Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32342d3234203d3e20323636323635.roa
File:                     34352e36352e3137322e302f32342d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          rrbfZY37UjYLgfL1bcJ1bT+7+hZEhWKbd83pUOZabF0=
Subject key identifier:   DA:09:98:B3:60:8F:21:F6:11:97:04:DF:D9:3B:E7:8D:8B:14:B6:83
Certificate issuer:       /CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
Certificate serial:       3F2C3CAF405DAD05B631A8B6D268DF1DC8D39FBC
Authority key identifier: 87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32342d3234203d3e20323636323635.roa
Signing time:             Mon 16 Feb 2026 22:38:24 +0000
ROA not before:           Mon 16 Feb 2026 22:33:24 +0000
ROA not after:            Mon 15 Feb 2027 22:38:24 +0000
asID:                     266265
IP address blocks:        45.65.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2c:3c:af:40:5d:ad:05:b6:31:a8:b6:d2:68:df:1d:c8:d3:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
        Validity
            Not Before: Feb 16 22:33:24 2026 GMT
            Not After : Feb 15 22:38:24 2027 GMT
        Subject: CN=DA0998B3608F21F6119704DFD93BE78D8B14B683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:e6:37:f3:f0:ff:c7:bb:10:8f:81:8d:d6:
                    f5:34:62:6c:a2:1c:f9:34:85:77:6b:89:d9:c0:2b:
                    3a:a4:52:52:e2:36:61:b3:2c:2c:d1:ff:d7:9c:44:
                    99:95:bd:f2:45:55:d7:47:fa:46:41:d5:07:ac:73:
                    b8:6c:f7:11:7c:ef:11:66:19:4a:d6:57:ad:63:7b:
                    11:de:11:43:f1:6c:73:3b:fa:c2:29:0a:29:92:9f:
                    6d:4b:84:43:54:89:c0:68:51:3b:ce:6b:a7:18:51:
                    aa:ae:39:91:9a:3b:e0:5a:b5:8f:41:0a:41:39:43:
                    db:5d:65:05:ee:18:7b:1b:6b:65:ea:42:c2:e8:d2:
                    07:c6:60:d4:71:74:8d:01:a9:67:d3:55:89:9d:1a:
                    d0:f1:aa:06:6b:2d:06:84:f1:8a:38:de:7c:c3:a4:
                    06:64:f0:56:0f:76:db:15:f9:b1:aa:7b:b2:47:0d:
                    e2:07:3c:5f:ae:b5:de:27:c3:96:f7:d3:f4:a7:d1:
                    62:34:d9:2a:a2:13:a3:ba:d5:70:75:21:59:de:f0:
                    79:91:2c:c6:97:93:21:2e:28:67:b9:a1:55:04:33:
                    ac:a6:db:b1:1b:53:de:7d:2a:8a:28:a1:0b:d0:77:
                    56:4b:69:33:17:49:2c:87:8d:78:5e:89:79:46:cc:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:98:B3:60:8F:21:F6:11:97:04:DF:D9:3B:E7:8D:8B:14:B6:83
            X509v3 Authority Key Identifier:
                keyid:87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137322e302f32342d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:64:43:39:6d:5c:98:95:34:86:a5:8b:3c:bb:a0:64:4d:24:
         fc:3d:2c:13:41:58:4e:39:f6:1f:51:84:19:6b:3e:bc:2c:7c:
         cd:00:ff:37:0f:5f:d5:7e:84:ce:ca:bb:73:a6:f0:ad:66:84:
         a2:65:3f:c1:f6:24:97:31:10:0b:16:ac:a7:a2:7c:ca:4a:04:
         fc:e0:fc:32:75:68:90:e2:cb:0c:22:f9:57:a2:a0:af:72:80:
         2c:f5:dd:e6:c0:e8:53:ef:74:b4:92:f9:c6:2e:b8:ff:0e:c4:
         ab:a3:31:51:d1:9e:7e:b7:17:77:bd:bf:6d:3a:3f:a3:41:21:
         a8:a5:15:d6:6a:85:36:cb:17:dd:5a:54:f6:c3:c9:d2:6e:42:
         a4:6d:58:c5:1c:2c:09:c6:f4:21:72:33:98:98:92:d0:63:52:
         61:6b:f6:44:67:7f:66:ca:54:0f:09:2f:ff:a2:af:50:8e:50:
         30:3c:57:87:33:26:61:0e:bc:1e:17:a8:fa:1e:77:db:ae:0e:
         2d:18:74:7a:17:68:84:bc:b3:69:67:03:c1:84:0b:6f:e3:cc:
         43:fb:96:91:8a:fe:9e:50:31:ab:52:c3:01:87:78:8a:22:37:
         eb:92:16:c2:96:51:d1:b9:e7:70:b2:eb:53:3a:94:7c:1b:b2:
         8d:67:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:55:41 2026 by rpki-client