Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          4fvu7IV2K436+AcXQkYe55FX12juNU9aNxjXoIipHFw=
Subject key identifier:   CF:34:13:4B:C4:5F:D0:ED:B9:5D:E8:22:E5:B1:79:0E:37:4B:67:E8
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       5BAE34CAC0A919498645D93704F1D417922AAEC1
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 04 Feb 2026 19:00:06 +0000
ROA not before:           Wed 04 Feb 2026 18:55:06 +0000
ROA not after:            Wed 03 Feb 2027 19:00:06 +0000
asID:                     267072
IP address blocks:        45.225.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:34:ca:c0:a9:19:49:86:45:d9:37:04:f1:d4:17:92:2a:ae:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Feb  4 18:55:06 2026 GMT
            Not After : Feb  3 19:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:ec:b1:00:1b:c5:4b:35:df:29:3c:a4:89:
                    23:87:38:72:9a:c7:29:0a:8f:7f:83:de:1e:f0:65:
                    ae:15:f7:9b:49:fc:c0:3c:73:a2:16:84:40:a0:59:
                    bf:51:b5:65:93:50:1e:3d:ab:32:ff:f6:cc:ce:81:
                    2d:ff:7b:72:68:73:a2:e1:e5:e7:32:46:ed:41:a3:
                    8a:79:d7:d2:9b:44:33:e3:eb:68:c5:1e:44:8f:d4:
                    b6:d4:41:c6:5a:d0:1a:77:d7:3f:e0:23:4f:e2:86:
                    12:d4:fe:36:94:b0:69:57:a2:8e:53:75:82:ba:55:
                    9f:06:93:7e:bd:d6:c6:38:c4:e0:65:0d:83:88:51:
                    47:c7:e3:65:e0:1e:4d:6b:ed:71:5d:14:95:36:b5:
                    cc:66:8f:19:f5:f3:b4:66:4b:a0:bd:55:fc:8c:70:
                    51:a0:05:9b:98:0a:e4:7d:46:db:07:00:d5:66:86:
                    13:5c:2e:fc:b8:02:8b:11:75:a5:71:dc:65:f8:83:
                    eb:eb:39:ed:a4:0f:5a:5d:4d:6e:17:70:44:ad:2c:
                    d0:2c:66:94:39:5e:f3:4d:d9:11:52:87:ef:2f:2a:
                    51:ed:54:80:46:52:88:b3:2f:ce:f4:36:7b:d8:7a:
                    9a:a6:ef:4c:46:84:33:2f:a1:79:f3:ec:72:33:85:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:13:4B:C4:5F:D0:ED:B9:5D:E8:22:E5:B1:79:0E:37:4B:67:E8
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:df:dc:71:89:1e:7c:19:cb:a5:10:ca:89:3a:3d:90:79:
         33:54:7e:42:14:1b:79:cc:8f:fc:46:6b:10:b2:94:b0:19:91:
         6f:71:02:98:f8:e2:56:70:5c:57:60:f9:6a:ed:74:e3:6b:ab:
         20:c2:58:ae:22:a9:bb:0f:bd:2f:1b:dd:23:52:5e:db:a1:96:
         1c:2a:16:96:aa:d9:f4:cd:23:f6:23:18:33:4b:30:62:87:ab:
         17:ce:4e:c8:fc:a7:df:fd:4a:97:70:6b:fa:e6:45:83:46:7c:
         b5:22:15:ec:41:85:e3:a5:57:f4:b6:e3:55:c7:e4:60:78:2c:
         05:34:70:e1:ee:9f:2d:64:da:be:78:a8:4f:3a:f5:a4:aa:d7:
         5b:df:a9:ed:8b:72:d9:1e:b5:71:f3:b4:3e:0b:a1:e8:38:e7:
         04:32:d9:8f:df:9e:f4:ad:6f:db:65:ad:be:1e:76:95:91:ad:
         16:12:8b:8e:fa:27:b9:66:75:75:ab:77:5b:80:05:ea:fe:a5:
         ac:3b:e7:4b:e0:c9:49:72:5c:10:99:e1:aa:0d:4d:90:fb:b6:
         cd:11:d1:92:d5:8a:a7:c3:ce:16:65:ec:3f:72:08:08:d4:3c:
         6b:2a:42:41:93:97:e0:28:6b:85:31:71:fe:bc:b9:5e:cd:40:
         0a:e7:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:01 2026 by rpki-client