Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
File:                     34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (raw, json)
Hash identifier:          wm5LzulkJJ0sx45wNs+CpVo56rygPBNHKlafVhbFUTs=
Subject key identifier:   A7:7D:3E:CC:E4:31:5E:CC:99:19:41:03:2E:8C:B1:34:57:29:E4:14
Certificate issuer:       /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial:       3D7C72AC4615F4C841BD141D93597AEE0C93A50D
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
Signing time:             Thu 05 Feb 2026 20:26:24 +0000
ROA not before:           Thu 05 Feb 2026 20:21:24 +0000
ROA not after:            Thu 04 Feb 2027 20:26:24 +0000
asID:                     267242
IP address blocks:        45.232.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
                          rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7c:72:ac:46:15:f4:c8:41:bd:14:1d:93:59:7a:ee:0c:93:a5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
        Validity
            Not Before: Feb  5 20:21:24 2026 GMT
            Not After : Feb  4 20:26:24 2027 GMT
        Subject: CN=A77D3ECCE4315ECC991941032E8CB1345729E414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:6c:f5:b6:dc:4d:1d:d2:91:ea:a7:83:bf:
                    e5:5e:eb:65:ca:5d:a2:54:56:04:e8:a5:57:47:18:
                    fa:e3:92:08:af:27:76:f4:8f:ce:99:92:91:b1:23:
                    fd:96:e8:60:48:93:a7:6f:d3:c2:c9:8e:58:d9:84:
                    a8:0c:e2:7d:46:d5:ec:94:dd:21:70:a0:61:d9:5b:
                    41:23:08:98:f3:4a:7e:a4:31:77:d7:e0:f6:e0:fe:
                    b3:6d:42:c4:f8:23:de:b6:af:1f:e6:ca:8b:ae:1d:
                    e5:b0:77:d8:5c:08:a2:ea:4f:20:c9:50:5e:7c:da:
                    1c:6d:d7:96:c6:0d:01:76:84:c7:cf:71:22:36:6f:
                    b4:a9:21:45:0c:be:f9:f4:71:7d:70:0e:04:53:b6:
                    2e:81:d2:6d:a9:94:b9:ff:36:ec:8a:e7:7f:bc:3e:
                    d1:c9:ee:5d:7f:c2:4d:97:b5:ec:a6:9f:00:92:60:
                    a0:97:52:b1:a4:74:77:49:a4:14:29:9c:77:f5:d8:
                    64:b5:81:63:eb:f7:dd:aa:f2:56:74:79:5e:9e:23:
                    1d:33:40:d9:62:5b:1b:1d:dc:a3:4e:b1:b4:df:30:
                    a9:fb:62:64:0c:53:b8:b0:04:f1:62:70:22:ec:7d:
                    e0:36:7a:f6:f7:38:1e:73:fc:e1:b8:d8:67:98:0c:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:3E:CC:E4:31:5E:CC:99:19:41:03:2E:8C:B1:34:57:29:E4:14
            X509v3 Authority Key Identifier:
                keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:92:48:8f:88:2e:1d:ee:f8:b6:35:81:a7:5f:f0:17:6b:12:
         52:95:9f:88:02:be:04:9f:3f:79:64:fc:e0:df:21:3a:42:29:
         4a:d6:62:e7:fa:44:54:aa:20:91:f0:5d:c1:fb:d9:be:a1:6c:
         7d:b4:0c:01:39:0a:13:9f:99:77:43:a8:d6:97:11:e7:84:9b:
         b2:c3:a0:d7:10:41:be:11:e2:c9:d4:b7:8e:e3:82:5c:51:c5:
         6d:d3:6e:a6:33:ae:69:9e:20:ee:b8:98:df:ac:2e:04:62:00:
         ba:ea:32:20:8f:c2:53:4e:52:c3:45:33:70:ef:9d:22:c4:e2:
         21:08:07:6f:7b:c3:bf:8f:f8:9f:d7:69:a7:41:cc:19:6c:92:
         42:56:3f:cd:b7:b2:66:de:dd:a1:a6:4e:e4:97:a2:3f:c3:fc:
         da:00:8d:85:5d:14:60:d1:35:4e:6b:e1:2e:48:9f:5d:9a:04:
         fe:aa:ea:d9:59:e3:03:c8:2b:df:52:01:98:bc:2e:ab:13:73:
         cb:63:46:71:0d:ca:c9:ef:a8:b2:5d:df:f5:ba:c4:36:9c:75:
         ed:b5:d3:4f:04:a3:4f:59:09:1c:2b:e3:ce:75:08:74:39:80:
         18:c0:56:90:9d:90:5a:67:43:28:ba:5c:ae:53:7a:f3:d0:fa:
         2e:0e:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:39 2026 by rpki-client