Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa
File:                     34352e3233362e31322e302f32322d3332203d3e20323638323139.roa (raw, json)
Hash identifier:          hcfu8kPgJFgIM0ymgwUGS8aS9Y3OrWOMZPTsbai51bI=
Subject key identifier:   96:10:68:D5:4C:34:1B:BC:D6:8E:CE:D4:8E:2F:C1:5D:EA:CF:56:9B
Certificate issuer:       /CN=6C7679787D87682B47C417682C4086A5AC940329
Certificate serial:       3DA8BF74FBA67859D4F8BD7A5E39E8F209816088
Authority key identifier: 6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa
Signing time:             Thu 05 Feb 2026 00:19:07 +0000
ROA not before:           Thu 05 Feb 2026 00:14:07 +0000
ROA not after:            Thu 04 Feb 2027 00:19:07 +0000
asID:                     268219
IP address blocks:        45.236.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl
                          rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a8:bf:74:fb:a6:78:59:d4:f8:bd:7a:5e:39:e8:f2:09:81:60:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7679787D87682B47C417682C4086A5AC940329
        Validity
            Not Before: Feb  5 00:14:07 2026 GMT
            Not After : Feb  4 00:19:07 2027 GMT
        Subject: CN=961068D54C341BBCD68ECED48E2FC15DEACF569B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:05:4f:95:65:d6:6f:f9:67:1e:1c:9a:df:
                    92:fb:65:7c:b6:d5:e4:5f:c7:e7:e7:15:52:15:4e:
                    b3:01:91:ce:2e:1e:5b:d9:86:24:8a:c2:1a:40:cb:
                    52:32:a7:11:b4:cd:85:85:ce:c4:03:ee:e4:fc:ff:
                    24:e2:87:55:68:51:a6:60:d9:18:27:64:9f:9e:5a:
                    21:45:93:8b:b9:6d:35:e3:0e:cd:9e:64:d7:d2:6f:
                    b7:fb:60:a6:8a:7e:21:c8:0d:46:34:dd:bf:da:02:
                    e6:04:07:af:52:f9:53:2d:bf:31:33:b3:92:8c:73:
                    d1:4a:de:f4:16:a6:ec:c0:f6:2f:60:d5:64:6e:28:
                    45:d2:0f:e6:89:de:9d:d1:54:a7:32:2b:40:c3:49:
                    f5:db:ff:3a:b5:1f:38:5e:b1:72:14:17:a7:25:75:
                    02:b1:a5:17:b4:67:5e:15:9b:c6:e3:da:27:a4:ca:
                    9a:9f:f0:df:d3:13:89:7c:14:03:32:85:06:8d:02:
                    23:2e:43:44:8e:34:95:b5:a9:4f:d3:7b:f6:08:89:
                    ed:58:11:51:0b:9a:32:13:60:30:72:bb:12:16:7d:
                    03:89:74:35:d8:66:5c:ae:1d:b1:f0:90:d3:3e:62:
                    c3:d6:d1:a9:02:15:23:7b:0f:54:7f:53:f6:cf:8f:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:68:D5:4C:34:1B:BC:D6:8E:CE:D4:8E:2F:C1:5D:EA:CF:56:9B
            X509v3 Authority Key Identifier:
                keyid:6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:7c:8f:8c:94:92:c9:d4:5b:47:bc:fd:1b:5f:0f:7e:b8:
         21:ac:23:b6:32:07:35:23:b2:04:ee:2e:b1:59:f1:fc:7f:fe:
         d3:47:0f:d7:1b:24:f8:33:41:59:3e:76:65:b6:94:ff:7a:48:
         df:27:41:92:d1:61:56:19:9d:b2:7c:35:ef:e7:51:9b:aa:1a:
         ab:d5:c5:3e:10:33:71:f3:fa:b3:87:2d:0d:97:eb:fc:26:e9:
         83:5c:ba:79:2d:04:b7:23:ee:71:5c:72:ad:e1:4d:1e:97:87:
         2b:fa:e9:e6:a0:12:01:ea:82:3c:25:5e:1d:41:29:db:68:fe:
         cf:d3:aa:5b:9e:cf:e6:cb:2d:46:a6:6c:79:56:41:42:7c:2f:
         38:86:9a:7f:79:c1:38:52:b5:f8:7d:63:0a:f3:3b:b5:4b:18:
         8f:1f:bd:69:ae:57:01:ee:df:78:33:da:97:63:1e:7c:4a:2b:
         b1:f2:a3:03:31:33:fe:2f:b9:d2:40:5a:4c:91:e6:a0:90:da:
         e2:d7:01:ac:b7:ff:61:ae:0b:2d:6a:91:f7:d7:67:b1:04:6d:
         89:28:0d:85:7b:cf:d3:e2:85:b6:f8:48:f9:16:c9:d9:f9:88:
         18:d0:68:fd:bf:02:7a:dd:17:0e:89:93:d9:38:a5:3e:53:05:
         fb:5c:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:13:38 2026 by rpki-client