Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
File:                     34352e37312e3131362e302f32322d3234203d3e20323637363035.roa (raw, json)
Hash identifier:          5aX+1h9LWznnRSyZpIj6puaodK8DAUMotX8I3BcvQjY=
Subject key identifier:   7F:81:C4:13:07:B7:04:A6:9D:91:3D:5E:5E:1F:F2:12:1B:6A:5A:FC
Certificate issuer:       /CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
Certificate serial:       51B493F7F136832D1FB6EAA3154EE5AD35D67D0C
Authority key identifier: A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
Signing time:             Wed 04 Feb 2026 20:31:08 +0000
ROA not before:           Wed 04 Feb 2026 20:26:08 +0000
ROA not after:            Wed 03 Feb 2027 20:31:08 +0000
asID:                     267605
IP address blocks:        45.71.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl
                          rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:93:f7:f1:36:83:2d:1f:b6:ea:a3:15:4e:e5:ad:35:d6:7d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
        Validity
            Not Before: Feb  4 20:26:08 2026 GMT
            Not After : Feb  3 20:31:08 2027 GMT
        Subject: CN=7F81C41307B704A69D913D5E5E1FF2121B6A5AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:30:37:92:3a:46:41:84:85:6e:e9:65:10:
                    76:93:7c:ee:55:79:1e:50:0d:b5:5e:2c:4b:e2:cd:
                    96:e1:de:e3:65:2b:70:54:9f:84:33:ec:7b:fc:fc:
                    e7:dc:5c:de:18:18:f5:62:34:ed:7f:49:e4:8a:9d:
                    73:f2:db:cb:34:84:c0:4a:4d:f9:be:ff:a6:57:c2:
                    cb:17:6c:41:aa:00:f1:b9:aa:7f:48:f9:96:eb:c5:
                    a4:6b:eb:4b:c1:f1:ce:49:ef:7f:37:94:fb:ba:bc:
                    94:c5:77:22:13:ca:58:23:b4:e8:ac:86:40:4a:a7:
                    c8:79:c3:7c:f8:ad:d9:ea:4e:35:0e:54:bf:ba:ad:
                    c9:5d:e9:31:2c:cc:4e:c2:8a:93:21:83:d3:83:e5:
                    92:1c:56:99:c1:74:ff:38:8c:64:d7:93:7b:70:96:
                    b7:b6:e5:be:e9:61:ae:2e:9a:a6:5f:1b:6a:34:14:
                    64:f4:d1:35:5b:db:94:9b:50:bb:d3:29:b9:f8:ac:
                    e4:c1:cc:db:2f:86:76:fc:4b:25:fd:ac:66:d4:2b:
                    0a:da:04:a1:8c:2e:6c:35:de:f7:a3:d4:4b:e9:e4:
                    9e:89:c1:e0:bd:7b:ad:12:52:19:fa:8c:3d:d3:85:
                    29:b4:8c:9b:e6:ed:07:23:ff:a0:4a:5f:b0:f5:0b:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:C4:13:07:B7:04:A6:9D:91:3D:5E:5E:1F:F2:12:1B:6A:5A:FC
            X509v3 Authority Key Identifier:
                keyid:A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:4b:78:13:fe:37:86:6f:7c:0f:00:86:5c:43:a7:ab:56:
         70:96:48:e5:d6:89:8f:e9:19:b2:2d:43:95:15:4e:0c:67:86:
         34:f1:f5:4f:6c:c6:db:e0:e8:0b:aa:68:c3:f5:1b:b1:f6:e1:
         1a:ee:5a:61:f5:ce:d9:26:09:df:5c:d4:b0:3a:3c:15:8d:a3:
         52:a3:8b:73:e6:5b:b5:45:d3:63:23:a7:9c:37:a8:5e:1c:40:
         a6:ba:f2:f0:e7:9e:0c:e8:f8:a5:66:6e:fc:f5:8d:27:30:f5:
         90:7f:b9:e8:5a:73:4a:9d:66:24:09:22:bb:68:6d:09:07:23:
         bc:74:13:da:2f:41:1e:2f:f9:da:90:d3:ff:f4:eb:e8:55:96:
         0b:ba:c9:3c:5e:8d:9d:50:d3:31:85:81:64:f7:1c:91:b6:fc:
         ab:ab:51:d2:cf:e1:7f:f4:c6:ff:39:03:0c:1c:6a:45:46:6d:
         be:a3:c8:0e:89:e6:a9:44:74:a1:d0:8b:9b:9d:ea:13:05:49:
         d1:68:33:29:6c:6a:51:92:8e:ce:c4:ae:7e:6c:8b:37:05:80:
         3a:d2:a4:0d:6f:b9:2c:0d:e8:1e:d0:b0:3a:1d:91:c1:3f:66:
         cb:c7:e3:61:ad:eb:2d:97:3c:e7:89:e5:a9:43:0c:bd:28:08:
         99:0a:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:52 2026 by rpki-client