Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          hbpAJfKG+q1lZWo45Xw+PI5oM7CqIFtAFxFHYOz+KV0=
Subject key identifier:   18:4E:7C:7A:0F:5D:75:B4:C3:52:3A:CA:BD:A6:AC:C9:9C:7D:65:B3
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       57B7909ADA0FBCA5B48A2744DAC65529C3674C1A
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     268137
IP address blocks:        45.169.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:90:9a:da:0f:bc:a5:b4:8a:27:44:da:c6:55:29:c3:67:4c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=184E7C7A0F5D75B4C3523ACABDA6ACC99C7D65B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:36:54:4c:85:c7:c1:c9:b6:9d:08:0e:97:
                    32:07:f3:d0:8f:08:d3:dc:b6:56:7a:a2:20:5b:83:
                    d0:2c:c5:20:f5:87:fd:35:04:e5:aa:d9:9c:53:a7:
                    d1:b4:3f:07:c5:b9:02:52:fe:85:59:bd:41:9d:bd:
                    3f:e1:e9:fb:65:25:ef:51:4a:63:10:1f:da:af:00:
                    d7:56:1d:d4:6b:c8:9c:b0:38:f6:b8:60:66:c9:63:
                    da:dc:91:5c:f0:24:08:59:c9:55:07:17:9f:d8:5c:
                    a8:a8:d8:c7:5e:4d:d2:86:08:4f:4f:eb:92:8e:bf:
                    6a:a6:f2:2c:8c:1e:a7:d2:cc:1e:24:f7:4a:86:94:
                    7f:ba:24:56:91:51:be:e2:25:96:fa:3e:07:92:15:
                    1b:2a:d0:2b:5b:2d:49:99:c1:22:f4:46:51:97:ce:
                    3e:49:25:52:56:de:db:15:a8:fa:a2:c0:b0:b0:e4:
                    53:4e:00:0c:f9:08:66:8a:7a:69:c1:61:a1:9b:dd:
                    5c:f0:f4:05:27:84:81:b3:e8:98:51:af:01:c8:ab:
                    9f:cc:e2:75:cc:88:e8:c5:c1:00:bb:e5:a1:98:a7:
                    47:51:e7:da:c9:a8:6d:3d:f1:14:79:65:5c:71:76:
                    cd:9f:1a:9c:ab:3a:39:2c:48:aa:26:0f:42:08:0a:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4E:7C:7A:0F:5D:75:B4:C3:52:3A:CA:BD:A6:AC:C9:9C:7D:65:B3
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:8a:3b:dd:02:f2:03:48:9d:a2:56:97:a4:bd:2d:8c:a1:
         91:54:5f:3a:8d:e1:c4:73:26:c1:b9:cf:54:70:e5:95:c8:b3:
         d1:d3:90:95:c8:95:64:0a:f8:b1:a3:4a:34:58:44:47:aa:40:
         38:f9:92:aa:98:7f:74:1c:dc:54:21:13:30:6b:42:3f:dc:34:
         42:d3:a2:91:17:b9:0a:eb:ab:c6:6e:81:07:f4:ce:09:36:2a:
         7a:f4:99:50:3b:41:dd:8b:7d:4a:1f:9f:ca:a8:99:3f:bf:f9:
         91:34:9e:38:40:75:f2:36:bf:c1:0e:48:f5:64:54:69:5b:ce:
         6e:fa:6c:35:62:35:3f:dd:5a:19:80:ef:d9:f3:5e:33:7c:df:
         a2:0a:bf:0d:4c:1a:2b:be:37:9e:3d:22:d2:78:7c:17:8b:4d:
         dc:b3:66:8b:9a:8e:54:0f:98:d9:e2:b8:4c:f6:f5:0f:79:a5:
         55:b4:24:a4:4b:5d:8f:58:eb:b4:83:d1:a6:ff:cc:fb:b6:5d:
         9f:02:bc:9e:97:69:e5:1b:cf:4b:41:91:1d:37:d3:64:2b:10:
         c8:df:51:fe:24:7d:aa:7d:cc:12:70:6b:2a:16:10:98:94:96:
         8c:f1:ae:48:bb:a6:90:15:b0:e9:23:87:24:c0:fb:e3:93:0d:
         90:97:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:10 2026 by rpki-client