Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
File:                     34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa (raw, json)
Hash identifier:          848jsnQXgxCC94UwE8VWaT3I0O139Gbi5K2mtTN5DwQ=
Subject key identifier:   93:A1:D2:F3:7B:B0:45:8A:B3:60:30:6B:45:98:9D:D3:DB:0F:47:5A
Certificate issuer:       /CN=18E27D86DE5A1AD9A728285FD883143042230B27
Certificate serial:       1A9BCEA2F5801988B2ED991C434A6109220B56E3
Authority key identifier: 18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266951
IP address blocks:        45.225.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl
                          rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:ce:a2:f5:80:19:88:b2:ed:99:1c:43:4a:61:09:22:0b:56:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18E27D86DE5A1AD9A728285FD883143042230B27
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=93A1D2F37BB0458AB360306B45989DD3DB0F475A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:25:2f:a3:d4:f0:86:77:cb:ed:6d:30:c7:
                    c5:a0:06:65:c6:04:41:d5:1a:f8:e9:7f:a1:b1:fe:
                    a3:a0:3d:66:d2:6a:5b:da:92:12:57:35:b8:b2:ad:
                    65:4c:96:49:73:bc:9a:b9:9a:e8:b8:b3:1e:01:a3:
                    bf:18:b8:28:64:b4:1f:15:b7:42:52:19:15:64:30:
                    66:7a:e3:72:b2:ee:ba:c0:97:9b:84:ed:ad:51:49:
                    42:7a:04:56:8f:75:3b:a7:d2:41:d3:e6:86:a7:8a:
                    91:ec:b6:45:71:9c:e3:66:25:9d:32:23:f6:87:45:
                    1a:2b:83:16:a2:fe:d3:2a:6d:b3:c1:51:f2:51:34:
                    4b:ad:4a:0d:1a:ac:f2:67:33:41:fd:66:bc:e6:94:
                    d7:80:4b:14:50:9f:e1:0d:00:04:aa:ba:e3:ef:3c:
                    5d:d0:ac:82:b2:94:f6:de:80:71:c2:9c:ba:b8:76:
                    6a:43:08:b3:89:e4:bb:d5:75:46:60:a2:ff:d2:32:
                    18:2b:f4:73:d0:5f:0d:97:94:d9:97:ef:40:68:bf:
                    b6:36:92:51:14:e1:d9:29:19:31:ac:83:01:3c:a0:
                    5f:bf:2e:ca:ec:d8:18:2b:94:dc:d4:75:d3:51:5a:
                    08:48:25:73:49:9d:2e:c8:d9:b1:07:a7:0f:ad:c1:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:D2:F3:7B:B0:45:8A:B3:60:30:6B:45:98:9D:D3:DB:0F:47:5A
            X509v3 Authority Key Identifier:
                keyid:18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:2e:41:ba:7a:45:1d:d8:8d:9c:43:b1:a6:50:b0:5a:40:
         ec:1e:47:e2:58:45:4e:4b:d0:3d:d4:9f:0c:48:d1:39:25:8b:
         52:69:df:a9:4c:40:16:98:d4:da:86:ce:3f:b5:f3:0c:8d:af:
         28:db:43:de:e9:6d:c7:e9:d2:d7:f3:c8:c7:4d:1e:60:5c:25:
         5b:a1:81:72:cf:94:0a:c1:f6:b7:15:1c:7d:cf:c2:a5:c2:ff:
         39:60:60:e9:88:b5:12:7e:4a:ad:fd:05:a7:80:47:05:4c:ed:
         b6:13:0d:e6:b5:0d:f9:8f:81:2b:77:38:36:f8:e8:a4:0c:eb:
         66:fb:39:b6:fb:57:5b:ae:73:29:fc:66:c2:33:1e:f4:7a:97:
         13:50:f1:b7:05:de:7b:5d:80:3e:8f:75:24:ed:fc:52:f8:9a:
         24:c8:39:23:61:97:21:ea:06:d7:c7:47:be:e9:49:d9:6a:30:
         6f:fe:b8:db:df:a5:b6:a5:99:14:d3:ac:8b:5b:c7:00:38:18:
         83:25:6f:aa:30:b6:1b:a1:c8:08:6d:d8:8b:e7:1e:56:d3:4f:
         84:64:18:41:eb:29:5b:88:b1:c9:7f:66:38:91:c2:dc:19:d4:
         df:60:44:d4:5f:aa:9e:9d:01:fd:cc:67:61:9b:6c:0c:dc:bd:
         c3:1b:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:14:44 2026 by rpki-client