Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
File:                     34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (raw, json)
Hash identifier:          9jpx1YK1iqOvUb4TWxrHqS++TcWhKZH+05KH20MC4f0=
Subject key identifier:   D8:C8:FC:B2:9B:7A:ED:66:35:AF:71:8B:5E:3D:50:80:3C:21:3A:55
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       081954E8DBC4F100600F895772CD8C568CD5B306
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
Signing time:             Thu 05 Feb 2026 10:11:35 +0000
ROA not before:           Thu 05 Feb 2026 10:06:35 +0000
ROA not after:            Thu 04 Feb 2027 10:11:35 +0000
asID:                     268683
IP address blocks:        45.165.164.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:19:54:e8:db:c4:f1:00:60:0f:89:57:72:cd:8c:56:8c:d5:b3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Feb  5 10:06:35 2026 GMT
            Not After : Feb  4 10:11:35 2027 GMT
        Subject: CN=D8C8FCB29B7AED6635AF718B5E3D50803C213A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bb:69:ff:b2:27:42:ad:59:d8:48:4a:df:d8:
                    45:7b:19:e2:e0:13:0a:3a:7e:8e:f4:9c:1a:71:3b:
                    be:a9:41:c4:5d:6b:4f:31:d3:f8:8a:6f:ed:40:13:
                    f9:5a:e0:95:2a:64:ab:72:ec:fa:21:f6:41:d4:8e:
                    2c:92:0f:a6:50:c2:22:79:e9:ff:8d:71:be:2a:57:
                    a8:e0:71:75:15:2a:42:6d:39:81:62:6f:df:a4:b2:
                    c8:64:65:0f:45:d5:8a:5a:ce:36:5a:0c:2a:6b:b1:
                    5e:b8:e3:3f:98:ec:cc:8a:53:d2:95:48:bd:8c:32:
                    c9:fa:c6:75:fe:3c:14:eb:e3:2a:9a:86:af:f3:46:
                    37:ce:68:7c:8f:21:64:7e:08:f1:46:cd:0c:e4:80:
                    55:0a:9b:9f:49:50:66:67:ca:aa:63:ce:f1:4a:66:
                    7a:7e:a0:cf:82:00:b5:5e:d8:eb:70:99:64:12:e6:
                    4e:8f:6a:a5:99:64:8c:c5:6d:0f:d4:be:b5:73:59:
                    12:00:ec:1e:72:f3:ac:bf:95:ae:fe:02:85:eb:e9:
                    d6:24:5c:8a:57:60:5c:17:58:2b:dc:70:52:1b:fd:
                    1f:24:b2:90:fa:cc:27:64:c0:4a:73:f8:45:85:ad:
                    46:a2:c0:73:6f:5c:d7:4e:58:71:e0:f8:d3:7d:55:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:FC:B2:9B:7A:ED:66:35:AF:71:8B:5E:3D:50:80:3C:21:3A:55
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:c6:21:68:5e:3f:9e:d7:4c:d5:26:ca:ca:d1:d0:57:21:df:
         82:45:eb:f3:b9:d5:ed:8c:77:fd:d3:f0:2f:6d:24:d4:fa:d9:
         d3:84:2f:5e:70:5b:b9:a3:6b:45:03:24:19:42:66:4f:74:3c:
         59:92:3c:69:1e:70:41:43:6f:c1:c3:e2:8d:ee:d3:59:b1:90:
         98:b9:ea:3d:1d:a5:5c:56:76:7b:b2:d8:8c:7c:92:21:75:ea:
         c8:cd:13:3b:f7:64:c3:2c:00:85:dc:01:9c:bb:e1:2f:1b:d1:
         e9:89:64:58:6d:e8:ec:e9:17:5a:02:28:7b:11:4d:2d:a4:28:
         1b:a9:50:a0:1e:0d:c4:5a:a2:96:c4:97:85:75:24:6b:63:bd:
         cc:34:7a:13:cf:ce:46:f2:89:da:4d:51:f2:77:3d:27:75:e6:
         c2:27:c8:f9:60:95:34:bb:a0:25:c9:39:f7:7f:17:e4:75:74:
         bb:1f:9c:ba:1c:cc:b1:87:c2:fd:e2:a2:e8:0b:60:2d:1c:69:
         2e:e2:19:97:f5:7b:eb:7c:df:aa:2c:1a:71:7c:00:df:1c:de:
         95:c2:54:0c:1a:f6:86:bd:70:51:cb:f3:18:01:28:a7:ab:29:
         4c:c0:b6:21:c7:80:92:a5:c1:a1:dd:f2:81:9c:8d:d5:97:2f:
         f2:f9:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:55 2026 by rpki-client