Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          BW732DJf31ibZWHCBgengiBefKNcSEbzI1GLo2wgcys=
Subject key identifier:   63:5C:3C:46:AE:C8:F0:FD:E2:1B:80:C4:46:B0:99:48:DE:F3:97:86
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       642A900DEB13A5C799589C30E426B77D660D9791
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     268137
IP address blocks:        45.169.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:90:0d:eb:13:a5:c7:99:58:9c:30:e4:26:b7:7d:66:0d:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=635C3C46AEC8F0FDE21B80C446B09948DEF39786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:8e:16:13:51:23:18:cb:7e:22:97:eb:90:
                    06:93:77:78:68:0b:76:ff:f5:5e:9b:63:1f:62:cb:
                    fd:1c:3e:dc:21:93:59:30:fe:b8:b7:87:f2:2f:3c:
                    c1:da:cd:3b:0e:05:87:db:23:32:ad:f6:39:d5:cb:
                    e4:1e:e8:a8:58:65:cd:00:eb:94:79:95:55:1f:4f:
                    d5:18:9f:ea:85:0e:07:7d:c5:6c:33:20:dc:46:5b:
                    af:48:55:43:f7:2d:f1:77:38:49:22:15:0e:e8:3a:
                    d5:da:18:ab:7a:60:d6:1a:3c:04:97:6a:57:ac:4a:
                    84:28:d2:12:84:37:d5:63:81:76:3d:e6:7a:2b:77:
                    c4:cb:f7:50:89:8a:08:53:35:c0:a5:2c:c7:25:4f:
                    9d:78:3b:c2:54:dd:f7:30:34:7d:d8:58:13:8a:c7:
                    28:80:51:ab:c9:79:93:61:b2:6e:b9:f8:86:b8:6e:
                    13:3e:83:14:fc:4b:3f:d1:fa:c8:73:c7:64:b1:9c:
                    22:1a:c8:93:b6:61:c2:11:ee:39:4c:c9:47:8f:28:
                    88:11:5e:74:1c:c5:31:ef:27:b6:c9:79:55:6f:2b:
                    c5:33:bb:b9:b3:ff:1d:3a:5f:5a:9b:98:ad:7f:09:
                    d7:f2:ed:71:e4:20:a8:00:7b:bd:f7:72:69:cf:af:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:3C:46:AE:C8:F0:FD:E2:1B:80:C4:46:B0:99:48:DE:F3:97:86
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1a:49:9d:a2:f6:9b:62:f2:31:5d:9f:23:46:7f:49:96:2b:
         da:32:69:d3:95:ec:61:6f:11:c2:c3:e1:81:7d:ab:9f:fa:ad:
         62:b9:95:f1:19:c1:17:d4:60:fa:e5:29:1d:9a:28:42:94:f8:
         3d:eb:a2:c9:60:6a:a8:fe:01:27:a2:06:8f:87:e4:8e:d0:77:
         1d:d2:9a:62:ab:c8:2e:10:5c:30:2b:bd:0f:03:8b:6c:13:fb:
         38:60:a4:60:ca:c4:92:d1:9d:f4:f7:e2:7b:68:b0:f3:09:ad:
         70:b3:2b:cf:9a:e3:6e:e0:25:db:ce:d7:9f:6d:e5:44:18:e4:
         bc:72:a6:ee:f6:77:d9:5b:f6:1b:b3:de:51:58:36:24:89:63:
         8f:a5:93:f8:01:83:52:90:b7:bb:51:68:33:01:69:46:c8:9a:
         e6:ff:07:cb:84:66:e4:4b:6d:f1:2b:32:9d:2c:0f:19:bd:eb:
         1a:20:e5:24:d2:1f:3c:84:ff:15:0a:2e:fd:b6:f5:86:ed:f6:
         37:ff:27:af:8b:c1:92:87:e2:61:8a:52:12:75:3c:13:f9:ff:
         1c:5c:83:9c:27:5c:67:60:f9:96:90:98:d0:9d:0f:f3:20:f6:
         54:7c:dc:48:22:c7:6e:1d:34:71:ca:7e:ce:05:b0:d4:51:ab:
         80:7a:0d:e5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZCqQDesTpceZWJww5Ca3fWYNl5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNjAyMDQxODU1MDFaFw0yNzAyMDMxOTAwMDFaMDMxMTAvBgNV
BAMTKDYzNUMzQzQ2QUVDOEYwRkRFMjFCODBDNDQ2QjA5OTQ4REVGMzk3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIo4WE1EjGMt+IpfrkAaTd3ho
C3b/9V6bYx9iy/0cPtwhk1kw/ri3h/IvPMHazTsOBYfbIzKt9jnVy+Qe6KhYZc0A
65R5lVUfT9UYn+qFDgd9xWwzINxGW69IVUP3LfF3OEkiFQ7oOtXaGKt6YNYaPASX
alesSoQo0hKEN9VjgXY95nord8TL91CJighTNcClLMclT514O8JU3fcwNH3YWBOK
xyiAUavJeZNhsm65+Ia4bhM+gxT8Sz/R+shzx2SxnCIayJO2YcIR7jlMyUePKIgR
XnQcxTHvJ7bJeVVvK8Uzu7mz/x06X1qbmK1/Cdfy7XHkIKgAe733cmnPr9jPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUY1w8Rq7I8P3iG4DERrCZSN7zl4YwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
dVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgyLzEvMzQz
NTJlMzEzNjM5MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtqcgwDQYJKoZIhvcNAQELBQADggEBADQaSZ2i9pti
8jFdnyNGf0mWK9oyadOV7GFvEcLD4YF9q5/6rWK5lfEZwRfUYPrlKR2aKEKU+D3r
oslgaqj+ASeiBo+H5I7Qdx3SmmKryC4QXDArvQ8Di2wT+zhgpGDKxJLRnfT34nto
sPMJrXCzK8+a427gJdvO159t5UQY5Lxypu72d9lb9huz3lFYNiSJY4+lk/gBg1KQ
t7tRaDMBaUbImub/B8uEZuRLbfErMp0sDxm96xog5STSHzyE/xUKLv229Ybt9jf/
J6+LwZKH4mGKUhJ1PBP5/xxcg5wnXGdg+ZaQmNCdD/Mg9lR83Egix24dNHHKfs4F
sNRRq4B6DeU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:04 2026 by rpki-client