Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
File:                     34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (raw, json)
Hash identifier:          ZS5DLwPVPo/h0s/j+ZEaNCirEXcJxxOT1bUcRtkOURM=
Subject key identifier:   EF:01:B9:F6:3F:81:D0:D7:32:26:03:E3:6C:F4:EA:1D:B3:D6:39:33
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       457A8B6AF1856D8FF156A24C159D98647E3AB5E0
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
Signing time:             Thu 05 Feb 2026 02:25:22 +0000
ROA not before:           Thu 05 Feb 2026 02:20:22 +0000
ROA not after:            Thu 04 Feb 2027 02:25:22 +0000
asID:                     268938
IP address blocks:        45.174.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7a:8b:6a:f1:85:6d:8f:f1:56:a2:4c:15:9d:98:64:7e:3a:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Feb  5 02:20:22 2026 GMT
            Not After : Feb  4 02:25:22 2027 GMT
        Subject: CN=EF01B9F63F81D0D7322603E36CF4EA1DB3D63933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:d2:59:6f:39:39:8d:3e:52:93:c4:98:e0:
                    2e:78:98:5d:a4:a7:47:ef:bd:87:eb:84:01:e1:34:
                    e2:fb:67:2a:b7:01:47:0e:ab:47:b2:bc:be:c8:6a:
                    3d:65:55:33:4c:ce:66:01:a6:c6:5e:4d:37:f6:d5:
                    7f:ab:ab:03:70:78:fe:15:55:29:73:d2:44:4d:bd:
                    25:c5:19:53:b6:c4:7a:4d:ef:da:8d:40:6b:02:90:
                    1d:f6:41:40:a8:02:c5:df:d6:40:11:c1:8c:ff:d0:
                    2e:9b:b4:e0:ad:e0:71:77:38:88:42:55:cc:14:d6:
                    28:b1:87:d8:d2:9e:7d:cf:50:92:39:d3:02:9f:8e:
                    78:3c:b5:03:a3:5a:eb:19:c8:07:3e:19:ec:cb:be:
                    00:16:d6:af:b3:6b:d7:fa:34:d5:ef:07:10:df:e7:
                    f5:9c:f9:6d:f9:67:3b:12:3e:14:fb:2a:7b:96:64:
                    41:5e:d4:18:fe:5a:8b:3e:23:3e:3e:b4:cc:cf:3b:
                    07:a0:b6:a1:dc:04:76:66:90:3d:af:0b:fd:05:26:
                    8c:0e:b7:fc:f8:f2:f4:16:67:c4:36:b2:7b:74:b5:
                    e9:0f:9c:1a:3e:c1:0f:3f:db:46:16:bd:73:f5:71:
                    89:5b:fc:88:42:7e:f6:99:f5:a9:5a:1c:cb:de:dd:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:01:B9:F6:3F:81:D0:D7:32:26:03:E3:6C:F4:EA:1D:B3:D6:39:33
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:43:23:c9:30:02:44:d9:84:4a:91:1a:fa:1b:43:8b:b6:
         ee:2c:5d:1a:f8:cc:60:ca:c6:3d:ed:a1:d4:6a:9b:3a:f5:20:
         ad:26:65:a6:3c:82:29:07:7b:97:a6:02:64:a4:91:fc:7d:1f:
