Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
File:                     34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (raw, json)
Hash identifier:          F7EWt+JCXRjP7iTfwT3vwyBLq7t1B/JioWzvadGNh+E=
Subject key identifier:   8B:1C:74:AD:9D:CC:EB:D6:75:F4:A3:E2:BE:E1:0B:85:22:47:07:EC
Certificate issuer:       /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial:       69971E7E0E045C4090C01F27E40193B6C576ECE0
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
Signing time:             Thu 05 Feb 2026 16:54:28 +0000
ROA not before:           Thu 05 Feb 2026 16:49:28 +0000
ROA not after:            Thu 04 Feb 2027 16:54:28 +0000
asID:                     269116
IP address blocks:        45.179.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
                          rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:97:1e:7e:0e:04:5c:40:90:c0:1f:27:e4:01:93:b6:c5:76:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
        Validity
            Not Before: Feb  5 16:49:28 2026 GMT
            Not After : Feb  4 16:54:28 2027 GMT
        Subject: CN=8B1C74AD9DCCEBD675F4A3E2BEE10B85224707EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:7a:3a:78:23:b5:f9:1a:62:92:29:c0:d8:
                    65:bb:b1:a9:8b:a6:5a:84:3d:b5:54:f2:dc:35:e9:
                    d3:16:6a:45:1b:46:c5:61:45:2c:28:b3:05:cb:0e:
                    d2:6e:14:88:d4:ed:ed:e1:3a:84:06:cd:ca:17:71:
                    ff:40:a5:8d:28:cd:c8:26:f3:83:13:e8:25:a9:15:
                    09:05:02:ae:d2:22:9f:f5:bc:07:8c:0e:83:b5:43:
                    89:c1:f8:73:ce:76:3b:6e:a6:c6:46:3f:f8:26:17:
                    01:37:c5:ca:73:7e:c6:22:43:05:d5:92:ce:7f:1f:
                    75:15:25:2c:2a:32:14:e6:83:30:1e:4d:9b:a1:c5:
                    02:1c:41:20:f0:f6:3e:cc:fd:53:b8:9a:ca:e4:8e:
                    6f:fe:b1:d0:af:87:79:ff:18:71:c9:93:ca:36:3e:
                    13:36:a0:2f:f8:b2:df:37:da:2d:12:db:13:71:d3:
                    30:f4:07:2e:5b:04:1e:32:4d:9f:33:d5:a6:40:1c:
                    f4:f9:15:24:b4:45:ad:aa:e7:6d:d1:db:c1:fa:ac:
                    30:8b:be:57:49:70:14:86:a8:aa:96:e1:34:5a:28:
                    0a:6a:83:b4:0b:b5:97:72:02:88:c1:d6:c4:e6:65:
                    38:05:d5:21:dd:1e:ab:06:16:08:51:44:63:eb:e2:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1C:74:AD:9D:CC:EB:D6:75:F4:A3:E2:BE:E1:0B:85:22:47:07:EC
            X509v3 Authority Key Identifier:
                keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:32:21:69:f9:ec:ef:1d:c5:ba:c0:71:42:c5:bb:d4:37:
         a8:3d:1d:60:94:22:60:ea:49:b1:f6:d8:20:bf:8f:21:f2:72:
         a1:9f:68:c2:33:1c:74:fb:66:33:3a:71:88:55:51:e8:67:8c:
         d3:30:be:8d:f3:88:2a:0a:92:51:db:49:40:ef:8b:06:04:ee:
         75:da:d4:1b:94:8a:ef:80:18:3f:96:fd:4a:6a:b6:5a:eb:53:
         07:db:41:a5:18:2f:77:b0:e0:20:4e:fb:93:aa:f6:58:69:2d:
         5c:92:70:7a:9f:00:e7:9b:47:6b:4b:9a:76:db:e6:ba:d2:d3:
         85:b5:2e:a6:a8:83:56:d6:1d:24:97:a6:43:87:5d:74:10:e6:
         8e:02:be:eb:61:cf:dc:54:82:3b:bc:42:a8:f1:1e:14:24:b7:
         9f:55:5c:bf:17:34:e9:b2:b3:69:57:23:2b:1c:54:85:02:2e:
         a6:4a:65:5b:0b:23:8d:76:64:fe:90:7a:29:30:2c:23:15:ad:
         31:b2:75:58:0e:cf:79:0e:c3:a3:d4:e7:5a:51:81:99:0e:13:
         0e:3a:c1:fd:76:a3:0b:53:77:0b:3b:dd:11:aa:7f:47:11:a9:
         77:29:45:59:4a:e9:44:be:73:ee:24:d2:2b:85:da:f0:27:02:
         c2:7a:70:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaZcefg4EXECQwB8n5AGTtsV27OAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQwNzA0MjIzNEUwNTBCRjJDOTZEQUU5ODdCNzVCQ0RC
OUUyQkFDMDAeFw0yNjAyMDUxNjQ5MjhaFw0yNzAyMDQxNjU0MjhaMDMxMTAvBgNV
BAMTKDhCMUM3NEFEOURDQ0VCRDY3NUY0QTNFMkJFRTEwQjg1MjI0NzA3RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g3o6eCO1+RpikinA2GW7samL
plqEPbVU8tw16dMWakUbRsVhRSwoswXLDtJuFIjU7e3hOoQGzcoXcf9ApY0ozcgm
84MT6CWpFQkFAq7SIp/1vAeMDoO1Q4nB+HPOdjtupsZGP/gmFwE3xcpzfsYiQwXV
ks5/H3UVJSwqMhTmgzAeTZuhxQIcQSDw9j7M/VO4msrkjm/+sdCvh3n/GHHJk8o2
PhM2oC/4st832i0S2xNx0zD0By5bBB4yTZ8z1aZAHPT5FSS0Ra2q523R28H6rDCL
vldJcBSGqKqW4TRaKApqg7QLtZdyAojB1sTmZTgF1SHdHqsGFghRRGPr4qm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUixx0rZ3M69Z19KPivuELhSJHB+wwHwYDVR0j
BBgwFoAUJAcEIjTgUL8sltrph7dbzbniusAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ttVkN4R0FaUFlUelNaa0pjMjZqSlh5MUVlYjR2bm12MlRibngyZzZU
RWIvMS8yNDA3MDQyMjM0RTA1MEJGMkM5NkRBRTk4N0I3NUJDREI5RTJCQUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MDcwNDIyMzRFMDUwQkYy
Qzk2REFFOTg3Qjc1QkNEQjlFMkJBQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLbVZDeEdBWlBZVHpTWmtKYzI2akpYeTFFZWI0dm5tdjJUYm54Mmc2VEViLzEv
MzQzNTJlMzEzNzM5MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIts9AwDQYJKoZIhvcNAQELBQADggEBADRrMiFp
+ezvHcW6wHFCxbvUN6g9HWCUImDqSbH22CC/jyHycqGfaMIzHHT7ZjM6cYhVUehn
jNMwvo3ziCoKklHbSUDviwYE7nXa1BuUiu+AGD+W/UpqtlrrUwfbQaUYL3ew4CBO
+5Oq9lhpLVyScHqfAOebR2tLmnbb5rrS04W1Lqaog1bWHSSXpkOHXXQQ5o4Cvuth
z9xUgju8QqjxHhQkt59VXL8XNOmys2lXIyscVIUCLqZKZVsLI412ZP6QeikwLCMV
rTGydVgOz3kOw6PU51pRgZkOEw46wf12owtTdws73RGqf0cRqXcpRVlK6US+c+4k
0iuF2vAnAsJ6cM0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:25 2026 by rpki-client