Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e36382e38302e302f32312d3332203d3e2030.roa
File:                     34352e36382e38302e302f32312d3332203d3e2030.roa (raw, json)
Hash identifier:          BCflK5X5FG54+eePbYysyrbNxgGyQg56QJ+ZQp0JbhQ=
Subject key identifier:   83:A1:20:BC:F0:CC:64:30:66:5B:D1:DA:00:48:20:EF:97:6A:68:8A
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       06110687E70B364EDE25B85844E0C34A8A001CA2
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e36382e38302e302f32312d3332203d3e2030.roa
Signing time:             Fri 30 Jan 2026 19:20:33 +0000
ROA not before:           Fri 30 Jan 2026 19:15:33 +0000
ROA not after:            Fri 29 Jan 2027 19:20:33 +0000
asID:                     0
IP address blocks:        45.68.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:11:06:87:e7:0b:36:4e:de:25:b8:58:44:e0:c3:4a:8a:00:1c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jan 30 19:15:33 2026 GMT
            Not After : Jan 29 19:20:33 2027 GMT
        Subject: CN=83A120BCF0CC6430665BD1DA004820EF976A688A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:f4:3f:32:5c:74:85:79:d3:9e:87:ca:4a:
                    ef:06:fb:2d:0c:56:8e:26:79:80:56:ab:42:a2:1a:
                    17:13:a8:f5:65:20:53:52:9f:93:49:4d:a2:57:b0:
                    ce:e3:87:71:d3:13:03:59:f0:5a:2b:dc:fe:2f:7d:
                    9e:bd:e1:12:49:9c:85:29:1e:98:97:05:a5:1f:76:
                    af:19:38:a4:69:7c:d6:cd:5e:99:e5:6c:d0:3f:f6:
                    cd:7b:30:b6:05:be:01:cf:fa:0b:8c:e0:f8:5a:67:
                    a6:50:94:84:f2:47:98:07:bb:36:e6:14:7d:60:df:
                    9d:28:96:ea:7e:0e:66:69:23:0c:93:0e:52:c7:a2:
                    29:c2:dc:c2:24:9e:42:f8:21:0a:42:e7:11:2e:fd:
                    e5:df:92:26:dc:01:98:5d:dd:a5:87:1a:19:40:92:
                    16:ec:23:7e:cb:c3:9e:f3:ca:97:fa:31:08:e2:db:
                    ce:68:56:a1:82:ae:72:91:c1:1e:cb:68:85:84:02:
                    1b:58:e2:86:87:47:0b:c4:22:b5:9d:0e:a9:41:8f:
                    34:fb:4d:e9:e6:2f:61:03:21:91:4b:e5:51:ba:3d:
                    a3:c1:8f:25:13:ee:b9:77:a7:7a:da:25:62:3b:7d:
                    9f:07:5e:ae:48:b2:86:28:4b:0a:7d:8b:f3:15:26:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:20:BC:F0:CC:64:30:66:5B:D1:DA:00:48:20:EF:97:6A:68:8A
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e36382e38302e302f32312d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:2d:97:6b:9d:c1:e5:dc:f1:91:67:6b:8e:c8:27:69:fa:95:
         3e:82:16:04:23:08:ad:e5:6d:e1:e0:9c:c4:02:92:5a:5b:14:
         f7:dd:f5:77:dc:87:e6:31:20:b8:fa:34:92:34:f0:e4:bf:77:
         09:0d:b5:d5:18:17:61:fb:54:41:9d:23:0e:4a:55:6b:3a:46:
         31:30:84:79:a7:45:32:2f:df:0e:a6:9b:0b:d0:5a:14:02:85:
         47:8b:9d:33:7c:45:24:c2:f2:dc:c8:7c:d2:6b:cd:6b:ba:68:
         df:c2:a0:43:65:ab:5c:52:d1:4d:c9:45:05:cb:fa:d6:2f:1a:
         57:b5:04:86:1c:1b:52:ab:fb:44:b1:64:88:83:d1:2b:7b:7e:
         f9:aa:20:34:15:7e:f9:b8:77:9f:36:cc:94:3e:be:ee:b1:80:
         be:7e:14:88:9b:f7:fb:42:7f:15:74:5a:fe:23:7e:2b:05:8b:
         45:57:78:61:18:c8:ae:c5:22:1d:16:00:0d:45:05:4c:94:e5:
         93:65:3c:88:4e:a7:df:91:c6:70:59:b8:ca:4c:35:d8:60:88:
         6a:58:67:e6:ac:0b:63:79:60:39:65:d0:65:9a:40:50:25:f1:
         1e:ec:aa:c5:c6:e0:85:fd:62:31:f5:d2:63:70:52:5b:0a:90:
         f1:63:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:41:41 2026 by rpki-client