         d8:d1:a9:8e:90:cf:f1:b3:d6:19:bd:7f:56:05:6b:6a:44:8a:
         8a:8a:f7:b8:2b:14:bd:c3:eb:5c:1a:61:cc:9a:17:ee:fe:b5:
         46:0b:eb:1a:fa:4a:a8:af:8c:9f:43:ed:13:5c:8e:ba:9b:db:
         d5:1d:e6:31:c6:3d:6f:8e:6a:2e:e8:43:a0:86:4a:c3:d5:72:
         ab:bd:a9:ca:49:d5:15:2e:ce:48:56:eb:ec:09:fa:b8:7f:1a:
         78:e8:fe:c9:08:82:33:ef:6c:71:e0:8d:40:94:ca:97:47:c3:
         3f:2c:f0:e5:b5:c8:17:7e:25:e2:dd:d0:ee:ff:67:1f:4e:47:
         99:1b:93:a6:ca:a2:40:10:67:2e:4b:a0:da:f8:7c:9e:8c:bd:
         e1:d2:cc:f5:43:98:6f:16:07:e0:fd:64:ff:43:33:01:3e:6b:
         93:e2:bc:06:14:89:a3:2b:11:96:61:c0:d1:43:aa:ee:38:eb:
         e4:29:45:b9:b8:55:d5:d9:97:c1:42:16:39:da:42:29:8f:22:
         37:4f:ee:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURXqLavGFbY/xVqJMFZ2YZH46teAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBNDQwMjI0MDU4REYxNTYyMDAzRDhGRDE3NDZGMEUw
NUEyQzZGNjAeFw0yNjAyMDUwMjIwMjJaFw0yNzAyMDQwMjI1MjJaMDMxMTAvBgNV
BAMTKEVGMDFCOUY2M0Y4MUQwRDczMjI2MDNFMzZDRjRFQTFEQjNENjM5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDraNJZbzk5jT5Sk8SY4C54mF2k
p0fvvYfrhAHhNOL7Zyq3AUcOq0eyvL7Iaj1lVTNMzmYBpsZeTTf21X+rqwNweP4V
VSlz0kRNvSXFGVO2xHpN79qNQGsCkB32QUCoAsXf1kARwYz/0C6btOCt4HF3OIhC
VcwU1iixh9jSnn3PUJI50wKfjng8tQOjWusZyAc+GezLvgAW1q+za9f6NNXvBxDf
5/Wc+W35ZzsSPhT7KnuWZEFe1Bj+Wos+Iz4+tMzPOwegtqHcBHZmkD2vC/0FJowO
t/z48vQWZ8Q2snt0tekPnBo+wQ8/20YWvXP1cYlb/IhCfvaZ9alaHMve3bn3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7wG59j+B0NcyJgPjbPTqHbPWOTMwHwYDVR0j
BBgwFoAUW6RAIkBY3xViAD2P0XRvDgWixvYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVRNEVWTGREaEp3WGJmSzVXRWE4TGMxUm5zcVJEVmNqVU55ZlVTN0pS
THAvMS81QkE0NDAyMjQwNThERjE1NjIwMDNEOEZEMTc0NkYwRTA1QTJDNkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTQ0MDIyNDA1OERGMTU2
MjAwM0Q4RkQxNzQ2RjBFMDVBMkM2RjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1UTRFVkxkRGhKd1hiZks1V0VhOExjMVJuc3FSRFZjalVOeWZVUzdKUkxwLzEv
MzQzNTJlMzEzNzM0MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzkzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa4KMA0GCSqGSIb3DQEBCwUAA4IBAQBdMEMjyTAC
RNmESpEa+htDi7buLF0a+MxgysY97aHUaps69SCtJmWmPIIpB3uXpgJkpJH8fR/Y
0amOkM/xs9YZvX9WBWtqRIqKive4KxS9w+tcGmHMmhfu/rVGC+sa+kqor4yfQ+0T
XI66m9vVHeYxxj1vjmou6EOghkrD1XKrvanKSdUVLs5IVuvsCfq4fxp46P7JCIIz
72xx4I1AlMqXR8M/LPDltcgXfiXi3dDu/2cfTkeZG5OmyqJAEGcuS6Da+HyejL3h
0sz1Q5hvFgfg/WT/QzMBPmuT4rwGFImjKxGWYcDRQ6ruOOvkKUW5uFXV2ZfBQhY5
2kIpjyI3T+4T
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:42 2026 by rpki-client