Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          VXPbwcD9C13bJQExgYFcKOd0nSPiOKjoWrNLms4DlGA=
Subject key identifier:   5D:B1:19:8C:83:AE:6A:AD:D5:6C:71:99:BA:15:AE:04:E1:50:D2:37
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       3DEFA313229EC34D1B46505959E7CF0569773D7F
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:27 +0000
ROA not before:           Thu 05 Feb 2026 08:24:27 +0000
ROA not after:            Thu 04 Feb 2027 08:29:27 +0000
asID:                     263263
IP address blocks:        200.33.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ef:a3:13:22:9e:c3:4d:1b:46:50:59:59:e7:cf:05:69:77:3d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:27 2026 GMT
            Not After : Feb  4 08:29:27 2027 GMT
        Subject: CN=5DB1198C83AE6AADD56C7199BA15AE04E150D237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:03:81:8c:7c:a7:6e:66:bb:08:5d:b2:a1:
                    d8:50:f0:de:e5:29:2f:ea:35:ea:52:1e:47:b4:43:
                    72:e8:8c:5f:c9:e3:68:ac:6f:f3:c4:5f:3a:81:ae:
                    37:4a:f6:99:3c:44:64:ee:15:d1:c7:7e:c1:fa:36:
                    72:59:2d:c3:52:55:4e:53:d9:56:8d:f4:b2:d9:b0:
                    e2:b5:bd:bc:f1:1e:12:50:b4:eb:b4:7a:90:e8:01:
                    ad:8a:c4:f7:87:98:d9:df:67:b6:1e:15:d0:a9:68:
                    14:28:08:f6:12:72:8b:bc:b9:cd:9d:7f:88:f3:31:
                    ac:c8:4c:e4:de:15:89:fa:c8:0f:23:7e:23:57:2d:
                    f9:fd:63:9a:88:39:31:da:64:9b:c3:db:98:00:45:
                    82:0b:56:55:5d:19:88:04:52:b1:e5:dc:6f:70:27:
                    66:4b:45:bb:d3:94:77:6b:84:bc:36:b5:72:82:f5:
                    40:d5:7f:a2:5c:6f:10:07:e1:cc:e7:4e:92:92:54:
                    c3:7d:9f:ee:41:05:9d:26:94:f1:89:d6:27:a8:44:
                    1f:31:64:aa:c3:76:42:99:5a:ca:0e:4c:73:fc:36:
                    5c:e0:e4:5b:b8:12:66:13:8c:af:6e:3c:42:4f:ce:
                    1a:39:21:46:6d:cc:a3:ed:6e:9c:cc:f5:72:21:f6:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:19:8C:83:AE:6A:AD:D5:6C:71:99:BA:15:AE:04:E1:50:D2:37
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:0e:5f:e7:9d:65:33:19:bb:0c:ab:22:60:94:b7:23:42:
         05:1e:32:30:aa:fa:0b:8f:27:b8:1e:32:8f:c7:ca:d0:df:2d:
         0c:83:97:90:3e:be:97:c9:3c:eb:38:94:98:9f:f1:34:cc:81:
         c1:ed:71:97:b7:a7:e3:0a:94:52:f7:4f:75:c1:2b:f6:a2:da:
         d1:28:66:de:2a:a2:a6:d2:d2:83:29:cf:90:bd:bb:3c:33:8c:
         66:b1:49:86:fa:8c:8e:d5:c2:e9:b5:54:2e:d5:5e:a8:5a:6e:
         11:a2:39:9f:30:06:3c:c8:18:f7:48:74:ee:ce:89:1a:9b:4c:
         bd:ef:a8:39:6e:a4:98:a6:a0:b6:f7:5e:58:a7:f6:b6:f1:50:
         2f:0a:ea:bb:19:83:7d:64:7d:a3:e4:a7:f1:1f:4d:e8:36:77:
         58:c4:b3:e7:b2:ec:38:d9:e8:98:28:61:f4:77:3e:16:a7:6a:
         00:c0:6c:68:d9:3d:c4:1d:f7:91:7a:e5:73:d5:6a:dd:2e:2e:
         3e:bb:b3:bf:6f:e3:f0:51:9d:d0:8a:c8:dd:96:5c:1f:7b:89:
         d0:a9:11:12:8c:32:12:45:0e:f9:ca:f1:79:bd:fb:75:94:ad:
         dc:c2:17:09:17:33:88:55:23:c3:cc:e7:e5:c7:ca:e6:52:5b:
         31:dc:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:38 2026 by rpki-client