Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          tB4qmyoEC4lhy6HogYrvDUbTd4LhkIOyGFqDnc3vh9M=
Subject key identifier:   13:4C:F0:89:C1:F2:E2:F9:72:7B:6C:12:31:0D:84:89:8C:A2:E8:A9
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       490885245A77781F078A569EF90A2EA99639D2B4
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 05 Feb 2026 18:29:44 +0000
ROA not before:           Thu 05 Feb 2026 18:24:44 +0000
ROA not after:            Thu 04 Feb 2027 18:29:44 +0000
asID:                     271632
IP address blocks:        45.172.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:08:85:24:5a:77:78:1f:07:8a:56:9e:f9:0a:2e:a9:96:39:d2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Feb  5 18:24:44 2026 GMT
            Not After : Feb  4 18:29:44 2027 GMT
        Subject: CN=134CF089C1F2E2F9727B6C12310D84898CA2E8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:ba:fb:81:ec:ad:bb:d4:f0:18:4f:fc:de:
                    7f:cc:22:5f:df:ab:94:4c:e3:39:cb:56:66:10:f7:
                    0f:85:5a:dc:6a:62:3c:44:85:7f:4a:9f:6c:3f:aa:
                    c1:e3:f9:55:96:29:a5:5b:6a:0b:88:db:47:96:21:
                    58:2c:68:67:34:22:9e:72:11:26:5f:75:9a:e7:9e:
                    ce:ff:ce:6c:02:ea:bf:02:e8:06:57:a7:4a:51:53:
                    15:7d:20:83:04:46:c1:ee:e7:fe:2d:86:15:9a:3d:
                    60:88:54:d3:17:30:22:51:ee:68:03:0a:77:56:65:
                    e6:ad:11:02:63:78:de:7e:05:52:ff:1e:bc:70:1a:
                    46:95:43:fa:4c:67:fb:17:8d:37:34:dc:36:27:60:
                    23:11:c6:26:6f:bb:d6:07:af:30:73:dd:5e:44:3c:
                    cc:8e:92:a1:da:59:c5:fc:bc:4d:a8:22:1e:20:ef:
                    0a:2e:3c:7b:65:6d:9c:4d:d1:55:7d:70:38:bd:6e:
                    e2:86:9e:5c:20:45:4c:9b:81:64:c9:f4:01:b9:76:
                    9f:74:68:65:7f:1d:b6:2d:c0:4f:09:95:44:a8:0a:
                    11:de:c0:7a:7a:93:f6:96:66:b4:96:73:fe:17:9b:
                    4a:a3:20:ba:6c:91:fd:cb:c8:b1:fa:0a:47:eb:ee:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4C:F0:89:C1:F2:E2:F9:72:7B:6C:12:31:0D:84:89:8C:A2:E8:A9
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:f8:93:67:7f:ad:bc:35:ef:3a:ce:93:65:ff:83:2d:c3:
         ad:42:2e:40:c5:1e:41:db:ed:84:39:c3:2a:32:ef:ad:c5:f9:
         6e:38:32:d0:53:ca:a2:94:bb:2e:54:42:72:53:bc:50:2c:0e:
         b0:29:22:4d:25:f1:13:f5:c9:91:ca:4c:7d:9b:cd:27:0e:a1:
         9e:e6:55:c2:3d:e8:70:4b:8f:0d:79:37:ca:fd:99:16:46:e0:
         05:35:8c:b3:49:c6:11:73:87:e2:49:e5:7e:af:a5:90:ee:ec:
         27:51:ba:af:ed:e7:61:47:2e:66:43:ae:e9:0f:ce:ff:d5:3b:
         ac:97:20:9f:4f:60:52:7a:4e:ee:4d:b4:cb:52:ca:42:5d:8a:
         f3:33:f4:df:67:93:72:32:82:05:06:a2:af:2f:48:7e:c2:92:
         83:7c:19:62:4a:cd:a5:82:c1:b9:fa:aa:ce:0d:78:f0:37:48:
         7b:6a:5f:f9:15:cc:a6:60:31:45:0a:78:de:7c:5b:c5:e5:3d:
         5a:c5:04:d6:59:2e:5f:42:e9:3d:57:c3:c0:6f:a8:73:d1:25:
         ca:2f:c5:f8:8d:ee:4e:60:69:57:b0:7e:c1:57:98:77:38:ff:
         2d:07:0c:6c:a8:09:ca:2c:ee:85:32:02:cb:0a:81:95:56:e6:
         89:e2:61:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSQiFJFp3eB8Hilae+QouqZY50rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwRDI0NjBCQjU3OUI1NzM1OTlFODNBNURBMzAxODY5
NkEwRjhGNjAeFw0yNjAyMDUxODI0NDRaFw0yNzAyMDQxODI5NDRaMDMxMTAvBgNV
BAMTKDEzNENGMDg5QzFGMkUyRjk3MjdCNkMxMjMxMEQ4NDg5OENBMkU4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpa7r7geytu9TwGE/83n/MIl/f
q5RM4znLVmYQ9w+FWtxqYjxEhX9Kn2w/qsHj+VWWKaVbaguI20eWIVgsaGc0Ip5y
ESZfdZrnns7/zmwC6r8C6AZXp0pRUxV9IIMERsHu5/4thhWaPWCIVNMXMCJR7mgD
CndWZeatEQJjeN5+BVL/HrxwGkaVQ/pMZ/sXjTc03DYnYCMRxiZvu9YHrzBz3V5E
PMyOkqHaWcX8vE2oIh4g7wouPHtlbZxN0VV9cDi9buKGnlwgRUybgWTJ9AG5dp90
aGV/HbYtwE8JlUSoChHewHp6k/aWZrSWc/4Xm0qjILpskf3LyLH6Ckfr7vPBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE0zwicHy4vlye2wSMQ2EiYyi6KkwHwYDVR0j
BBgwFoAURQ0kYLtXm1c1meg6XaMBhpag+PYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGh2TjdnVTdtYnJlbjYxcFVFU1IyTHdTaHZSRWE2ZTU1Mk1uUUFhajJX
WDgvMS80NTBEMjQ2MEJCNTc5QjU3MzU5OUU4M0E1REEzMDE4Njk2QTBGOEY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MEQyNDYwQkI1NzlCNTcz
NTk5RTgzQTVEQTMwMTg2OTZBMEY4RjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rodk43Z1U3bWJyZW42MXBVRVNSMkx3U2h2UkVhNmU1NTJNblFBYWoyV1g4LzEv
MzQzNTJlMzEzNzMyMmUzMTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrMEwDQYJKoZIhvcNAQELBQADggEBADTd+JNn
f628Ne86zpNl/4Mtw61CLkDFHkHb7YQ5wyoy763F+W44MtBTyqKUuy5UQnJTvFAs
DrApIk0l8RP1yZHKTH2bzScOoZ7mVcI96HBLjw15N8r9mRZG4AU1jLNJxhFzh+JJ
5X6vpZDu7CdRuq/t52FHLmZDrukPzv/VO6yXIJ9PYFJ6Tu5NtMtSykJdivMz9N9n
k3IyggUGoq8vSH7CkoN8GWJKzaWCwbn6qs4NePA3SHtqX/kVzKZgMUUKeN58W8Xl
PVrFBNZZLl9C6T1Xw8BvqHPRJcovxfiN7k5gaVewfsFXmHc4/y0HDGyoCcos7oUy
AssKgZVW5oniYRc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:04 2026 by rpki-client