Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa
File:                     AS268323.roa (raw, json)
Hash identifier:          o5hHh3BbrmreGsivaXKBgkV4JJhtOZzCB7WcHkNHfmY=
Subject key identifier:   5C:29:24:55:43:AF:E0:9B:4E:21:BA:D5:0B:DA:30:DA:E7:BC:C1:37
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       296F51EFBCA201B85683B44463447BE2A7E3571A
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa
Signing time:             Fri 06 Feb 2026 20:01:11 +0000
ROA not before:           Fri 06 Feb 2026 19:56:11 +0000
ROA not after:            Fri 05 Feb 2027 20:01:11 +0000
asID:                     268323
IP address blocks:        45.175.188.0/22 maxlen: 22
                          45.175.188.0/23 maxlen: 23
                          45.175.190.0/23 maxlen: 23
                          45.232.88.0/22 maxlen: 22
                          45.232.88.0/23 maxlen: 23
                          45.232.90.0/23 maxlen: 23
                          45.238.116.0/22 maxlen: 22
                          45.238.116.0/23 maxlen: 23
                          45.238.118.0/23 maxlen: 23
                          170.246.68.0/22 maxlen: 22
                          170.246.68.0/23 maxlen: 23
                          170.246.70.0/23 maxlen: 23
                          177.53.128.0/21 maxlen: 21
                          177.53.128.0/22 maxlen: 22
                          177.53.128.0/23 maxlen: 23
                          177.53.130.0/23 maxlen: 23
                          177.53.132.0/22 maxlen: 22
                          177.53.132.0/23 maxlen: 23
                          177.53.134.0/23 maxlen: 23
                          177.125.184.0/22 maxlen: 22
                          177.125.184.0/23 maxlen: 23
                          177.125.186.0/23 maxlen: 23
                          177.125.188.0/22 maxlen: 22
                          177.125.188.0/23 maxlen: 23
                          177.125.190.0/23 maxlen: 23
                          187.45.48.0/20 maxlen: 20
                          187.45.48.0/21 maxlen: 21
                          187.45.48.0/22 maxlen: 22
                          187.45.48.0/23 maxlen: 23
                          187.45.50.0/23 maxlen: 23
                          187.45.52.0/22 maxlen: 22
                          187.45.52.0/23 maxlen: 23
                          187.45.54.0/23 maxlen: 23
                          187.45.56.0/21 maxlen: 21
                          187.45.56.0/22 maxlen: 22
                          187.45.56.0/23 maxlen: 23
                          187.45.58.0/23 maxlen: 23
                          187.45.60.0/22 maxlen: 22
                          187.45.60.0/23 maxlen: 23
                          187.45.62.0/23 maxlen: 23
                          187.95.48.0/20 maxlen: 20
                          187.95.48.0/21 maxlen: 21
                          187.95.48.0/22 maxlen: 22
                          187.95.48.0/23 maxlen: 23
                          187.95.50.0/23 maxlen: 23
                          187.95.52.0/22 maxlen: 22
                          187.95.52.0/23 maxlen: 23
                          187.95.54.0/23 maxlen: 23
                          187.95.56.0/21 maxlen: 21
                          187.95.56.0/22 maxlen: 22
                          187.95.56.0/23 maxlen: 23
                          187.95.58.0/23 maxlen: 23
                          187.95.60.0/22 maxlen: 22
                          187.95.60.0/23 maxlen: 23
                          187.95.62.0/23 maxlen: 23
                          187.95.176.0/20 maxlen: 20
                          187.95.176.0/21 maxlen: 21
                          187.95.176.0/22 maxlen: 22
                          187.95.176.0/23 maxlen: 23
                          187.95.178.0/23 maxlen: 23
                          187.95.180.0/22 maxlen: 22
                          187.95.180.0/23 maxlen: 23
                          187.95.182.0/23 maxlen: 23
                          187.95.184.0/21 maxlen: 21
                          187.95.184.0/22 maxlen: 22
                          187.95.184.0/23 maxlen: 23
                          187.95.186.0/23 maxlen: 23
                          187.95.188.0/22 maxlen: 22
                          187.95.188.0/23 maxlen: 23
                          187.95.190.0/23 maxlen: 23
