Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          NK2FVhuJtm1ZP2czUAXn/3YbfOpP1cH5Id4RQLnuufQ=
Subject key identifier:   04:64:6A:8F:01:24:B5:6E:F1:CF:1E:25:65:0C:3A:1E:F0:B0:E8:2F
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       4AD586878488ABC2C1E269104D689CD56CE05849
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 05 Feb 2026 18:29:44 +0000
ROA not before:           Thu 05 Feb 2026 18:24:44 +0000
ROA not after:            Thu 04 Feb 2027 18:29:44 +0000
asID:                     271632
IP address blocks:        45.172.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d5:86:87:84:88:ab:c2:c1:e2:69:10:4d:68:9c:d5:6c:e0:58:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Feb  5 18:24:44 2026 GMT
            Not After : Feb  4 18:29:44 2027 GMT
        Subject: CN=04646A8F0124B56EF1CF1E25650C3A1EF0B0E82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:cd:bc:60:7a:30:80:1a:0c:41:c6:c4:6e:
                    a7:54:0c:d2:40:d4:de:08:0d:e8:3d:17:a9:f7:1b:
                    83:18:21:87:15:c4:12:fb:de:2e:7e:d4:34:10:91:
                    2f:76:be:5a:68:40:64:05:40:b3:5c:bf:cd:56:bd:
                    2c:1a:c9:72:05:dd:e9:12:83:de:ba:f3:bd:83:29:
                    e9:a3:6b:53:33:59:d7:2b:59:10:d4:f8:7e:a2:90:
                    ac:ba:74:fd:6a:5e:d6:38:bf:a3:24:d0:02:56:d4:
                    f9:52:57:68:82:2b:c6:11:71:bc:a2:23:50:a2:e5:
                    32:6a:7d:e5:cf:58:9f:66:c5:6d:62:73:a0:47:a0:
                    0c:79:a4:75:52:fd:42:98:a9:47:e9:56:fd:a9:2f:
                    0a:83:a6:b7:3e:57:2e:2a:ca:48:72:0e:b7:bd:34:
                    78:70:35:e6:70:c9:a3:a6:60:16:f6:78:a3:48:11:
                    22:49:1d:43:25:f7:cc:18:99:e3:ad:93:15:78:ec:
                    ff:48:af:c1:f2:7a:ae:c3:97:a8:74:45:4e:30:cb:
                    54:29:64:cd:82:42:52:f8:b5:17:24:64:fe:0e:16:
                    ee:ae:66:e9:06:44:e5:3d:b3:3c:07:65:5d:e8:4a:
                    23:36:4f:68:10:b3:f9:ff:6a:36:73:70:01:74:d6:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:6A:8F:01:24:B5:6E:F1:CF:1E:25:65:0C:3A:1E:F0:B0:E8:2F
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:85:46:69:54:9a:0c:21:d6:77:63:e8:d8:b4:b9:ab:26:
         17:89:a4:13:40:e7:46:15:52:9a:0a:c2:4e:ca:65:08:64:2a:
         54:b3:b1:cc:02:db:5c:2f:c5:9f:de:ed:ae:40:7a:24:fd:76:
         36:1c:69:54:8a:a2:0b:f2:9e:84:c0:d1:17:81:8a:fa:5a:da:
         06:29:83:88:84:43:78:8d:00:f1:71:4a:24:45:02:0e:86:b4:
         bf:2a:83:87:aa:56:b8:74:81:69:78:da:bc:21:64:67:57:d9:
         e8:d3:18:99:81:13:e4:b6:a7:48:8e:0c:27:10:5f:af:b5:ba:
         66:f6:f7:17:a7:6b:52:68:8c:25:9f:f9:ec:3f:14:95:a0:56:
         cb:31:88:f9:1e:6f:01:04:c4:10:11:8a:5c:3d:f8:34:20:b5:
         a8:8d:c8:d1:c0:c0:63:33:66:b9:50:46:5a:89:f2:87:70:d3:
         08:ac:2a:59:83:b2:18:47:2f:1a:a3:46:8c:9d:32:94:06:c9:
         d9:16:d9:c1:32:76:2f:87:8a:7f:66:50:83:ef:13:74:bd:39:
         8f:ff:d9:e1:96:a0:fa:b0:5b:fe:21:cc:9e:86:79:13:35:f1:
         a4:ad:b3:a0:7e:8b:44:87:5a:41:64:cd:b2:4c:59:ae:ec:8e:
         d0:ba:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:54 2026 by rpki-client