Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          CYWEBcLT34kge581zefJX0zZtU+QvKLXW7VXegkj4es=
Subject key identifier:   02:08:E1:CC:4B:A1:F5:73:CA:B9:D3:92:CE:71:B7:2A:32:FE:0F:C5
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       561E8EFA2EB4EB45C35CA1776FADDA29C0803E41
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:29 +0000
ROA not before:           Thu 05 Feb 2026 08:24:29 +0000
ROA not after:            Thu 04 Feb 2027 08:29:29 +0000
asID:                     263263
IP address blocks:        200.33.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1e:8e:fa:2e:b4:eb:45:c3:5c:a1:77:6f:ad:da:29:c0:80:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:29 2026 GMT
            Not After : Feb  4 08:29:29 2027 GMT
        Subject: CN=0208E1CC4BA1F573CAB9D392CE71B72A32FE0FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:b2:4d:3e:e3:5d:77:e8:e4:d7:77:8e:8f:
                    ab:7d:97:e9:b7:df:c1:66:44:32:18:46:9e:7c:55:
                    69:ee:d3:14:5f:df:3c:30:8d:5e:40:75:1d:3a:92:
                    66:22:01:8d:9d:41:fd:d4:f2:0b:4a:8f:ab:a6:76:
                    9d:22:10:e9:5c:ec:08:80:35:e3:68:bb:87:3b:0f:
                    8b:d7:2d:55:e8:55:c2:3b:97:3a:e6:2b:43:35:d9:
                    54:56:aa:ee:74:bd:6b:e6:e8:f8:4c:67:68:d2:e6:
                    f9:bd:75:b7:51:2a:b6:86:16:05:a2:e9:f4:d1:3a:
                    5b:95:63:e0:94:55:e6:21:5a:05:73:e1:20:9a:f3:
                    30:b5:d8:26:ed:9c:f8:17:c1:d2:f1:3b:18:ba:17:
                    5d:b1:a7:a5:ed:a9:3e:6e:07:5a:a8:2e:a3:0a:0c:
                    c2:b3:11:9e:b1:9b:6b:55:02:b9:60:ec:61:6a:71:
                    09:db:62:73:de:89:45:7b:8a:c3:4e:bb:a2:1c:1f:
                    1d:aa:4d:aa:36:9b:7d:48:85:d0:3c:84:22:a3:89:
                    58:f3:0d:59:c0:1e:e2:ea:4e:c1:14:2d:f6:d9:c0:
                    8e:32:a4:3c:78:51:bb:31:3d:56:f8:45:ef:30:06:
                    e2:5d:77:e1:93:e6:0b:6b:1e:80:df:c5:ab:79:96:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:E1:CC:4B:A1:F5:73:CA:B9:D3:92:CE:71:B7:2A:32:FE:0F:C5
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:16:a0:45:35:48:64:a6:66:2b:e2:5e:35:52:b6:86:dd:
         71:66:d1:42:5e:da:49:0a:de:cd:39:d9:12:91:0a:f2:6d:66:
         c6:60:86:ba:b3:48:c7:3d:56:97:78:42:ce:65:db:cb:47:e9:
         77:94:cc:9c:42:3e:c8:4f:d9:37:8c:84:69:73:0d:d4:07:bb:
         1a:79:68:cf:89:47:53:26:bd:5b:57:65:69:10:64:f3:b1:d7:
         93:d9:88:89:37:36:76:4d:5b:8e:b3:ab:d0:10:d4:4d:4d:81:
         eb:ed:11:78:01:59:f3:53:23:89:f6:19:7d:7f:a3:7e:97:66:
         11:75:3e:f8:e7:c1:45:94:09:af:5c:9c:56:0a:b8:ff:62:40:
         77:8f:a7:83:87:14:2f:b4:48:07:4f:3a:a1:1c:ee:37:43:46:
         b1:0d:09:69:56:cf:15:79:ca:33:64:e8:3c:dc:2c:cc:78:63:
         22:f3:9d:93:6a:c3:9b:05:54:84:4f:f7:27:0e:1a:eb:49:57:
         04:2f:62:0d:2a:b4:66:58:a0:21:01:18:42:d0:90:7c:12:86:
         04:e3:2b:24:59:2f:6f:0e:34:e6:4f:e8:0f:11:e2:e5:21:8a:
         47:51:15:27:db:c2:19:e3:39:c9:98:7c:e5:8f:a6:e5:d5:49:
         f8:e5:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:45 2026 by rpki-client