                          191.37.144.0/21 maxlen: 21
                          191.37.144.0/22 maxlen: 22
                          191.37.144.0/23 maxlen: 23
                          191.37.146.0/23 maxlen: 23
                          191.37.148.0/22 maxlen: 22
                          191.37.148.0/23 maxlen: 23
                          191.37.150.0/23 maxlen: 23
                          192.141.196.0/22 maxlen: 22
                          192.141.196.0/23 maxlen: 23
                          192.141.198.0/23 maxlen: 23
                          200.9.160.0/22 maxlen: 22
                          200.9.160.0/23 maxlen: 23
                          200.9.162.0/23 maxlen: 23
                          201.158.40.0/21 maxlen: 21
                          201.158.40.0/22 maxlen: 22
                          201.158.40.0/23 maxlen: 23
                          201.158.42.0/23 maxlen: 23
                          201.158.44.0/22 maxlen: 22
                          201.158.44.0/23 maxlen: 23
                          201.158.46.0/23 maxlen: 23
                          2804:4f60::/32 maxlen: 32
                          2804:4f60::/33 maxlen: 33
                          2804:4f60:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6f:51:ef:bc:a2:01:b8:56:83:b4:44:63:44:7b:e2:a7:e3:57:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Feb  6 19:56:11 2026 GMT
            Not After : Feb  5 20:01:11 2027 GMT
        Subject: CN=5C29245543AFE09B4E21BAD50BDA30DAE7BCC137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:8c:44:07:85:7c:c3:f3:f3:f5:81:c8:2e:
                    31:ca:a6:74:87:f9:81:a4:d2:31:78:6f:84:34:52:
                    81:67:0d:53:4b:db:2d:2d:83:a4:d7:82:7d:51:c6:
                    69:de:f9:0f:aa:b6:4b:35:3f:dc:b9:00:eb:c4:e6:
                    d5:af:9d:50:06:5b:ee:f0:da:98:c4:6b:91:f5:b1:
                    51:8c:b8:7a:66:d1:de:a2:e9:81:ac:57:55:b9:c4:
                    ac:ce:d6:cd:f4:44:0d:0f:18:42:ea:ef:8d:1a:19:
                    47:a2:cf:c8:e2:87:62:b3:a6:f5:46:42:1b:26:e1:
                    d2:1c:ed:d8:e2:b8:33:81:05:e8:48:5e:26:1a:83:
                    55:90:e4:f6:0a:ab:18:35:fa:4b:05:58:ba:38:22:
                    61:df:43:9c:66:31:43:1c:e9:c7:e7:0a:da:88:79:
                    91:f2:b3:2e:02:d1:76:5f:73:44:8f:a1:d1:8b:1b:
                    6a:27:0f:4f:40:67:8a:64:2b:f4:51:4a:c8:c8:7d:
                    5b:df:a2:4f:d5:10:a7:26:38:e7:1c:91:0c:27:2e:
                    1c:7f:cb:95:b7:91:b3:f7:68:bf:95:ab:00:af:27:
                    ee:30:e2:ca:c8:e2:2e:2c:39:a8:a2:4d:d8:5b:c5:
                    bd:f3:b7:d1:6f:79:58:12:81:ea:dd:e7:00:4b:2f:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:24:55:43:AF:E0:9B:4E:21:BA:D5:0B:DA:30:DA:E7:BC:C1:37
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.188.0/22
                  45.232.88.0/22
                  45.238.116.0/22
                  170.246.68.0/22
                  177.53.128.0/21
                  177.125.184.0/21
                  187.45.48.0/20
                  187.95.48.0/20
                  187.95.176.0/20
                  191.37.144.0/21
                  192.141.196.0/22
                  200.9.160.0/22
                  201.158.40.0/21
                IPv6:
                  2804:4f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:ec:90:27:60:76:fa:37:3e:7d:bc:7b:24:1a:2e:70:06:
         50:f9:d0:e4:d7:25:fc:32:dd:46:e1:52:98:36:9b:87:03:ce:
         9d:0b:f6:3a:b2:f8:a4:46:08:e6:77:e8:42:1b:f3:c4:e1:51:
         1d:45:dd:92:8b:57:5a:62:92:39:16:20:99:f0:8f:31:1e:67:
         0c:0a:50:21:01:33:1d:4b:9a:66:b7:0e:55:78:b9:a3:9e:bd:
         6e:cc:eb:be:45:e8:4d:65:4c:13:db:4a:77:49:36:40:4e:bb:
         3c:54:e8:a1:0c:5c:cb:f7:1e:36:8e:3e:d4:7d:92:db:49:d3:
         6e:45:f6:e9:7d:83:fd:eb:dc:11:06:65:bd:8b:cf:0d:23:10:
         bb:9b:62:54:2a:b3:a2:45:4e:52:f5:0b:d3:e8:62:98:95:e9:
         ac:39:41:30:72:e5:40:fb:e0:e5:9e:bb:57:1e:c7:a0:b9:db:
         2b:77:5e:84:3e:fe:81:8e:a9:d3:9d:2a:62:74:78:42:54:f5:
         88:1a:9f:38:28:bd:f4:c9:49:ef:69:3d:5a:0e:b6:82:8f:3c:
         a2:08:a9:fa:03:de:84:b0:0d:cf:35:ca:e4:71:84:42:de:3c:
         eb:32:a6:31:03:b6:74:27:0a:c0:3b:de:8c:3a:14:f6:37:85:
         11:bd:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:21 2026 by rpki-client