Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/34352e3138362e3136392e302f32342d3234203d3e20323639343332.roa
File:                     34352e3138362e3136392e302f32342d3234203d3e20323639343332.roa (raw, json)
Hash identifier:          RKsn1pX04FVcszBSSWCAUac2pLDPbonuKJ4SXzW2p8Y=
Subject key identifier:   D1:FC:E8:EF:28:AA:EF:88:4E:35:B2:74:69:CD:47:75:61:6B:3E:9B
Certificate issuer:       /CN=CD927BB65CBF320EF893E090733F137A18FEC20B
Certificate serial:       2EAE8D16393EF2D91AB8BE5024695D5A3EA65A1C
Authority key identifier: CD:92:7B:B6:5C:BF:32:0E:F8:93:E0:90:73:3F:13:7A:18:FE:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/34352e3138362e3136392e302f32342d3234203d3e20323639343332.roa
Signing time:             Mon 09 Feb 2026 13:55:36 +0000
ROA not before:           Mon 09 Feb 2026 13:50:36 +0000
ROA not after:            Mon 08 Feb 2027 13:55:36 +0000
asID:                     269432
IP address blocks:        45.186.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.crl
                          rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:8d:16:39:3e:f2:d9:1a:b8:be:50:24:69:5d:5a:3e:a6:5a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD927BB65CBF320EF893E090733F137A18FEC20B
        Validity
            Not Before: Feb  9 13:50:36 2026 GMT
            Not After : Feb  8 13:55:36 2027 GMT
        Subject: CN=D1FCE8EF28AAEF884E35B27469CD4775616B3E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:87:22:cb:1c:d9:1e:66:3f:37:62:c0:31:
                    8c:26:93:58:54:42:cd:d9:40:c7:a3:ac:4e:fe:63:
                    f7:cc:fa:a8:4f:1d:c7:0e:16:3b:09:d1:d0:d7:54:
                    9c:9c:45:66:b8:b9:d8:db:77:9d:31:8b:ab:ca:b3:
                    e5:14:2b:ad:8d:21:7c:c2:5d:4f:84:39:4d:a9:48:
                    9c:03:af:80:b2:3a:2b:de:af:5f:ce:8c:8c:98:15:
                    9e:c2:64:f1:aa:34:f0:6c:62:e4:ac:3b:36:5f:a1:
                    5d:5b:45:8f:9c:73:ba:cc:0d:7b:00:94:20:6f:e8:
                    fd:78:64:82:34:08:4b:28:f4:f7:40:ef:26:5d:ce:
                    0d:e1:45:29:89:71:3a:fe:65:d7:a6:57:79:9a:ac:
                    eb:40:3d:6c:a5:75:d5:d5:d3:9d:e6:a7:c3:3f:1d:
                    d4:dd:f8:0f:1d:ab:e6:c1:63:45:a9:bc:3d:b2:17:
                    70:b2:47:d4:3b:6d:f0:65:56:b0:0c:af:ec:d1:f0:
                    89:80:52:b4:37:e9:49:13:9d:9a:b1:b2:64:36:4c:
                    03:07:65:37:09:e0:cb:e4:48:4b:f0:f9:72:f8:57:
                    4e:1d:4a:e5:e3:63:02:59:a5:08:d0:47:73:8d:db:
                    b6:70:2b:b8:ec:13:b7:38:c4:90:fc:db:95:d2:e0:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FC:E8:EF:28:AA:EF:88:4E:35:B2:74:69:CD:47:75:61:6B:3E:9B
            X509v3 Authority Key Identifier:
                keyid:CD:92:7B:B6:5C:BF:32:0E:F8:93:E0:90:73:3F:13:7A:18:FE:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/34352e3138362e3136392e302f32342d3234203d3e20323639343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:6d:1a:34:b3:21:e2:98:71:69:f3:39:d8:70:62:d5:ee:
         c9:55:70:c4:37:ab:c7:5a:bc:f3:13:28:26:55:18:44:4d:ed:
         7a:90:1b:39:3f:52:0f:ea:99:0f:12:38:2c:51:7e:ed:d4:43:
         93:cd:de:59:47:f4:81:7e:eb:16:ab:2b:d4:07:e9:43:5e:77:
         2e:7a:5d:30:05:07:17:d7:96:8b:8c:86:b7:6f:69:55:25:c5:
         34:60:4b:73:1a:aa:29:0a:1c:5b:6e:85:7c:6d:38:9c:fc:26:
         c4:e1:34:f1:a5:d1:2b:7e:40:eb:dc:2e:ae:b2:9a:ed:cd:e1:
         1c:fa:a7:de:4b:ed:5f:b3:0c:42:e6:6d:75:8c:87:14:1c:cb:
         c0:d1:00:2d:c8:e3:b4:7c:54:a9:5b:c1:0e:0d:f1:73:6c:57:
         98:25:86:46:ac:f1:8f:e3:c0:1b:f8:1d:b6:68:dd:b1:48:76:
         a8:8e:db:94:a4:96:83:84:6d:ab:48:1c:79:10:9e:8f:fe:23:
         22:47:cc:d7:45:7b:84:5a:bb:3f:34:29:c2:a2:0d:3b:67:52:
         32:2e:29:0b:44:b1:b3:fd:25:af:4c:07:9a:25:1b:40:85:c9:
         4d:e4:43:75:4d:1b:48:70:8b:5b:f6:24:1c:02:9e:15:38:62:
         f0:30:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:48:20 2026 by rpki-client