Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
File:                     34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (raw, json)
Hash identifier:          chxkmUWdJzpcWpaBMZaAXjN/JL3aBfxtGdNUwKsfe/0=
Subject key identifier:   2D:CA:F9:1B:02:10:C9:71:71:BE:69:A4:5B:9B:FD:D2:D9:B8:83:D0
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       6457441737C6DE40BAADB4D4B55DE8BB53AADA06
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
Signing time:             Sat 14 Feb 2026 23:50:52 +0000
ROA not before:           Sat 14 Feb 2026 23:45:52 +0000
ROA not after:            Sat 13 Feb 2027 23:50:52 +0000
asID:                     267670
IP address blocks:        45.224.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl
                          rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:44:17:37:c6:de:40:ba:ad:b4:d4:b5:5d:e8:bb:53:aa:da:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Feb 14 23:45:52 2026 GMT
            Not After : Feb 13 23:50:52 2027 GMT
        Subject: CN=2DCAF91B0210C97171BE69A45B9BFDD2D9B883D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:e2:1c:6a:68:c9:27:78:e8:61:cd:56:e3:
                    ea:88:6b:29:e4:13:e1:bb:72:0b:59:12:c3:5e:af:
                    82:73:ab:12:61:03:aa:e6:93:09:ff:56:e3:30:49:
                    29:f7:79:51:4c:7e:59:c1:a3:f9:b2:0e:cf:0a:34:
                    ff:d6:e7:2a:85:34:d6:19:2c:15:6f:da:06:e8:67:
                    05:4e:d8:9d:2c:54:66:62:6d:59:9b:b7:10:d9:92:
                    10:05:2f:47:9f:5f:7a:06:c2:0e:a1:73:0c:c5:a7:
                    de:ae:c8:52:45:83:c0:d6:16:14:a4:25:8e:48:c9:
                    fb:e9:1a:ad:0b:76:fc:42:c5:cc:12:12:5b:5a:c5:
                    6d:ab:3f:75:d2:0c:03:76:1e:fd:be:2d:5a:dc:ca:
                    85:8e:04:4d:20:ef:73:06:5c:d5:1b:5e:a1:9f:f5:
                    28:8c:e7:cb:9d:81:36:2a:cf:e6:e3:31:43:d1:00:
                    b7:e7:ef:09:8d:11:7e:de:b9:8e:c3:d6:27:c1:c9:
                    3f:42:90:40:15:c8:aa:a6:af:4c:81:18:db:9c:86:
                    a8:e9:ea:8f:b1:f9:ac:7f:5a:fb:81:05:ad:43:2a:
                    b1:8f:11:c8:54:f3:66:0d:31:bb:50:46:dc:4e:25:
                    36:80:4b:f4:0a:4a:57:9a:1a:1b:38:ff:49:30:e3:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:F9:1B:02:10:C9:71:71:BE:69:A4:5B:9B:FD:D2:D9:B8:83:D0
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:01:90:9f:aa:81:bd:ca:08:d0:40:7e:de:78:ca:1f:1c:
         57:bc:ab:57:96:81:8d:e6:5b:cb:51:c3:6d:6a:df:f1:65:a2:
         12:82:38:0b:4f:7e:2f:84:a7:09:d9:5d:55:28:8f:09:c9:96:
         aa:0a:61:d4:35:a0:bc:91:19:f2:4c:09:63:09:da:31:6a:37:
         16:b7:3b:2c:f0:f1:93:5d:1b:c6:6b:89:aa:d3:a0:11:f1:50:
         e1:a4:27:0a:3c:43:ba:13:05:14:d0:e9:6a:71:6a:1b:37:01:
         79:21:fc:12:a2:77:09:06:f9:8a:02:9a:09:84:0b:ad:6e:a8:
         04:95:ae:73:f1:de:73:2c:e8:2c:f5:c8:c5:d6:a9:26:6a:d0:
         79:57:0d:97:20:a6:26:e7:55:47:38:24:bc:a2:b3:52:5d:3e:
         2b:23:22:e0:de:b4:5a:8c:a4:6d:cc:d5:cd:a8:ed:b4:97:18:
         cf:96:bb:ec:71:31:03:ed:50:d7:4f:c5:a5:9e:33:aa:9a:53:
         22:4b:66:0b:5a:69:d0:22:21:e1:df:1a:17:2f:28:4d:d4:1e:
         e2:e4:f6:f6:f1:23:0a:7c:23:88:a8:12:fa:42:a5:5a:fd:9e:
         43:69:09:eb:d7:49:92:e1:5f:51:41:a2:1c:d2:07:18:7a:e8:
         3c:6e:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:59:23 2026 by rpki-client