Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136312e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          lzdosAhgnWTTP1IA7sQm6TsGQk2FmPElJQsROVmH5m0=
Subject key identifier:   5D:4F:BE:99:0F:C5:07:01:AB:A9:7C:F8:0F:C8:45:66:A4:9C:DF:94
Certificate issuer:       /CN=234C60379F9378C4E127C3D54D29A62E7B997221
Certificate serial:       4295DAD4D9025C0C77F91CE9E723E29B7F8BB1B6
Authority key identifier: 23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 03 Feb 2026 13:28:54 +0000
ROA not before:           Tue 03 Feb 2026 13:23:54 +0000
ROA not after:            Tue 02 Feb 2027 13:28:54 +0000
asID:                     266196
IP address blocks:        45.6.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:da:d4:d9:02:5c:0c:77:f9:1c:e9:e7:23:e2:9b:7f:8b:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234C60379F9378C4E127C3D54D29A62E7B997221
        Validity
            Not Before: Feb  3 13:23:54 2026 GMT
            Not After : Feb  2 13:28:54 2027 GMT
        Subject: CN=5D4FBE990FC50701ABA97CF80FC84566A49CDF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:4b:30:2f:0a:84:ae:c7:37:c2:9d:c8:df:
                    cf:fe:cb:b5:23:fc:6d:bf:f9:39:88:b1:b4:93:71:
                    7d:08:1e:5f:80:58:e0:a7:ed:aa:59:38:f7:67:83:
                    91:5b:59:10:5a:53:18:f8:50:de:d6:f7:e2:ae:ea:
                    fd:1d:68:f5:1a:68:f5:6d:21:12:30:6a:ae:3e:0a:
                    59:d9:26:29:0e:ea:89:06:22:a8:07:d7:01:c6:1f:
                    eb:08:53:bf:a5:2a:b1:0d:77:95:b8:a7:9a:66:dd:
                    6a:c1:73:0a:43:5d:00:a7:c4:95:4f:bb:4b:4e:e8:
                    7e:f5:2e:c7:5d:a4:51:ea:74:5d:8c:73:e5:11:65:
                    5a:91:bc:cc:17:f6:3e:ea:ba:2f:c9:7a:3c:8d:0f:
                    67:fd:5a:2f:20:77:4d:81:71:64:46:e9:66:f3:9f:
                    3b:49:d4:61:51:27:49:36:63:3f:27:5b:fd:d3:c8:
                    2f:8d:f5:f6:e3:ab:75:fe:e1:54:1b:67:aa:4a:12:
                    b0:aa:7b:0b:37:f6:33:c8:ea:05:dc:94:8c:20:89:
                    bb:30:40:ed:a4:89:36:fd:ef:27:00:29:c5:68:29:
                    eb:60:53:95:90:e2:a7:6d:fc:9a:bd:91:49:74:2f:
                    ea:c5:1e:7d:a0:e4:79:28:b0:5a:a0:3c:2b:e2:69:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:BE:99:0F:C5:07:01:AB:A9:7C:F8:0F:C8:45:66:A4:9C:DF:94
            X509v3 Authority Key Identifier:
                keyid:23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:2c:5a:2b:ed:25:ae:f7:12:df:69:e7:47:4b:43:40:69:
         38:bf:a3:ac:c0:61:50:c7:cb:d0:b7:3a:9e:52:68:07:4d:86:
         5c:73:dd:02:35:1c:78:b2:0a:13:03:88:97:41:2d:92:6e:f6:
         1c:2b:ee:cb:da:cd:f2:4b:07:5c:51:f9:18:98:0f:99:a7:27:
         78:81:39:4c:72:f4:c4:c0:bc:eb:bf:0c:4c:62:c1:2b:f2:94:
         4a:4d:a9:c7:fd:40:26:29:a7:c5:02:c4:6c:94:fd:64:cd:ea:
         bb:5b:9c:df:8e:d8:37:c7:be:75:fe:fb:7e:2e:24:a1:18:ae:
         14:8e:38:40:6c:b7:18:e5:69:94:1f:9c:f0:ed:83:91:69:94:
         0e:0f:3e:fa:6c:11:71:5b:56:ed:83:a5:77:f2:2a:5f:95:05:
         c5:46:44:c4:4e:02:fc:52:6c:34:5f:b6:46:4c:fa:b1:83:b1:
         ac:51:29:c1:ec:15:2b:df:d6:bf:8b:73:fc:e6:6e:8a:47:90:
         6d:f9:65:b6:2e:bb:20:72:d0:25:16:2b:50:79:da:a6:1e:a9:
         3f:11:dc:42:f3:02:6e:9b:fe:40:95:42:9b:bd:9a:6f:27:90:
         59:29:98:3d:ba:c1:31:4e:0d:77:c0:f3:30:a1:ea:e6:53:b7:
         b4:bb:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:59 2026 by rpki-client