Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234352e302f32342d3234203d3e20323639323434.roa
File:                     34352e3138322e3234352e302f32342d3234203d3e20323639323434.roa (raw, json)
Hash identifier:          HnRv3FEokkU/G/6TaZIDis4T387iDYQxidh+f3GOPNU=
Subject key identifier:   3A:C3:76:C2:96:40:D1:A9:E1:47:49:37:91:5B:B8:18:83:1F:12:D7
Certificate issuer:       /CN=574D83680A71BA8C6BF66ADC922E4A74EDDC50F4
Certificate serial:       0E959BCB92F6BE70137417DF3DA23177C08ED913
Authority key identifier: 57:4D:83:68:0A:71:BA:8C:6B:F6:6A:DC:92:2E:4A:74:ED:DC:50:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234352e302f32342d3234203d3e20323639323434.roa
Signing time:             Sun 22 Feb 2026 01:52:34 +0000
ROA not before:           Sun 22 Feb 2026 01:47:34 +0000
ROA not after:            Sun 21 Feb 2027 01:52:34 +0000
asID:                     269244
IP address blocks:        45.182.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.crl
                          rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:95:9b:cb:92:f6:be:70:13:74:17:df:3d:a2:31:77:c0:8e:d9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574D83680A71BA8C6BF66ADC922E4A74EDDC50F4
        Validity
            Not Before: Feb 22 01:47:34 2026 GMT
            Not After : Feb 21 01:52:34 2027 GMT
        Subject: CN=3AC376C29640D1A9E1474937915BB818831F12D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:1c:ff:2f:bd:57:51:2c:bf:54:7d:08:1d:
                    2d:b9:9b:33:16:52:a2:4c:42:a5:8a:1c:a4:48:47:
                    1c:1f:8b:45:c0:81:1e:6f:53:76:e6:d9:5f:bf:df:
                    4d:27:67:97:5d:72:53:56:77:3f:a7:57:01:88:43:
                    05:7b:ca:1e:c3:cd:70:a4:5e:58:e1:dc:30:fe:52:
                    1e:f1:1d:c2:cf:21:bb:67:27:8b:d6:c6:85:da:08:
                    95:b9:57:88:e7:5e:25:10:a7:29:dd:54:1f:45:50:
                    b8:00:04:f4:f8:78:ea:2f:5e:49:e9:e3:1b:f6:d7:
                    92:89:06:23:d8:8e:81:50:ab:82:67:e9:09:02:0c:
                    ea:47:47:7e:b8:94:30:9d:bf:6a:03:b4:3a:35:82:
                    2a:d0:63:f7:e8:07:23:4d:7b:45:64:49:51:7a:ec:
                    ba:72:f5:a0:0d:ae:0c:1a:6f:95:12:a9:b8:e8:d2:
                    e4:f9:3f:09:1d:92:8d:98:9d:9e:cf:e1:4d:8e:aa:
                    3e:8b:58:68:5c:99:15:48:3e:b0:fb:ea:85:51:03:
                    5c:71:8c:40:c0:b3:db:b6:3d:fa:38:ed:ab:64:26:
                    3f:77:15:ab:88:71:06:ed:eb:22:14:c5:80:ea:75:
                    3a:0a:b5:56:c8:eb:9a:a5:3c:6b:99:e8:bd:cb:ae:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:76:C2:96:40:D1:A9:E1:47:49:37:91:5B:B8:18:83:1F:12:D7
            X509v3 Authority Key Identifier:
                keyid:57:4D:83:68:0A:71:BA:8C:6B:F6:6A:DC:92:2E:4A:74:ED:DC:50:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234352e302f32342d3234203d3e20323639323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:5b:2b:95:b6:65:42:5d:be:04:6d:f1:63:ff:5e:d0:c1:
         29:f7:38:23:5e:8a:75:06:30:32:fc:c1:49:18:dc:2e:c1:3d:
         e2:6a:c4:44:0e:fc:dd:09:89:c6:ee:f6:63:70:85:ba:ad:27:
         c8:2d:96:af:7c:31:bf:58:32:b0:56:77:11:3f:f0:02:f1:a2:
         f9:4d:aa:5e:a7:4a:c3:27:2f:d3:00:1c:a1:da:b5:99:cb:22:
         a3:29:b9:f4:e0:21:48:48:ed:b6:7d:b0:62:e6:18:9c:92:c5:
         94:62:4c:13:54:82:81:0c:5b:21:f4:ae:73:e2:49:11:5c:0d:
         dc:c4:73:e8:a9:13:9e:33:34:0c:0c:23:7b:76:95:be:de:31:
         f3:77:8e:9e:54:92:33:bc:16:21:6c:07:8b:9c:82:e9:60:d2:
         d2:c7:7b:ad:e3:97:27:4a:14:39:eb:38:be:96:38:af:5c:3e:
         c5:a0:f9:ed:a7:0b:c1:1c:f8:ec:6c:43:80:26:c6:05:85:6b:
         e8:78:11:90:2b:46:64:b0:54:60:45:dd:9b:71:1f:23:0d:81:
         6a:23:3c:6e:30:b5:21:92:88:f2:17:99:6c:8c:05:a2:fe:22:
         7c:7b:de:53:38:ba:ea:f0:3c:f8:c3:f5:f3:02:93:bd:85:b4:
         b5:1c:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:01:28 2026 by rpki-client