Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          ltbG+FijGio/glc4h7YPoRxW1zRWnbCGLko6ofBcIDg=
Subject key identifier:   3C:8D:4C:F6:03:B9:51:17:B6:E7:DB:66:48:AD:C2:EB:1C:43:C6:C0
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       0A0F521079646C9A9983AA0583206BB69E958CBE
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:29 +0000
ROA not before:           Thu 05 Feb 2026 08:24:29 +0000
ROA not after:            Thu 04 Feb 2027 08:29:29 +0000
asID:                     263263
IP address blocks:        170.244.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0f:52:10:79:64:6c:9a:99:83:aa:05:83:20:6b:b6:9e:95:8c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:29 2026 GMT
            Not After : Feb  4 08:29:29 2027 GMT
        Subject: CN=3C8D4CF603B95117B6E7DB6648ADC2EB1C43C6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:fb:42:54:44:6b:44:f4:22:b4:a3:ff:97:
                    a1:46:4e:5c:53:b3:fe:59:b2:cb:d1:f1:a0:4e:28:
                    a6:76:ea:8e:ba:9d:56:f0:ee:de:95:ff:52:f0:66:
                    bb:d1:ae:82:53:38:8b:16:39:3a:7c:78:8d:13:15:
                    b1:7e:64:e1:e5:6a:3e:54:07:c8:e5:99:3a:2b:32:
                    8f:bd:f5:ce:17:3b:bb:5d:8d:15:ac:82:1a:11:ff:
                    83:0c:9c:71:3e:6f:78:9a:d5:8e:71:76:ef:a1:1e:
                    92:da:98:ae:e1:37:60:0d:b4:a4:9c:bf:54:aa:d2:
                    88:cd:ec:62:04:20:63:c1:79:41:91:93:14:cd:02:
                    51:d8:27:98:ed:80:b1:a2:eb:a6:df:11:13:79:a0:
                    71:52:20:73:a2:0b:08:1f:e3:27:8a:60:b7:70:ce:
                    57:b1:09:b8:fd:52:95:6f:9b:89:d2:c2:44:06:d8:
                    d6:eb:2b:a2:bb:41:a1:23:f4:20:1e:96:4f:24:64:
                    65:23:ca:75:35:34:e4:ec:5f:60:11:b0:50:9d:3b:
                    e2:2a:41:ec:38:a0:42:e2:d5:46:93:f3:e9:ce:b6:
                    64:ae:fe:d2:e5:e7:ff:46:8c:21:60:3a:20:09:3e:
                    28:2d:95:28:3d:33:54:e1:5d:cf:5c:81:ee:ac:98:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:4C:F6:03:B9:51:17:B6:E7:DB:66:48:AD:C2:EB:1C:43:C6:C0
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:cf:8d:f1:51:6c:b9:0e:ee:ab:66:29:20:94:24:79:5e:
         02:07:f8:30:5f:8f:2e:0e:69:2a:72:63:77:64:a6:a5:f6:4f:
         dd:e5:9f:0a:71:ce:0c:82:a1:e0:cd:e9:c3:0e:0e:a7:ae:0b:
         d7:3f:ad:b8:c8:bd:ca:18:ad:25:74:40:52:af:b7:5c:18:0c:
         48:73:b1:f7:40:c2:94:24:1f:de:f1:cb:4a:93:a9:33:16:94:
         6b:38:1a:70:39:86:ee:c1:e1:1c:50:6d:8a:37:34:da:ce:b6:
         8e:14:b6:1e:a2:2c:31:d3:86:c3:2e:bc:fc:30:02:e6:4a:e5:
         3c:7f:42:f8:7b:df:80:f0:38:62:3f:fb:d3:51:dc:e7:cf:5f:
         e1:e7:bf:b5:07:8f:52:8f:91:fa:e4:94:59:9d:52:dc:d7:64:
         d9:de:7d:2b:e5:4f:3e:a8:1d:ec:40:e5:01:a6:1d:35:72:ce:
         23:5e:96:d3:9f:54:5c:89:3c:ac:68:b9:10:9e:22:4f:e6:f8:
         e1:c7:04:66:2f:76:1b:70:21:f0:56:bb:02:8c:bd:05:49:60:
         6b:67:d6:f7:2d:40:ed:8f:b4:c6:27:4e:45:55:15:94:5b:6c:
         87:ef:19:72:12:41:71:16:ad:63:92:ca:5a:71:3c:3a:fa:b2:
         55:d1:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:46 2026 by rpki-client