Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          JWwlXPVAqgmrZCV+dXSo1D1WXCAOZmVGLv2/lThh6Rc=
Subject key identifier:   AB:92:4E:F9:2C:A8:03:52:3C:DD:23:03:74:75:9A:72:1C:8E:FC:E1
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       1EA99D5F8B06469AC1C562994DB279CE2722AF04
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:28 +0000
ROA not before:           Thu 05 Feb 2026 08:24:28 +0000
ROA not after:            Thu 04 Feb 2027 08:29:28 +0000
asID:                     263263
IP address blocks:        200.33.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:9d:5f:8b:06:46:9a:c1:c5:62:99:4d:b2:79:ce:27:22:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:28 2026 GMT
            Not After : Feb  4 08:29:28 2027 GMT
        Subject: CN=AB924EF92CA803523CDD230374759A721C8EFCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:c4:2a:39:f6:db:76:4c:07:66:91:50:af:
                    70:a5:b5:37:e1:33:cb:42:2c:dc:d6:07:56:c7:e2:
                    f1:8a:46:48:fe:ab:aa:4a:4b:67:be:ec:12:4b:10:
                    7a:82:4b:03:1f:94:58:46:3a:a9:08:48:82:5e:37:
                    f0:66:81:ad:c1:3d:6d:c3:45:7a:30:f0:48:14:9c:
                    32:3f:90:8c:1c:8c:1e:4a:5d:f1:2c:f8:3b:97:fa:
                    9e:82:f4:fe:10:64:28:8b:66:16:0e:16:f0:31:68:
                    48:14:cd:d4:49:d3:fc:57:56:57:c4:e2:a8:c7:da:
                    ac:55:94:39:c9:a1:59:8e:9e:a6:c0:c5:fc:9b:c7:
                    99:ec:67:cb:1e:d0:da:c2:3f:f2:9c:16:a5:7c:91:
                    96:15:0c:da:d9:77:7b:48:3e:08:e6:7d:b2:57:0b:
                    4b:e1:7b:07:8a:6a:7a:5f:42:66:f3:2f:00:69:83:
                    b4:fc:76:98:04:34:6f:95:88:d4:35:06:17:f8:b1:
                    e7:06:0d:bd:94:07:bb:02:e4:c5:0b:7e:fe:16:d0:
                    2e:65:5a:47:45:e3:b3:e9:66:a7:e7:fe:8f:77:e6:
                    ce:dc:f1:79:66:6e:06:05:8d:48:94:0c:36:98:ba:
                    99:5e:16:65:5c:5e:73:81:a6:76:7a:b7:9e:fc:fc:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:4E:F9:2C:A8:03:52:3C:DD:23:03:74:75:9A:72:1C:8E:FC:E1
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:68:67:3f:3d:59:b2:9c:4a:d2:66:93:b3:64:b6:b7:ad:
         66:3a:ce:16:b5:11:2a:82:42:cf:49:82:cf:f8:3d:84:b1:8d:
         65:49:1e:b5:07:f5:81:6f:73:54:57:03:87:05:f8:c2:80:eb:
         d0:fe:a8:13:d1:4e:52:71:d6:1d:98:60:b8:69:1e:ba:59:d5:
         1c:30:78:8b:ab:0d:1a:d9:bb:35:80:43:fa:04:28:bc:c6:ed:
         63:04:9b:32:89:03:71:ee:fd:40:6f:35:e3:eb:ff:55:3f:31:
         b9:6e:2a:0d:6c:e3:90:91:a9:11:99:f6:88:30:dd:65:b8:ae:
         dc:1c:f0:62:c8:c7:80:64:4e:7f:d3:0c:5a:70:bd:b9:57:ec:
         b9:70:dc:42:2d:71:fd:24:c3:df:55:0a:dc:eb:3d:98:77:13:
         ad:25:f6:f0:17:01:06:d7:2a:ea:00:21:34:ee:ac:f7:b0:42:
         66:b0:85:7d:6f:7d:3b:dc:73:20:9d:8d:f8:fe:fd:90:2c:9d:
         0d:13:31:f7:8e:28:49:0c:19:9b:13:86:52:8d:e4:12:21:72:
         09:70:57:c0:fb:4d:61:2b:c4:9c:41:78:ee:2c:90:27:fa:c9:
         2f:46:0c:d9:66:d7:8e:4b:6d:df:6b:b2:71:93:d6:33:cf:88:
         ec:4b:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:21 2026 by rpki-client