Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa
File:                     34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (raw, json)
Hash identifier:          VQm1PlLGS2rO5W62H1D7LZFOUniS9xKOSKCC4xH98BU=
Subject key identifier:   C2:2C:48:EF:1A:D8:77:4D:A6:82:6F:02:DC:41:8E:87:14:44:3F:1D
Certificate issuer:       /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial:       76FDA534C6900CC8848FE208DFE5F3361B591873
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa
Signing time:             Thu 19 Feb 2026 12:59:04 +0000
ROA not before:           Thu 19 Feb 2026 12:54:04 +0000
ROA not after:            Thu 18 Feb 2027 12:59:04 +0000
asID:                     269375
IP address blocks:        45.185.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
                          rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fd:a5:34:c6:90:0c:c8:84:8f:e2:08:df:e5:f3:36:1b:59:18:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
        Validity
            Not Before: Feb 19 12:54:04 2026 GMT
            Not After : Feb 18 12:59:04 2027 GMT
        Subject: CN=C22C48EF1AD8774DA6826F02DC418E8714443F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:b0:6b:63:c0:0e:fa:a4:86:18:e5:aa:4c:
                    15:b0:fe:37:e8:01:b1:60:9d:d6:59:44:78:c8:1f:
                    a5:51:97:01:2d:97:3a:9a:b4:50:d7:65:b6:96:0d:
                    e6:c1:bc:22:b2:2f:d9:2a:bd:ba:49:df:fd:2a:d3:
                    5c:00:c3:bc:51:c5:ac:ac:8f:f6:62:82:07:69:55:
                    44:b5:c5:ce:6a:cc:6c:46:c4:65:93:60:3e:38:42:
                    b8:ab:20:4b:40:53:72:a9:e0:40:08:2c:b7:28:4d:
                    cb:99:23:80:7f:09:99:a2:27:50:14:b0:e4:81:d4:
                    42:06:71:68:19:f6:1b:dc:67:7f:0f:c1:c0:2f:88:
                    da:9a:a4:51:1a:43:d1:eb:09:4a:2d:3e:e8:87:ba:
                    cd:c0:89:0e:be:fb:15:ce:f6:2d:09:43:e5:72:65:
                    b7:da:4a:6f:bf:74:ca:31:85:ca:8c:bd:18:f7:55:
                    a4:be:6c:3c:68:48:34:bc:79:01:5b:b6:49:4d:0f:
                    7b:c4:9b:52:ed:7d:10:ee:0a:82:63:9f:29:6a:c3:
                    e0:c8:3e:42:c3:b3:12:2c:be:e7:79:03:ef:74:c9:
                    ad:9a:27:50:35:7d:47:c5:6a:7d:83:05:e5:2b:80:
                    f6:60:46:b0:db:28:1b:e9:1e:7f:df:bc:8e:0d:ab:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:48:EF:1A:D8:77:4D:A6:82:6F:02:DC:41:8E:87:14:44:3F:1D
            X509v3 Authority Key Identifier:
                keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:33:14:85:22:70:17:91:88:9f:d8:dc:25:28:a7:f7:f1:fd:
         61:92:39:f7:50:f0:20:64:9e:fb:65:9f:b7:37:08:b2:9a:cd:
         81:cc:56:e8:09:cf:4a:06:03:d8:69:50:19:52:ee:59:4b:f3:
         35:98:49:75:58:2d:26:bf:45:3c:90:e5:c6:94:21:8d:cd:dd:
         40:8f:a0:0c:c2:01:67:a7:a7:cf:3d:c7:59:18:72:36:30:32:
         2a:57:e7:49:bc:6a:23:ac:d5:33:8f:93:e8:ce:71:96:95:81:
         c6:e4:d1:8e:bd:9e:fb:b0:ca:d1:85:b2:85:57:14:e3:95:d8:
         2d:af:83:20:8d:4b:f4:d0:a1:d4:4d:ea:2f:4f:08:9b:07:a3:
         7e:25:ae:4e:08:df:bd:6f:6e:55:69:f3:bc:23:79:54:4d:5a:
         56:c9:ac:e7:ba:e3:e5:b4:74:7c:cb:44:2a:48:e1:6a:2b:4d:
         6e:73:bb:36:a7:02:c3:07:33:4f:87:7a:ab:0a:32:6f:42:f3:
         33:4f:d5:8b:c6:7e:13:c4:cb:1b:fd:9e:a4:b8:a8:fe:5a:9a:
         5c:22:bd:50:ac:08:73:b7:3d:dc:98:86:3e:be:99:76:91:14:
         64:d0:13:5d:9e:73:c6:c3:ee:55:40:98:fc:b4:ba:b7:2f:96:
         b9:ec:3d:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdv2lNMaQDMiEj+II3+XzNhtZGHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE
MjVGOEQ4ODAeFw0yNjAyMTkxMjU0MDRaFw0yNzAyMTgxMjU5MDRaMDMxMTAvBgNV
BAMTKEMyMkM0OEVGMUFEODc3NERBNjgyNkYwMkRDNDE4RTg3MTQ0NDNGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjubBrY8AO+qSGGOWqTBWw/jfo
AbFgndZZRHjIH6VRlwEtlzqatFDXZbaWDebBvCKyL9kqvbpJ3/0q01wAw7xRxays
j/ZiggdpVUS1xc5qzGxGxGWTYD44QrirIEtAU3Kp4EAILLcoTcuZI4B/CZmiJ1AU
sOSB1EIGcWgZ9hvcZ38PwcAviNqapFEaQ9HrCUotPuiHus3AiQ6++xXO9i0JQ+Vy
ZbfaSm+/dMoxhcqMvRj3VaS+bDxoSDS8eQFbtklND3vEm1LtfRDuCoJjnylqw+DI
PkLDsxIsvud5A+90ya2aJ1A1fUfFan2DBeUrgPZgRrDbKBvpHn/fvI4Nq0FPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwixI7xrYd02mgm8C3EGOhxREPx0wHwYDVR0j
BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo
ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE
M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYWGc2eVdZRUJORWpxUGtxY3BvMUFXeFRBbVp6bkVwQ2RidVdrNXl6aGVELzAv
MzQzNTJlMzEzODM1MmUzMTMwMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuWgwDQYJKoZIhvcNAQELBQADggEBAGczFIUi
cBeRiJ/Y3CUop/fx/WGSOfdQ8CBknvtln7c3CLKazYHMVugJz0oGA9hpUBlS7llL
8zWYSXVYLSa/RTyQ5caUIY3N3UCPoAzCAWenp889x1kYcjYwMipX50m8aiOs1TOP
k+jOcZaVgcbk0Y69nvuwytGFsoVXFOOV2C2vgyCNS/TQodRN6i9PCJsHo34lrk4I
371vblVp87wjeVRNWlbJrOe64+W0dHzLRCpI4WorTW5zuzanAsMHM0+HeqsKMm9C
8zNP1YvGfhPEyxv9nqS4qP5amlwivVCsCHO3PdyYhj6+mXaRFGTQE12ec8bD7lVA
mPy0urcvlrnsPXk=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:56:05 2026 by rpki-client