:74:c8:5f:bb:04:50:8f:b0:
         75:21:7d:98:10:fb:09:62:26:ed:e0:c8:80:b0:ad:52:3c:99:
         cf:4d:6f:b2:33:fa:82:2c:da:3e:72:9f:11:12:08:7b:ec:e7:
         d8:03:32:bd:8c:66:c2:ea:94:de:41:77:a1:bb:d2:ea:a8:3d:
         10:45:ee:60:11:26:2b:fb:fa:1d:aa:5f:d1:1c:6d:85:41:c8:
         0c:ae:9e:1d:d1:16:a0:2f:d7:82:b6:26:30:cb:27:c2:28:46:
         21:c8:eb:63:b4:b7:a6:37:e1:22:9d:a0:3e:ea:1c:bf:69:76:
         c0:6c:24:ff:9a:18:ce:5c:a4:b9:ce:48:f2:6c:ec:bb:e0:c9:
         5f:1c:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:40 2026 by rpki-client