Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32322d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          4KtxK6IpZipZOANrAXSns6oyGq0Td+tT5SG4dWRcN3I=
Subject key identifier:   33:CD:5A:BB:8F:60:39:13:79:04:86:AA:1E:79:AE:20:82:20:C7:D6
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       080CD7438EE981011380ACFCD90E3458AB1F8924
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:08 +0000
ROA not before:           Thu 05 Feb 2026 15:01:08 +0000
ROA not after:            Thu 04 Feb 2027 15:06:08 +0000
asID:                     269597
IP address blocks:        45.181.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:d7:43:8e:e9:81:01:13:80:ac:fc:d9:0e:34:58:ab:1f:89:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:08 2026 GMT
            Not After : Feb  4 15:06:08 2027 GMT
        Subject: CN=33CD5ABB8F603913790486AA1E79AE208220C7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:7c:31:0c:11:19:f0:91:a0:4d:83:9e:fc:
                    a6:e8:ee:ba:27:2e:24:11:d7:3e:42:dd:b0:45:39:
                    3d:77:61:f8:ff:3a:d3:e5:3c:75:07:ac:a0:ef:7b:
                    a5:42:c8:91:5d:3d:8b:8c:a5:c9:e7:e0:1d:6e:0d:
                    79:24:40:04:07:e0:ec:fe:17:06:0e:22:07:7a:c3:
                    0c:95:f0:2d:e2:64:26:a3:a6:52:1e:5a:b1:c7:a6:
                    76:87:1f:ab:59:f9:35:8a:53:96:4f:19:ea:ee:54:
                    7b:eb:fd:37:81:ac:be:33:5c:13:5e:c7:57:b2:ed:
                    e7:c5:dc:c2:2d:eb:66:27:03:c0:60:43:f8:6b:db:
                    5e:69:0d:dd:6c:be:9b:ce:39:e1:da:5d:d8:fc:f4:
                    d9:72:39:ad:3d:83:41:91:f4:32:89:50:35:74:48:
                    8c:c1:35:da:bd:76:4e:c5:26:d2:61:0f:6c:6a:9a:
                    c1:e7:58:87:72:65:49:2d:ce:46:d9:9d:a2:7b:82:
                    0f:65:90:ca:3c:dd:6c:a8:69:7e:c8:9e:77:b2:0c:
                    36:98:10:52:17:e0:7d:4d:b1:f5:22:5d:70:f7:39:
                    94:1c:69:a5:af:c6:a6:b9:bd:b4:8a:c2:74:8d:1f:
                    a9:3a:81:a5:08:8e:b7:bc:94:ea:b9:b4:6e:55:d6:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CD:5A:BB:8F:60:39:13:79:04:86:AA:1E:79:AE:20:82:20:C7:D6
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:df:81:f7:58:51:1b:fc:aa:f0:d0:9f:ef:c3:67:ef:8a:
         d8:77:d5:47:f8:4e:27:14:07:ee:34:27:1b:83:28:26:21:95:
         32:f6:a9:c5:3d:01:b9:e9:21:5d:32:6d:02:81:c6:57:0b:a0:
         37:05:d0:9e:ea:18:c2:15:8f:5a:9d:1c:46:c2:39:12:68:a1:
         92:04:32:90:68:b0:68:d9:22:b3:fa:19:90:b8:77:3e:e1:b5:
         23:64:f9:dd:20:41:3a:7f:38:99:d9:16:00:e0:2d:b8:88:29:
         a8:6c:c7:2d:65:fa:99:81:43:eb:2b:33:5c:af:53:29:55:3f:
         a7:c6:1b:78:d1:e0:e2:ad:9c:c1:d0:62:5a:d6:4a:c9:59:9f:
         16:a1:84:4b:73:56:a9:38:03:b0:25:7e:a6:90:59:93:fc:4a:
         d5:3d:30:fb:4b:36:14:95:6c:8e:dd:25:8b:5f:93:c5:53:86:
         d9:49:12:93:63:4e:e2:bc:b3:2a:17:42:c7:0d:fb:66:03:fe:
         b4:2a:ec:1f:14:8e:45:9a:6f:91:ee:cb:a1:8b:7d:d5:3c:39:
         38:a5:54:6c:f7:c3:37:04:6c:0e:87:fc:f1:7c:2a:97:7d:9d:
         f8:ff:b0:c3:6d:72:24:86:9b:25:d6:d2:2d:6c:13:8b:4f:18:
         ad:35:e3:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCAzXQ47pgQETgKz82Q40WKsfiSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNEMERCQzVFNjM2QTIxQjRDRTBGNUJBNUNENzE4OTJD
MzFCQjZBODAeFw0yNjAyMDUxNTAxMDhaFw0yNzAyMDQxNTA2MDhaMDMxMTAvBgNV
BAMTKDMzQ0Q1QUJCOEY2MDM5MTM3OTA0ODZBQTFFNzlBRTIwODIyMEM3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02XwxDBEZ8JGgTYOe/Kbo7ron
LiQR1z5C3bBFOT13Yfj/OtPlPHUHrKDve6VCyJFdPYuMpcnn4B1uDXkkQAQH4Oz+
FwYOIgd6wwyV8C3iZCajplIeWrHHpnaHH6tZ+TWKU5ZPGeruVHvr/TeBrL4zXBNe
x1ey7efF3MIt62YnA8BgQ/hr215pDd1svpvOOeHaXdj89NlyOa09g0GR9DKJUDV0
SIzBNdq9dk7FJtJhD2xqmsHnWIdyZUktzkbZnaJ7gg9lkMo83WyoaX7InneyDDaY
EFIX4H1NsfUiXXD3OZQcaaWvxqa5vbSKwnSNH6k6gaUIjre8lOq5tG5V1hTxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUM81au49gORN5BIaqHnmuIIIgx9YwHwYDVR0j
BBgwFoAU7NDbxeY2ohtM4PW6XNcYksMbtqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMS9FQ0QwREJDNUU2MzZBMjFCNENFMEY1QkE1Q0Q3MTg5MkMzMUJCNkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDRDBEQkM1RTYzNkEyMUI0
Q0UwRjVCQTVDRDcxODkyQzMxQkI2QTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzEv
MzQzNTJlMzEzODMxMmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbUkMA0GCSqGSIb3DQEBCwUAA4IBAQCzxN+B91hR
G/yq8NCf78Nn74rYd9VH+E4nFAfuNCcbgygmIZUy9qnFPQG56SFdMm0CgcZXC6A3
BdCe6hjCFY9anRxGwjkSaKGSBDKQaLBo2SKz+hmQuHc+4bUjZPndIEE6fziZ2RYA
4C24iCmobMctZfqZgUPrKzNcr1MpVT+nxht40eDirZzB0GJa1krJWZ8WoYRLc1ap
OAOwJX6mkFmT/ErVPTD7SzYUlWyO3SWLX5PFU4bZSRKTY07ivLMqF0LHDftmA/60
KuwfFI5Fmm+R7suhi33VPDk4pVRs98M3BGwOh/zxfCqXfZ34/7DDbXIkhpsl1tIt
bBOLTxitNeNs
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:05:49 2026 by rpki-client