Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa
File:                     34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa (raw, json)
Hash identifier:          zHAMIe1ks9GEf4AfVTI5vo6STe7s+7/CoBYI+r24mFA=
Subject key identifier:   2C:2A:A8:34:F5:4C:04:4C:2F:C9:66:AC:5D:38:F1:C9:63:6B:07:19
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       1D9CCE823B9F96B98768E405CAABDE92C615EFF1
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa
Signing time:             Wed 11 Feb 2026 16:58:45 +0000
ROA not before:           Wed 11 Feb 2026 16:53:45 +0000
ROA not after:            Wed 10 Feb 2027 16:58:45 +0000
asID:                     268389
IP address blocks:        45.239.232.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:ce:82:3b:9f:96:b9:87:68:e4:05:ca:ab:de:92:c6:15:ef:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Feb 11 16:53:45 2026 GMT
            Not After : Feb 10 16:58:45 2027 GMT
        Subject: CN=2C2AA834F54C044C2FC966AC5D38F1C9636B0719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:26:50:08:5b:67:3c:b6:a8:67:9d:86:72:
                    35:57:d8:e7:78:47:ea:a7:3b:c4:94:6d:a6:e7:22:
                    3c:64:7b:17:7e:31:4e:8d:2e:c7:4d:7d:4c:3f:58:
                    e6:e6:01:0a:4e:ac:e9:55:fc:d4:8d:27:81:a2:99:
                    14:f9:af:7f:4a:27:51:92:4c:00:27:33:1e:c6:8c:
                    ff:b8:7e:77:da:71:7b:03:e7:45:b2:9b:df:11:d5:
                    78:04:57:a1:52:4f:70:c2:0c:87:69:8a:4b:49:97:
                    b7:8a:9f:d2:c2:0e:2b:34:ef:6d:bd:48:c3:4c:42:
                    94:69:6e:1e:c5:e7:1c:fc:27:72:37:32:db:3d:94:
                    ef:e5:85:25:f0:0d:61:4f:41:14:c8:4b:76:85:5a:
                    ed:87:d3:b7:aa:75:80:de:3f:1f:b5:d1:27:25:6f:
                    21:50:f0:71:42:4f:1d:0e:58:06:33:b6:e2:f2:c0:
                    b6:90:19:ec:49:67:3e:fe:86:3e:ef:b9:90:3e:3d:
                    6c:fd:a1:0f:c6:c2:fd:79:c1:ec:27:bd:d6:80:43:
                    78:8f:7a:67:82:f6:85:5f:30:b4:c8:d4:16:d2:2f:
                    b7:79:a6:89:d2:f9:2b:f5:48:0a:98:84:41:3b:4b:
                    38:93:69:5b:95:a3:5c:d0:a6:4c:e7:13:2d:da:35:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:A8:34:F5:4C:04:4C:2F:C9:66:AC:5D:38:F1:C9:63:6B:07:19
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:10:28:82:a9:7b:7e:8f:52:fa:a4:65:79:eb:6d:ef:a2:
         eb:64:d1:0c:ea:39:e2:5b:df:8f:bc:9f:e6:bd:e1:42:b1:cd:
         e2:1e:6f:4c:a3:7f:88:f1:3e:c8:4d:30:15:f9:94:5c:15:1b:
         83:c5:7c:64:d1:c8:54:8d:42:4a:77:93:94:72:fc:85:68:d1:
         0f:57:20:ad:fd:b0:bb:49:f5:4e:24:e7:e6:0e:e0:7d:92:91:
         70:c8:f0:57:bb:d1:48:00:c4:7d:e0:a0:66:c0:38:e7:8a:78:
         4a:63:e1:b6:ad:89:8f:a4:02:e6:cd:cf:68:f2:6e:b2:70:bf:
         24:39:c0:06:be:c2:f4:59:ba:68:05:eb:f3:c2:df:5f:5b:01:
         a3:5f:84:31:54:d4:77:b5:26:57:41:6c:d6:22:24:8f:27:89:
         a1:fc:8c:fa:52:1d:67:de:f2:f1:4c:e5:d3:d9:f4:a8:da:92:
         0e:7a:79:45:3c:c2:f6:61:ab:b5:e6:40:ce:0c:92:e2:f3:b0:
         02:12:82:a6:b5:c1:5f:4a:d2:d5:9a:86:04:04:45:93:d1:07:
         b5:66:25:46:cc:41:ce:86:9b:de:8c:c2:9d:80:2e:54:32:83:
         88:28:e8:cc:4b:8a:9a:36:e9:88:7f:03:b4:43:94:34:c0:e2:
         d9:ee:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:50 2026 by rpki-client