Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138342e302f32322d3332203d3e20323636303531.roa
File:                     34352e342e3138342e302f32322d3332203d3e20323636303531.roa (raw, json)
Hash identifier:          DY1eY8BqdhxsoVokXkfy7r/6x/ZRsg6XfuMvx7eBQbQ=
Subject key identifier:   10:30:F9:A3:A8:C6:A1:FD:93:D1:F2:A5:B7:C5:92:52:2C:2B:21:AE
Certificate issuer:       /CN=00B59D491D3312BCC3DF02B935D2C77A7D315A42
Certificate serial:       0D835D0A1D6DFF483B7A765A45DB8D8031DB650F
Authority key identifier: 00:B5:9D:49:1D:33:12:BC:C3:DF:02:B9:35:D2:C7:7A:7D:31:5A:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138342e302f32322d3332203d3e20323636303531.roa
Signing time:             Tue 10 Feb 2026 14:07:34 +0000
ROA not before:           Tue 10 Feb 2026 14:02:34 +0000
ROA not after:            Tue 09 Feb 2027 14:07:34 +0000
asID:                     266051
IP address blocks:        45.4.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.crl
                          rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:83:5d:0a:1d:6d:ff:48:3b:7a:76:5a:45:db:8d:80:31:db:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00B59D491D3312BCC3DF02B935D2C77A7D315A42
        Validity
            Not Before: Feb 10 14:02:34 2026 GMT
            Not After : Feb  9 14:07:34 2027 GMT
        Subject: CN=1030F9A3A8C6A1FD93D1F2A5B7C592522C2B21AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:5f:bc:c2:e6:96:78:23:d9:02:07:3d:62:
                    1e:cd:46:87:c5:56:03:0b:61:35:5f:81:42:8d:c9:
                    d7:68:1b:c7:79:d2:7b:66:70:07:dc:e3:c2:ec:dc:
                    cd:b7:52:07:93:1d:71:6e:72:00:5a:27:7b:4c:3a:
                    19:bf:c2:da:ac:7f:c9:36:4b:a8:56:98:a2:e9:eb:
                    2f:8a:c4:03:49:b6:39:01:8a:3b:33:f5:b8:a7:34:
                    37:c1:fe:35:4d:f2:92:f8:de:55:51:22:b1:4d:2c:
                    47:1a:22:36:8d:24:18:a6:78:ff:ee:14:57:41:c8:
                    97:84:be:5b:d7:cd:9d:60:1d:60:b2:5c:fa:c3:6b:
                    d3:db:31:32:21:c1:d0:14:89:99:e9:9d:47:25:1f:
                    9b:0a:a5:98:6f:4f:dc:b2:43:1d:b7:02:7f:cc:bc:
                    d0:c8:87:eb:07:44:33:fc:f2:7c:60:bb:82:74:3d:
                    43:0f:0e:b4:10:05:6f:cc:ba:a0:f8:64:84:d7:26:
                    f2:70:76:ea:f9:ff:71:4f:bb:a0:26:a0:2f:71:09:
                    5d:4c:b2:50:e6:3c:a9:95:d2:22:8f:45:13:64:9f:
                    29:8a:11:c1:b6:91:db:8f:d4:db:b7:c2:49:76:b3:
                    71:b3:33:73:35:f5:2c:39:2a:88:3a:fd:e1:0b:1d:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:F9:A3:A8:C6:A1:FD:93:D1:F2:A5:B7:C5:92:52:2C:2B:21:AE
            X509v3 Authority Key Identifier:
