Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          nrLgb58QCWZoS2PB1oTkDWeLtkLywwZwcfebXmXTUDw=
Subject key identifier:   25:63:93:FD:C0:FB:A6:A7:09:CC:88:62:6D:29:38:08:02:4F:C5:87
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       5D1260D7C81F0AF301E59F9711F36C381AF99AB3
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:29 +0000
ROA not before:           Thu 05 Feb 2026 08:24:29 +0000
ROA not after:            Thu 04 Feb 2027 08:29:29 +0000
asID:                     263263
IP address blocks:        170.244.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:60:d7:c8:1f:0a:f3:01:e5:9f:97:11:f3:6c:38:1a:f9:9a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:29 2026 GMT
            Not After : Feb  4 08:29:29 2027 GMT
        Subject: CN=256393FDC0FBA6A709CC88626D293808024FC587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:ae:14:53:e7:b2:35:22:48:0c:a4:1c:e2:
                    c0:b7:44:a6:90:1b:db:8f:b6:3e:6d:43:a5:aa:0c:
                    5e:24:3d:d0:52:ce:16:db:c7:3c:7b:dd:7c:a8:ca:
                    f9:d2:94:f2:2a:7f:5d:01:9d:24:df:80:9b:0a:16:
                    b4:3c:2e:f7:9a:cd:9c:07:e3:3a:a4:71:ab:93:64:
                    30:02:c8:47:ff:ce:b7:a5:e2:af:83:b9:42:92:e9:
                    da:ec:4a:65:7a:68:ac:1b:5f:6d:ab:e7:50:5a:1a:
                    12:cd:e9:b0:e6:54:ae:dc:07:5f:2e:22:e2:07:cc:
                    8f:94:af:52:a8:e0:26:35:69:f4:50:0f:40:cc:33:
                    cf:39:e7:2a:2a:72:5d:fa:fe:b9:93:d9:fe:bb:2c:
                    c1:6f:60:0c:67:43:99:d4:17:ae:28:de:2e:17:a6:
                    0f:11:af:d8:94:94:39:cd:81:1b:35:8c:42:ed:82:
                    8c:4e:8b:0b:47:e1:22:f3:80:0f:c0:37:14:66:4a:
                    a7:92:b4:5d:67:f9:8a:da:bf:2e:a7:b9:b0:4c:19:
                    5b:80:6b:a7:bd:61:d9:6f:72:69:db:59:5f:78:1a:
                    bc:51:a5:0a:a9:d4:7a:52:2e:6b:fd:61:3c:03:f7:
                    f9:85:68:5c:9e:cd:f6:0a:32:8c:7c:a9:a8:af:69:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:93:FD:C0:FB:A6:A7:09:CC:88:62:6D:29:38:08:02:4F:C5:87
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:cf:8a:b1:f1:45:ed:d8:d2:30:1e:f8:d1:e9:70:2e:f5:
         1e:80:68:b5:57:8b:df:01:ee:e2:a1:a3:18:14:0f:43:4c:4a:
         42:b0:54:a6:91:ba:a9:2d:d9:95:eb:a2:b6:f9:30:52:f6:2a:
         07:24:3e:ef:7b:cf:0c:4e:99:7c:26:f6:ee:6f:42:53:21:39:
         79:12:00:55:f3:89:41:b8:72:2b:62:78:d2:a8:28:35:91:45:
         f8:6b:46:cf:59:d7:d8:27:2a:a7:34:56:0a:90:55:38:83:b5:
         b9:b5:39:ac:39:03:13:d5:98:8a:13:b3:d4:39:fe:48:a4:a6:
         16:5b:96:84:0a:d0:00:e8:1b:6f:08:06:77:01:41:0b:a5:41:
         71:89:b0:f5:6a:c9:eb:0e:61:7b:73:06:18:54:8e:c7:b7:0c:
         52:22:dc:a2:28:4f:0f:42:06:14:b0:b6:56:78:87:65:6a:58:
         b2:f5:9f:a8:4e:6e:7c:80:c2:7c:e5:55:a1:85:05:d3:99:51:
         29:5e:52:aa:1b:d0:36:ca:d6:80:27:ff:43:65:ff:9a:b9:af:
         06:85:96:f1:30:bc:ee:93:54:7b:f4:42:42:c9:75:15:46:cb:
         46:b4:4f:d6:8d:24:fd:4b:c9:72:2d:26:b3:34:cf:d0:1d:62:
         c7:79:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:40:13 2026 by rpki-client