Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa
File:                     34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (raw, json)
Hash identifier:          009xoYY1a8xoxZvUG5f5D5bCMdyhk7siToL545WF7CM=
Subject key identifier:   31:4A:A7:E1:36:55:15:30:AD:0C:56:D0:D1:D1:8E:BB:A2:57:BF:1A
Certificate issuer:       /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial:       37C8E3EA344558F78AE5BA8A7A3E5BF5F6C21A89
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa
Signing time:             Thu 19 Feb 2026 12:59:05 +0000
ROA not before:           Thu 19 Feb 2026 12:54:05 +0000
ROA not after:            Thu 18 Feb 2027 12:59:05 +0000
asID:                     269375
IP address blocks:        45.185.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
                          rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c8:e3:ea:34:45:58:f7:8a:e5:ba:8a:7a:3e:5b:f5:f6:c2:1a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
        Validity
            Not Before: Feb 19 12:54:05 2026 GMT
            Not After : Feb 18 12:59:05 2027 GMT
        Subject: CN=314AA7E136551530AD0C56D0D1D18EBBA257BF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:ce:6e:c3:20:1a:bb:a2:63:bc:fb:1d:ba:
                    7d:79:07:b3:ed:8d:3d:28:5a:df:9e:46:d0:a7:d8:
                    a1:22:2d:7c:df:c9:0b:ea:d4:e0:35:2f:ea:b8:49:
                    a7:ae:77:3f:aa:b9:5c:4f:e3:96:36:5a:e8:9e:3c:
                    f7:f4:73:0a:ca:d3:81:25:67:27:bf:0e:bb:6b:62:
                    38:ee:37:d6:23:3c:90:90:33:4d:7a:78:27:c4:49:
                    04:8a:d8:75:eb:bb:df:a3:1c:a0:9c:d0:6e:85:96:
                    cb:d7:10:57:64:c2:4b:a2:50:bd:d7:2c:f6:88:5f:
                    0e:60:e6:24:9f:65:4c:c0:50:d7:96:72:04:14:b8:
                    6c:58:0f:11:72:f8:16:fd:c6:38:55:0d:f3:0c:3e:
                    f4:a8:ae:04:91:6d:c1:4c:ee:fc:33:51:b0:7c:a7:
                    22:28:98:6c:c0:df:90:68:48:b6:b0:56:56:37:20:
                    73:ce:7b:90:19:e1:84:2b:99:24:09:15:bc:6b:0d:
                    cc:d7:6a:80:28:d0:23:89:b8:50:e3:af:af:19:15:
                    4f:ed:2e:69:03:15:e4:20:4a:6a:63:d9:59:ab:cc:
                    9d:21:a1:7f:32:f5:e3:c9:20:45:6e:15:d2:89:0b:
                    9d:cc:fd:c2:67:63:5f:87:03:c2:92:60:d7:48:4b:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4A:A7:E1:36:55:15:30:AD:0C:56:D0:D1:D1:8E:BB:A2:57:BF:1A
            X509v3 Authority Key Identifier:
                keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:99:57:e3:d7:74:1c:9f:3c:6c:95:c6:45:4a:7b:cb:23:
         5d:c9:f8:f0:c8:c7:f1:20:e3:64:62:f9:b0:8a:83:0c:ea:e5:
         e7:1b:d4:27:e0:57:3b:9f:3f:58:38:4c:ff:5b:a5:ce:c8:c4:
         2b:c1:34:92:5c:68:e8:37:d7:6a:ce:03:44:bc:07:e4:bd:07:
         b2:28:cc:4e:be:be:b9:0e:ac:7f:9e:ec:a3:f7:38:66:5a:1e:
         3d:be:2b:17:87:00:4f:bf:aa:a6:f4:03:a8:0b:5a:59:5a:12:
         be:2d:c3:a1:52:e6:ae:1e:2b:52:69:85:0f:61:2b:2e:cb:56:
         60:0f:a3:53:60:6e:ca:a9:a8:1d:9c:f5:65:00:dc:bc:75:b7:
         74:da:0b:1b:18:cb:6f:34:b8:b5:bd:ee:11:e2:47:3f:c0:94:
         27:9e:89:e3:98:97:eb:29:91:f3:44:3a:e0:ca:ed:5c:0b:62:
         d5:02:b7:73:21:ee:c3:77:87:40:d0:66:68:03:c3:85:54:ca:
         e9:74:d8:f1:22:c2:83:1f:92:aa:e8:19:0d:7b:ea:19:69:8b:
         ff:c0:cd:0a:bf:87:52:8f:47:f6:e5:38:83:6c:04:e8:eb:de:
         f1:42:b9:9b:bd:54:49:0f:49:20:d0:eb:e8:35:0a:a0:ae:be:
         4d:ae:c1:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN8jj6jRFWPeK5bqKej5b9fbCGokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE
MjVGOEQ4ODAeFw0yNjAyMTkxMjU0MDVaFw0yNzAyMTgxMjU5MDVaMDMxMTAvBgNV
BAMTKDMxNEFBN0UxMzY1NTE1MzBBRDBDNTZEMEQxRDE4RUJCQTI1N0JGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZs5uwyAau6JjvPsdun15B7Pt
jT0oWt+eRtCn2KEiLXzfyQvq1OA1L+q4Saeudz+quVxP45Y2WuiePPf0cwrK04El
Zye/DrtrYjjuN9YjPJCQM016eCfESQSK2HXru9+jHKCc0G6FlsvXEFdkwkuiUL3X
LPaIXw5g5iSfZUzAUNeWcgQUuGxYDxFy+Bb9xjhVDfMMPvSorgSRbcFM7vwzUbB8
pyIomGzA35BoSLawVlY3IHPOe5AZ4YQrmSQJFbxrDczXaoAo0COJuFDjr68ZFU/t
LmkDFeQgSmpj2VmrzJ0hoX8y9ePJIEVuFdKJC53M/cJnY1+HA8KSYNdIS/ETAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMUqn4TZVFTCtDFbQ0dGOu6JXvxowHwYDVR0j
BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo
ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE
M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYWGc2eVdZRUJORWpxUGtxY3BvMUFXeFRBbVp6bkVwQ2RidVdrNXl6aGVELzAv
MzQzNTJlMzEzODM1MmUzMTMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuWowDQYJKoZIhvcNAQELBQADggEBABrtmVfj
13QcnzxslcZFSnvLI13J+PDIx/Eg42Ri+bCKgwzq5ecb1CfgVzufP1g4TP9bpc7I
xCvBNJJcaOg312rOA0S8B+S9B7IozE6+vrkOrH+e7KP3OGZaHj2+KxeHAE+/qqb0
A6gLWllaEr4tw6FS5q4eK1JphQ9hKy7LVmAPo1NgbsqpqB2c9WUA3Lx1t3TaCxsY
y280uLW97hHiRz/AlCeeieOYl+spkfNEOuDK7VwLYtUCt3Mh7sN3h0DQZmgDw4VU
yul02PEiwoMfkqroGQ176hlpi//AzQq/h1KPR/blOINsBOjr3vFCuZu9VEkPSSDQ
6+g1CqCuvk2uwYY=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:44:39 2026 by rpki-client