Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa
File:                     34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa (raw, json)
Hash identifier:          60sy+bNl2jufu4lP3NSzomWrk4h/1HNpqJIrM7b1yPA=
Subject key identifier:   F3:38:91:D5:21:F2:F1:EF:3D:2C:56:A3:B2:4D:EC:F4:96:2E:91:C4
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       621948FA90931803A6F64988E16AF9869E662B08
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa
Signing time:             Wed 04 Feb 2026 21:20:02 +0000
ROA not before:           Wed 04 Feb 2026 21:15:02 +0000
ROA not after:            Wed 03 Feb 2027 21:20:02 +0000
asID:                     268959
IP address blocks:        45.176.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:19:48:fa:90:93:18:03:a6:f6:49:88:e1:6a:f9:86:9e:66:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Feb  4 21:15:02 2026 GMT
            Not After : Feb  3 21:20:02 2027 GMT
        Subject: CN=F33891D521F2F1EF3D2C56A3B24DECF4962E91C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:5e:e4:64:ca:bd:50:ca:7e:0f:41:ae:8b:
                    8e:4f:8f:d0:9c:8d:37:13:39:16:d6:7f:01:46:96:
                    af:45:7b:30:60:b3:fd:8e:e5:f3:d6:24:d7:0f:cd:
                    c9:fb:a4:76:a5:93:29:23:11:53:7e:4c:69:df:8d:
                    3f:ae:db:a1:7c:8c:e4:88:f0:90:32:9d:e4:98:a7:
                    40:fc:d6:94:55:0e:ed:70:35:72:10:34:ef:3d:c4:
                    61:46:be:6d:ad:98:58:67:0e:56:03:fb:b6:31:b4:
                    68:31:d8:a8:14:7b:f1:64:e3:b3:b1:dd:6c:1a:b3:
                    f5:d9:b4:7d:18:34:05:20:9e:f2:9a:5d:1b:f8:33:
                    a3:9f:5b:43:0d:71:bb:b4:f7:16:23:7c:c2:be:6f:
                    4d:5f:ad:54:7f:6f:97:5b:bb:05:31:85:0a:ef:14:
                    b7:2b:87:a5:29:e7:49:46:e4:85:f6:0b:b9:37:2c:
                    a0:0f:ea:68:9b:0e:e4:e0:c6:c6:08:dc:90:85:c3:
                    76:4a:ed:51:f9:27:d2:d5:25:a2:8d:6d:be:3e:c1:
                    a4:b0:f9:53:06:b5:2f:51:f4:78:cf:6b:e4:2c:c7:
                    b9:87:73:47:fd:02:51:25:55:eb:52:ec:41:5c:eb:
                    ad:5f:0e:77:be:12:88:33:b4:a9:b6:9f:45:96:35:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:38:91:D5:21:F2:F1:EF:3D:2C:56:A3:B2:4D:EC:F4:96:2E:91:C4
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:36:90:ff:6a:c5:79:e7:28:fb:6a:5f:9e:c3:6f:cf:ad:
         bc:0f:19:5a:42:92:53:ab:b9:d0:f3:37:01:32:ef:0f:a9:00:
         ef:3b:10:38:0c:c4:d2:d1:13:d1:17:af:6d:01:d4:47:f9:8e:
         9d:74:fb:c2:af:b8:7c:07:97:b0:11:f0:c3:c4:d9:6a:43:fb:
         32:be:98:92:ba:5a:df:28:fa:12:68:ee:88:5b:9c:e2:de:0b:
         4a:bb:a3:f8:e3:2c:38:04:5d:a0:b5:70:e6:bf:20:40:3f:29:
         eb:ee:03:40:e7:9d:f6:72:93:81:36:d8:7d:44:2e:d6:c9:a5:
         17:96:31:b9:1a:3a:b3:d2:b9:b2:17:99:03:7a:19:af:01:7d:
         4d:62:95:f8:4f:64:e7:b0:8e:07:a1:48:66:9a:82:12:b3:35:
         7c:f6:22:f8:f6:b0:ad:b4:c9:e6:d7:ff:43:87:31:d6:70:43:
         16:aa:04:ad:20:e9:a6:6b:fc:8d:5d:8e:98:55:b1:4c:c7:5f:
         14:99:c0:39:15:15:13:b8:b5:34:a1:43:7c:bc:89:70:18:0b:
         93:f8:83:a3:01:06:d2:d8:06:7e:46:30:ba:8a:cc:ea:ce:e8:
         9b:3d:6a:c3:b6:98:d8:b4:78:29:d2:a6:15:00:4d:ba:8d:46:
         cd:27:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:13:37 2026 by rpki-client