                keyid:00:B5:9D:49:1D:33:12:BC:C3:DF:02:B9:35:D2:C7:7A:7D:31:5A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/00B59D491D3312BCC3DF02B935D2C77A7D315A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00B59D491D3312BCC3DF02B935D2C77A7D315A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6e3T5o8QeM4XneBq37j2d4HFMUrBkK27EXbxFagE7reU/0/34352e342e3138342e302f32322d3332203d3e20323636303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:79:51:ec:fa:7d:21:ca:38:60:5a:70:34:b5:0b:3d:6c:b6:
         56:3c:62:bb:91:0e:d1:44:4b:f6:03:b6:c1:e6:e6:22:f6:39:
         b6:6d:d2:b2:16:94:9a:98:e1:80:f8:aa:13:33:a2:d6:e7:01:
         9c:b8:f3:e3:e5:6e:93:2c:4b:96:d7:81:f3:92:e4:14:33:39:
         37:ae:b9:c9:cb:7c:1d:fc:e2:d7:fd:59:c6:5a:81:75:f0:ac:
         b2:a9:ec:42:cb:13:8d:08:01:24:30:88:49:83:d5:ba:0e:8c:
         97:70:72:cf:4b:3a:fc:e3:a0:2e:c5:e7:aa:b2:d1:da:91:a2:
         bd:fa:fb:d6:a1:0f:51:45:65:fd:dc:a3:6f:16:95:02:83:71:
         b9:b6:71:ed:a7:2f:56:54:8c:da:74:42:80:67:7d:1d:56:ff:
         b1:f5:19:8c:84:20:e6:67:96:28:1c:23:16:ae:e6:ee:c4:c5:
         61:fd:10:0f:6c:cf:df:1a:99:07:65:8b:0e:b3:b3:8d:4d:e8:
         62:f0:39:a2:e2:e4:99:39:68:16:f2:41:ad:d7:27:e0:74:d8:
         28:19:55:35:23:20:25:f3:29:5d:48:0d:71:a3:54:4b:50:7f:
         4a:fd:e6:1c:b7:de:57:cd:82:b0:48:e5:85:f9:4d:f3:c9:19:
         53:2e:75:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDYNdCh1t/0g7enZaRduNgDHbZQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBCNTlENDkxRDMzMTJCQ0MzREYwMkI5MzVEMkM3N0E3
RDMxNUE0MjAeFw0yNjAyMTAxNDAyMzRaFw0yNzAyMDkxNDA3MzRaMDMxMTAvBgNV
BAMTKDEwMzBGOUEzQThDNkExRkQ5M0QxRjJBNUI3QzU5MjUyMkMyQjIxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4F+8wuaWeCPZAgc9Yh7NRofF
VgMLYTVfgUKNyddoG8d50ntmcAfc48Ls3M23UgeTHXFucgBaJ3tMOhm/wtqsf8k2
S6hWmKLp6y+KxANJtjkBijsz9binNDfB/jVN8pL43lVRIrFNLEcaIjaNJBimeP/u
FFdByJeEvlvXzZ1gHWCyXPrDa9PbMTIhwdAUiZnpnUclH5sKpZhvT9yyQx23An/M
vNDIh+sHRDP88nxgu4J0PUMPDrQQBW/MuqD4ZITXJvJwdur5/3FPu6AmoC9xCV1M
slDmPKmV0iKPRRNknymKEcG2kduP1Nu3wkl2s3GzM3M19Sw5Kog6/eELHQ0tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEDD5o6jGof2T0fKlt8WSUiwrIa4wHwYDVR0j
BBgwFoAUALWdSR0zErzD3wK5NdLHen0xWkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmUzVDVvOFFlTTRYbmVCcTM3ajJkNEhGTVVyQmtLMjdFWGJ4RmFnRTdy
ZVUvMC8wMEI1OUQ0OTFEMzMxMkJDQzNERjAyQjkzNUQyQzc3QTdEMzE1QTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQjU5RDQ5MUQzMzEyQkND
M0RGMDJCOTM1RDJDNzdBN0QzMTVBNDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZlM1Q1bzhRZU00WG5lQnEzN2oyZDRIRk1VckJrSzI3RVhieEZhZ0U3cmVVLzAv
MzQzNTJlMzQyZTMxMzgzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMw
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0EuDANBgkqhkiG9w0BAQsFAAOCAQEAcXlR7Pp9Ico4
YFpwNLULPWy2Vjxiu5EO0URL9gO2webmIvY5tm3SshaUmpjhgPiqEzOi1ucBnLjz
4+VukyxLlteB85LkFDM5N665yct8Hfzi1/1ZxlqBdfCssqnsQssTjQgBJDCISYPV
ug6Ml3Byz0s6/OOgLsXnqrLR2pGivfr71qEPUUVl/dyjbxaVAoNxubZx7acvVlSM
2nRCgGd9HVb/sfUZjIQg5meWKBwjFq7m7sTFYf0QD2zP3xqZB2WLDrOzjU3oYvA5
ouLkmTloFvJBrdcn4HTYKBlVNSMgJfMpXUgNcaNUS1B/Sv3mHLfeV82CsEjlhflN
88kZUy51Bg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:47:04 2026 by rpki-client