Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/34352e3136382e3135322e302f32322d3232203d3e20323638303639.roa
File:                     34352e3136382e3135322e302f32322d3232203d3e20323638303639.roa (raw, json)
Hash identifier:          6yS4YpZtHnE4p/bPG7lqdnHRQZFfRs8caYhsjB0u9yM=
Subject key identifier:   19:4D:48:C7:FB:1A:CE:9C:01:CE:AA:10:26:25:5E:38:2B:00:63:61
Certificate issuer:       /CN=07EBEAEFC40ED57B565E1491CADA5DF59FCF351B
Certificate serial:       0A07E09BE2361B0BBC0B035A31C73AFC8A13AAB4
Authority key identifier: 07:EB:EA:EF:C4:0E:D5:7B:56:5E:14:91:CA:DA:5D:F5:9F:CF:35:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/34352e3136382e3135322e302f32322d3232203d3e20323638303639.roa
Signing time:             Wed 18 Feb 2026 13:50:34 +0000
ROA not before:           Wed 18 Feb 2026 13:45:34 +0000
ROA not after:            Wed 17 Feb 2027 13:50:34 +0000
asID:                     268069
IP address blocks:        45.168.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.crl
                          rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:07:e0:9b:e2:36:1b:0b:bc:0b:03:5a:31:c7:3a:fc:8a:13:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07EBEAEFC40ED57B565E1491CADA5DF59FCF351B
        Validity
            Not Before: Feb 18 13:45:34 2026 GMT
            Not After : Feb 17 13:50:34 2027 GMT
        Subject: CN=194D48C7FB1ACE9C01CEAA1026255E382B006361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:a7:80:d8:45:aa:39:8a:67:fa:40:ba:fe:
                    4d:77:6f:67:87:2a:ff:99:d2:00:8c:71:c8:03:bd:
                    56:5e:ef:4e:8c:ef:3a:80:3c:bc:5b:13:5f:b9:77:
                    5c:d5:ef:16:c5:cb:df:6c:4a:9e:aa:8e:4c:a0:16:
                    05:85:28:5d:96:b6:56:85:69:52:91:dc:e9:3c:67:
                    32:21:b7:cf:f0:d5:ff:68:fa:14:bf:6d:13:f2:13:
                    18:83:88:87:23:61:b4:8a:63:e4:9b:0e:73:02:4f:
                    ae:bf:73:0c:4e:52:4b:4d:ec:b7:4d:d4:57:ce:4f:
                    d3:8a:db:5a:e4:3b:72:e4:00:b0:ba:06:ce:0c:ac:
                    e5:73:8c:7e:80:8f:4b:5f:bb:1c:ef:17:ab:af:e1:
                    20:17:8e:45:0d:a3:8a:e2:72:27:cb:31:17:94:1d:
                    80:4a:84:70:51:d8:31:6e:3a:d2:65:d6:58:01:75:
                    29:c3:6f:8c:b1:7b:9b:3d:39:41:55:d5:f8:9d:ba:
                    2f:29:66:6a:e2:20:15:a0:e3:28:92:20:b1:6d:74:
                    dd:d1:03:b5:0a:59:e2:be:7a:77:dd:f6:04:93:8e:
                    7f:95:55:74:c8:11:0d:06:0a:ef:78:e6:6b:ee:da:
                    6b:ee:e9:95:69:62:70:12:b1:05:e5:98:d4:f8:bc:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:48:C7:FB:1A:CE:9C:01:CE:AA:10:26:25:5E:38:2B:00:63:61
            X509v3 Authority Key Identifier:
                keyid:07:EB:EA:EF:C4:0E:D5:7B:56:5E:14:91:CA:DA:5D:F5:9F:CF:35:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/34352e3136382e3135322e302f32322d3232203d3e20323638303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:51:6e:af:fd:00:a4:28:9c:40:c9:05:a6:9f:e4:74:9a:
         9f:fe:c6:cf:5f:ab:e0:2b:b1:61:8a:32:cd:23:85:97:68:b8:
         a7:e7:6e:0d:59:e5:0f:0a:3c:bf:39:07:36:05:6b:79:c6:22:
         41:3d:37:53:cd:c8:19:c9:9a:09:02:c5:37:89:cb:36:43:9e:
         fb:eb:37:7f:e1:ad:e0:1c:6a:28:9e:aa:89:47:55:5d:d5:a6:
         84:d6:d1:7a:35:04:0e:cb:86:5b:0e:80:02:c8:98:24:e1:2b:
         66:71:0a:cf:6b:32:5a:98:c3:d5:41:be:6d:3d:32:07:c9:65:
         9b:3d:1c:59:b6:5f:06:2f:a8:2e:0f:be:2f:91:51:ac:37:3c:
         9d:0d:52:c2:06:1a:10:d1:d8:15:2e:6d:61:a3:b0:50:d3:fc:
         d8:57:af:3b:ab:15:b3:f3:df:1c:38:51:ad:92:59:61:8c:ad:
         fd:f7:04:7e:a9:72:3f:2a:2c:59:c7:b8:7e:e3:b1:bb:52:93:
         36:36:41:ef:e8:cb:0a:3c:9e:16:a4:a4:6a:f5:4e:ce:0e:bf:
         7b:22:70:8d:49:f7:04:07:2d:5b:01:b1:23:07:dc:40:6d:b9:
         78:8b:d8:b4:84:c1:25:d4:50:1c:40:9d:0f:a1:e3:4e:af:81:
         d0:65:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:01:48 2026 by rpki-client