Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
File:                     34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (raw, json)
Hash identifier:          KxB6Ij5RRIh/MQMobWqO7cJHVUTJD86vJerMOmXXZXE=
Subject key identifier:   25:BB:DD:13:DE:36:23:66:D0:A6:59:B8:86:51:A5:DD:11:67:22:25
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       0F6586FE16B67D8619FA01471E72217E84EF7471
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
Signing time:             Thu 05 Feb 2026 05:00:06 +0000
ROA not before:           Thu 05 Feb 2026 04:55:06 +0000
ROA not after:            Thu 04 Feb 2027 05:00:06 +0000
asID:                     269373
IP address blocks:        45.185.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:86:fe:16:b6:7d:86:19:fa:01:47:1e:72:21:7e:84:ef:74:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Feb  5 04:55:06 2026 GMT
            Not After : Feb  4 05:00:06 2027 GMT
        Subject: CN=25BBDD13DE362366D0A659B88651A5DD11672225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:e7:c2:2b:05:ac:d2:7c:57:61:64:04:0e:
                    f8:32:5d:32:2b:c8:6a:28:61:cf:73:33:ff:b8:1a:
                    fa:fe:a4:f0:31:4c:e2:51:79:32:3a:f3:22:7c:42:
                    45:2f:99:d2:54:2e:8d:b2:84:e3:d2:43:c4:5d:60:
                    b3:1a:8e:69:7b:da:25:a6:b8:3d:98:0d:da:50:55:
                    ac:2c:b0:e0:7a:7a:29:e8:35:9d:ec:8d:33:c7:aa:
                    39:30:aa:1b:e2:83:f0:04:49:e2:90:39:ad:d8:ad:
                    9d:5c:27:24:b4:1d:89:63:94:f8:58:b3:92:2c:80:
                    d1:7a:95:81:a8:b9:15:9a:bc:05:cd:99:4e:91:6e:
                    12:9f:a4:9e:d0:e3:10:05:9d:03:ad:2b:ee:47:cd:
                    a2:10:c0:05:57:73:6c:1a:18:da:c4:1e:d1:77:eb:
                    34:0d:ef:99:22:87:29:38:82:ab:e3:ba:3e:9e:09:
                    8e:b5:e7:b2:29:45:ed:9d:6d:0f:7c:40:e9:b8:79:
                    00:dc:af:a9:f9:7e:60:62:99:ae:a8:c6:f4:43:e6:
                    7f:17:51:23:80:49:d0:b8:3c:f3:4e:78:1a:4f:99:
                    fb:54:3a:22:f0:c4:89:5f:7d:70:ca:80:a2:d5:a3:
                    96:e8:19:9a:a5:83:2b:55:e9:7a:b5:28:f8:fe:bc:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:DD:13:DE:36:23:66:D0:A6:59:B8:86:51:A5:DD:11:67:22:25
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:ab:7a:5f:16:ef:79:3e:56:13:5f:a2:96:dd:aa:2b:57:
         81:bd:02:24:b1:f9:3f:6c:24:69:fe:3d:9c:e4:1e:d7:05:af:
         be:cf:a6:45:45:8d:fb:ce:18:e9:92:df:0c:d7:2b:4c:2e:e0:
         e5:5e:5c:fb:1f:12:21:91:e8:2f:c8:2e:ed:45:fc:d7:b0:90:
         5e:48:6e:38:d3:fe:2f:9a:98:8b:2f:23:56:d3:7c:2b:e6:28:
         52:51:c4:7f:b0:ee:8d:2b:4e:a7:78:cd:35:c5:c3:08:a4:9b:
         a7:b8:99:d5:75:2b:5e:a0:72:40:8b:30:3a:58:97:f8:99:c9:
         72:ff:1b:39:f6:5c:8a:c3:fd:36:d9:3d:15:99:2d:b6:1f:0f:
         37:9a:a3:22:89:f3:1e:e1:04:76:7f:27:07:5c:43:29:46:40:
         fe:51:31:53:fd:6f:f3:e4:8e:90:7d:58:62:ab:92:ca:0c:ce:
         1a:4f:fc:b4:2a:58:78:41:38:b8:ba:21:be:46:33:ff:c8:e3:
         7a:e6:d4:1e:1e:6a:53:7a:e4:52:46:93:39:17:6d:b3:84:ed:
         d9:1f:d8:1f:a5:31:46:c6:f1:84:6a:be:59:98:b5:ea:1d:6c:
         13:44:b5:5b:60:b6:18:53:b0:99:38:90:bb:39:3b:78:de:ff:
         3d:78:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:09 2026 by rpki-client