Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          ofwaTqFyOG++O6xKh5yB3JrNwCknI+1pqf1a3eGgwjs=
Subject key identifier:   97:E7:F5:48:BA:9A:23:64:32:39:7F:C6:48:1C:FF:6A:4F:8D:F9:42
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       0599F340477DDCCC4B452F43C8FB7437EB9D9B79
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:09 +0000
ROA not before:           Thu 05 Feb 2026 15:01:09 +0000
ROA not after:            Thu 04 Feb 2027 15:06:09 +0000
asID:                     269597
IP address blocks:        45.189.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:f3:40:47:7d:dc:cc:4b:45:2f:43:c8:fb:74:37:eb:9d:9b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:09 2026 GMT
            Not After : Feb  4 15:06:09 2027 GMT
        Subject: CN=97E7F548BA9A236432397FC6481CFF6A4F8DF942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:f4:38:96:18:23:af:9a:d9:83:28:93:b7:
                    9b:93:1c:55:8e:1a:66:7a:7b:98:7b:74:db:96:90:
                    82:87:1f:f5:5c:86:1a:66:43:97:30:66:b9:a1:23:
                    4c:39:c7:39:2c:1b:d1:7c:31:66:e3:07:75:bf:d8:
                    ed:b1:e5:a8:bc:fa:7f:97:d7:4f:82:ce:ac:d7:0b:
                    7e:5a:e5:40:b1:b6:f9:0c:ae:88:e3:e4:04:59:0d:
                    68:c4:3c:06:4d:57:1f:95:7f:ef:81:55:33:c2:6e:
                    c2:1a:be:53:b4:d8:22:cc:3d:91:66:8d:25:37:0c:
                    70:9c:f7:5b:23:c4:ae:fe:b0:67:7d:23:d8:ca:54:
                    bf:b3:a5:00:da:16:bb:73:f0:58:24:fd:ed:99:56:
                    17:a9:83:d2:ee:71:d6:20:77:01:99:a3:96:2a:42:
                    d7:2c:92:ee:a3:b8:b7:1e:75:6c:86:f0:e5:c5:90:
                    5a:88:33:2c:1e:1e:9c:e2:b7:8c:15:e4:5d:78:38:
                    a8:10:30:9d:db:0d:a7:23:a4:48:8d:e9:bd:d8:68:
                    27:63:48:4c:87:53:03:c0:8f:be:11:3d:7f:2f:43:
                    83:85:9f:c2:bc:5d:c6:ff:4b:70:70:eb:18:35:0f:
                    4d:d0:80:c8:05:e0:2c:09:46:70:a6:61:79:58:d5:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E7:F5:48:BA:9A:23:64:32:39:7F:C6:48:1C:FF:6A:4F:8D:F9:42
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:69:3e:43:f5:01:b5:2e:1b:57:51:b3:6a:4b:7a:f2:03:27:
         d7:38:3b:97:92:1c:ad:5e:c8:d9:a6:47:b5:39:b0:da:28:3e:
         e0:e0:0e:a1:76:75:e1:d1:8a:5f:f2:d2:a2:bb:31:f6:c3:4d:
         cc:6e:a0:0a:48:03:02:24:28:11:2e:6d:34:d3:36:13:42:5b:
         5a:0c:a3:ef:4d:32:6d:10:41:98:da:81:9a:6b:d4:39:29:21:
         6f:43:6e:fb:c6:0d:48:91:6f:7e:c6:42:69:29:61:93:5a:03:
         cb:4a:18:4e:fe:55:66:24:0e:e5:a8:ce:b4:7e:9f:64:2c:43:
         07:69:e5:48:31:27:2b:23:f8:d9:7d:c5:57:18:95:78:24:d0:
         37:0b:c4:e9:10:2a:c2:4b:2d:cb:0f:2b:2e:df:b5:d4:8b:45:
         bd:93:1f:c3:ea:e4:d2:8b:4b:81:9b:bc:5a:18:95:00:27:c8:
         89:da:84:a6:02:79:35:99:1b:f3:7c:6f:7e:14:89:a8:e1:a4:
         3d:e1:92:de:f0:69:7f:74:ce:f0:45:e2:56:6f:db:11:bd:e4:
         e5:0a:43:4b:d1:4e:42:a2:fb:99:a9:9a:3c:12:c9:9d:5e:ce:
         a5:b3:eb:2c:28:c4:4c:d4:ce:f2:0f:fb:5f:76:45:32:67:38:
         55:1c:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:23 2026 by rpki-client