Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          d9NLUAPlIpSQlD3F6W7UIyHtHEirNL537HZMt4Gr7rs=
Subject key identifier:   84:CC:E0:51:15:A9:66:9C:31:DC:93:47:C0:65:9B:E1:B2:10:38:89
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       4DF71961F8B04141579AD9AE96160371FE36A429
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
Signing time:             Thu 05 Feb 2026 14:24:22 +0000
ROA not before:           Thu 05 Feb 2026 14:19:22 +0000
ROA not after:            Thu 04 Feb 2027 14:24:22 +0000
asID:                     267177
IP address blocks:        45.230.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f7:19:61:f8:b0:41:41:57:9a:d9:ae:96:16:03:71:fe:36:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Feb  5 14:19:22 2026 GMT
            Not After : Feb  4 14:24:22 2027 GMT
        Subject: CN=84CCE05115A9669C31DC9347C0659BE1B2103889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:f8:2f:51:a5:04:66:98:14:38:f2:ce:08:
                    f5:cf:a3:fb:20:ef:3b:d0:b8:45:00:fb:6e:72:c8:
                    3a:80:06:08:b2:3c:d9:60:47:f0:fc:8a:5a:e4:d7:
                    67:c1:47:c7:3c:24:ea:64:ad:63:6c:0b:41:2d:a2:
                    9f:7b:07:4d:33:85:fd:54:08:aa:71:4d:6d:60:37:
                    f1:ec:21:4b:8e:8a:be:cd:76:38:c7:0a:18:3e:5c:
                    45:9e:e0:47:d4:a8:75:78:68:15:b4:e3:d2:6e:34:
                    e6:d4:1f:e8:31:8e:d1:9d:d6:32:45:25:f0:5e:eb:
                    cd:34:90:de:5b:9b:19:75:f4:d5:5f:de:21:ed:43:
                    23:25:7e:a8:44:c7:55:9d:84:28:d0:30:6b:7b:d1:
                    d3:5a:1e:f0:db:5a:d1:8a:08:88:9d:4f:13:e6:a8:
                    78:e9:f4:6f:d3:93:08:a1:fb:9b:81:38:ad:68:65:
                    38:9e:8e:5e:54:2e:cc:f4:10:e6:10:d7:5f:13:04:
                    79:89:f9:9a:54:24:16:60:d3:8a:a6:9d:9b:47:dd:
                    72:f9:dc:8a:9a:a0:31:85:bc:6a:65:84:6e:9a:e7:
                    69:3c:ae:c0:49:fe:80:73:10:57:92:1d:6f:9a:a3:
                    70:e5:c9:87:53:3d:5e:05:74:f8:e0:b6:f9:08:0f:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:E0:51:15:A9:66:9C:31:DC:93:47:C0:65:9B:E1:B2:10:38:89
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:4b:99:cd:27:76:eb:aa:fc:4c:1c:63:14:1e:4c:b1:d3:
         d6:f8:c8:dc:fa:62:1a:4a:0d:4a:25:dd:03:b0:17:c6:4d:a4:
         a9:83:ef:67:00:ba:a9:c2:35:a4:67:91:36:3f:cb:a0:9c:48:
         1c:76:41:b0:c5:87:0d:28:3f:ed:91:d1:c2:bb:3b:ff:b4:34:
         9d:a1:0d:62:43:a8:08:63:91:81:90:51:ca:2b:db:9c:29:6b:
         ea:98:79:84:fa:d9:7e:80:33:9f:39:db:f1:ac:9b:b3:45:81:
         cb:61:7d:78:25:d1:f9:f0:c1:99:33:d1:70:59:a1:56:c1:fc:
         b2:fd:a1:90:ec:3a:d1:27:48:d8:3a:fc:d1:6a:05:f8:0b:1c:
         56:2c:05:bf:71:c0:6a:6a:be:59:b7:64:ad:78:9f:79:38:7d:
         99:02:a9:19:78:c4:c2:1d:bf:53:46:b4:ba:47:25:12:a9:95:
         8b:35:d2:97:61:1a:16:ab:9b:ea:0b:28:6f:5f:21:77:41:c5:
         ea:cd:4e:b8:f6:5c:2a:ba:a0:be:25:c9:c6:52:16:d2:dc:48:
         2b:10:84:45:a3:db:ae:74:9b:f9:4a:90:9a:e1:ea:34:da:64:
         d5:d1:74:1d:07:34:45:ed:78:d6:b3:cd:4d:a7:e4:f8:ae:62:
         f5:2d:2a:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTfcZYfiwQUFXmtmulhYDcf42pCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFQTYxQkI5REFGM0Y1QjU4ODg2Q0MzRTNGNkExN0VC
QkRGRTBBMjAeFw0yNjAyMDUxNDE5MjJaFw0yNzAyMDQxNDI0MjJaMDMxMTAvBgNV
BAMTKDg0Q0NFMDUxMTVBOTY2OUMzMURDOTM0N0MwNjU5QkUxQjIxMDM4ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJPgvUaUEZpgUOPLOCPXPo/sg
7zvQuEUA+25yyDqABgiyPNlgR/D8ilrk12fBR8c8JOpkrWNsC0Etop97B00zhf1U
CKpxTW1gN/HsIUuOir7NdjjHChg+XEWe4EfUqHV4aBW049JuNObUH+gxjtGd1jJF
JfBe6800kN5bmxl19NVf3iHtQyMlfqhEx1WdhCjQMGt70dNaHvDbWtGKCIidTxPm
qHjp9G/Tkwih+5uBOK1oZTiejl5ULsz0EOYQ118TBHmJ+ZpUJBZg04qmnZtH3XL5
3IqaoDGFvGplhG6a52k8rsBJ/oBzEFeSHW+ao3DlyYdTPV4FdPjgtvkID95JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhMzgURWpZpwx3JNHwGWb4bIQOIkwHwYDVR0j
BBgwFoAUduphu52vP1tYiGzD4/ahfrvf4KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05DUm5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJl
MVcvMS83NkVBNjFCQjlEQUYzRjVCNTg4ODZDQzNFM0Y2QTE3RUJCREZFMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RUE2MUJCOURBRjNGNUI1
ODg4NkNDM0UzRjZBMTdFQkJERkUwQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOQ1Juak1OVVM4amZTeUZpbk1aUHh2bXZjYXRKWm1vQ3N2Y0F3Zm5iZTFXLzEv
MzQzNTJlMzIzMzMwMmUzMjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5ukwDQYJKoZIhvcNAQELBQADggEBADVrS5nN
J3brqvxMHGMUHkyx09b4yNz6YhpKDUol3QOwF8ZNpKmD72cAuqnCNaRnkTY/y6Cc
SBx2QbDFhw0oP+2R0cK7O/+0NJ2hDWJDqAhjkYGQUcor25wpa+qYeYT62X6AM585
2/Gsm7NFgcthfXgl0fnwwZkz0XBZoVbB/LL9oZDsOtEnSNg6/NFqBfgLHFYsBb9x
wGpqvlm3ZK14n3k4fZkCqRl4xMIdv1NGtLpHJRKplYs10pdhGharm+oLKG9fIXdB
xerNTrj2XCq6oL4lycZSFtLcSCsQhEWj2650m/lKkJrh6jTaZNXRdB0HNEXteNaz
zU2n5PiuYvUtKn0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:44 2026 by rpki-client