Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/34352e3232362e34302e302f32322d3234203d3e20323636393836.roa
File:                     34352e3232362e34302e302f32322d3234203d3e20323636393836.roa (raw, json)
Hash identifier:          hl0hhihmNyr6N0Y2cWMmnEIwce/AI+vGaOJeD2AhF/8=
Subject key identifier:   7F:8C:22:31:8C:CC:F5:62:6A:31:0D:E8:ED:4C:B4:EF:6D:B1:89:CB
Certificate issuer:       /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
Certificate serial:       50E2D63FEC52C35B20B5D1021FDD9B465A53B485
Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/34352e3232362e34302e302f32322d3234203d3e20323636393836.roa
Signing time:             Thu 05 Feb 2026 10:23:08 +0000
ROA not before:           Thu 05 Feb 2026 10:18:08 +0000
ROA not after:            Thu 04 Feb 2027 10:23:08 +0000
asID:                     266986
IP address blocks:        45.226.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl
                          rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e2:d6:3f:ec:52:c3:5b:20:b5:d1:02:1f:dd:9b:46:5a:53:b4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Validity
            Not Before: Feb  5 10:18:08 2026 GMT
            Not After : Feb  4 10:23:08 2027 GMT
        Subject: CN=7F8C22318CCCF5626A310DE8ED4CB4EF6DB189CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:15:07:02:90:86:8d:ff:ed:73:61:bb:7f:
                    cc:90:18:61:1e:68:3e:6b:4d:33:0e:f3:6b:18:35:
                    ac:db:e0:9d:81:85:ad:91:5a:15:f4:51:6a:f2:84:
                    2e:71:b7:f8:3f:a5:0d:03:82:3b:9e:94:80:1c:d9:
                    d8:03:a4:ac:ac:2d:37:93:0e:94:44:55:eb:a6:aa:
                    af:e3:1c:29:38:b9:52:6e:9d:e6:8e:a6:d4:f7:b6:
                    f2:7a:fa:1b:c4:49:f5:e0:88:33:5c:b0:a4:42:b8:
                    5d:16:05:af:86:4b:be:77:5f:78:07:76:01:b2:fa:
                    50:a6:d4:f5:19:09:88:e9:dc:40:bf:fa:2b:cb:a4:
                    3a:da:5f:19:f3:6a:6a:f0:73:4a:d0:98:f3:b3:84:
                    41:60:7c:bc:e6:3d:43:e2:ad:7f:1f:6d:e1:41:54:
                    be:61:1f:8a:f2:b5:f8:7a:51:13:4d:6a:ed:59:47:
                    00:84:a2:06:22:22:13:4c:7e:f2:ad:4a:3e:11:38:
                    e0:56:4c:d5:36:a6:90:cd:1c:89:cd:11:86:3d:d3:
                    66:b5:bb:cf:df:7d:d6:3b:4d:fb:ec:b3:45:e6:49:
                    34:a1:ed:13:59:ae:e4:a7:33:88:8c:ab:15:74:b3:
                    9b:a9:f0:05:64:e4:aa:f0:d6:8a:14:7f:b0:ff:80:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:22:31:8C:CC:F5:62:6A:31:0D:E8:ED:4C:B4:EF:6D:B1:89:CB
            X509v3 Authority Key Identifier:
                keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/34352e3232362e34302e302f32322d3234203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:47:ce:f4:cd:6a:02:c1:fe:a4:40:aa:ce:7b:93:fb:b3:b6:
         d8:25:8b:11:55:3f:d0:d7:1b:e3:b8:3d:50:9b:2e:62:aa:cd:
         18:cb:b9:90:a6:40:7d:cc:c4:42:5a:19:24:d3:84:a3:2b:1f:
         ad:04:19:23:ee:0f:8c:5c:c0:16:ce:fb:f5:01:e8:f1:04:59:
         80:95:14:d1:00:62:5c:bf:4f:2c:fb:70:4f:f6:ed:f3:43:70:
         b9:8f:a6:58:50:55:a8:2e:dd:0c:5d:19:56:ec:bb:4a:0b:ea:
         67:50:d8:90:f8:53:95:7f:4f:1d:51:ac:e2:05:18:c9:2f:50:
         45:cf:e1:8f:57:d7:5f:b9:37:b5:a9:98:c8:96:58:91:46:6e:
         5e:2d:ed:7d:7d:73:80:70:de:31:24:7e:57:82:f6:b9:74:eb:
         04:71:2f:11:12:b9:ed:bd:12:ef:1c:5a:19:74:0d:93:64:fe:
         e0:f8:8e:a6:1c:c8:dc:2e:42:7f:f1:ee:bd:42:51:45:64:c5:
         53:68:0f:44:e2:c9:e8:4c:a4:7a:0d:e2:2e:42:cd:65:61:25:
         d0:8d:b0:4e:d0:05:1b:e5:3e:e0:20:a1:a0:93:5e:ab:4e:bd:
         71:ec:d1:eb:42:81:cb:ba:d2:8e:56:06:eb:95:b9:43:15:35:
         39:09:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:49:36 2026 by rpki-client