Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          aQiSUSNLzincCsmGCxdCOJCijLIAbVIAfbMVlquYXxE=
Subject key identifier:   05:6A:F5:82:E3:B6:4E:2F:C7:0E:6F:B7:2E:F2:E1:E1:66:E6:B6:1C
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       6B882B02EFEB0ED05726A221688842BB91114710
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 04 Feb 2026 19:00:06 +0000
ROA not before:           Wed 04 Feb 2026 18:55:06 +0000
ROA not after:            Wed 03 Feb 2027 19:00:06 +0000
asID:                     267072
IP address blocks:        45.225.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:88:2b:02:ef:eb:0e:d0:57:26:a2:21:68:88:42:bb:91:11:47:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Feb  4 18:55:06 2026 GMT
            Not After : Feb  3 19:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:04:80:12:91:bf:27:cc:87:4e:7f:ec:ff:
                    4e:7d:72:1f:32:4d:91:87:d1:f5:c9:51:33:53:04:
                    70:b3:57:85:49:26:87:dc:53:df:20:97:9a:e6:7f:
                    28:13:8c:22:56:93:17:e8:f6:a8:2e:b7:58:05:66:
                    41:cb:17:15:56:0f:9f:91:1a:f0:a5:8a:05:de:45:
                    f0:94:58:df:59:6c:fe:aa:3f:7a:5e:08:56:db:2f:
                    8b:b3:f7:60:b0:26:67:9a:30:71:4b:73:5f:47:11:
                    05:72:62:20:ab:93:01:f8:25:c7:09:d0:10:9f:1f:
                    3b:03:76:6c:8b:0e:6c:ac:83:5a:7f:70:94:0b:dd:
                    db:2d:c9:e5:f3:37:79:5c:cc:52:1c:be:fa:2e:2e:
                    fc:cf:f1:38:d4:6c:c2:90:46:5a:f9:8a:97:96:03:
                    38:15:0c:55:cc:64:6e:c2:5c:43:1d:a1:51:6e:ed:
                    13:1d:78:9b:37:70:12:6d:09:dd:13:cd:8e:7b:c7:
                    69:65:c5:6b:82:0e:3b:7d:5f:5b:40:1d:2b:4d:b8:
                    52:b8:32:c9:08:c0:70:c1:4f:79:16:c2:be:c0:96:
                    19:36:b0:55:05:7a:b2:ba:1f:ec:45:da:95:3a:93:
                    27:5c:de:78:a1:14:9f:8a:c5:fb:f1:d9:c3:c3:01:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6A:F5:82:E3:B6:4E:2F:C7:0E:6F:B7:2E:F2:E1:E1:66:E6:B6:1C
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:3e:81:23:fe:ce:e9:4a:98:89:85:14:50:03:10:fe:22:
         71:5f:d9:0b:7c:80:a6:49:c4:5b:9f:44:b5:a5:a7:cf:2b:70:
         43:4c:8e:37:0c:cb:8d:9b:43:c0:0b:05:45:bb:55:de:68:94:
         04:c1:39:be:10:c8:92:6f:7e:d8:9f:37:a0:85:df:5d:0a:2b:
         4e:6e:8c:e2:5f:f6:4b:6d:e3:84:94:f5:7c:c0:a4:38:7b:5d:
         c8:5b:af:c4:d3:00:be:3b:8c:73:55:f3:7e:18:8a:5d:ef:a1:
         26:47:71:35:41:0d:d3:0a:bb:12:8a:53:c6:ae:07:36:60:12:
         bb:bc:3e:56:6e:1b:a1:2e:1a:00:52:7d:79:d1:fb:a5:31:d8:
         89:11:71:c2:61:a7:53:68:a5:93:6e:a8:7a:60:e1:a6:13:30:
         3f:c5:b3:64:19:b9:50:c9:07:d7:d3:0a:39:b8:5c:e3:25:6c:
         4e:a5:a8:ec:26:f6:05:0b:8f:b6:76:b8:a8:b8:e1:08:c2:91:
         e1:dd:b0:21:88:b4:80:2c:e3:1b:63:09:71:9e:cf:64:49:d5:
         61:b1:74:8a:83:29:61:db:b5:87:45:ef:e1:f3:94:27:27:1d:
         fd:4d:20:05:10:73:f8:2e:77:93:93:06:00:09:08:4a:d6:98:
         15:ef:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:37:38 2026 by rpki-client