Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          +axJcRs5Fz5YG5JRLjikXFEX6lClGuyDZMkFn33gDys=
Subject key identifier:   AA:0A:D3:CC:C8:D9:4D:30:CC:CC:39:4D:B7:3B:01:E8:60:D2:A2:7F
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       58898F8D15A937E325CBB90510C0C37CD033ACBC
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:08 +0000
ROA not before:           Thu 05 Feb 2026 15:01:08 +0000
ROA not after:            Thu 04 Feb 2027 15:06:08 +0000
asID:                     269597
IP address blocks:        45.189.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:8f:8d:15:a9:37:e3:25:cb:b9:05:10:c0:c3:7c:d0:33:ac:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:08 2026 GMT
            Not After : Feb  4 15:06:08 2027 GMT
        Subject: CN=AA0AD3CCC8D94D30CCCC394DB73B01E860D2A27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:0e:cd:b8:62:33:94:df:6e:b5:16:34:f0:
                    98:cd:37:39:81:77:75:41:54:fe:79:50:9f:47:6f:
                    64:59:9f:67:0b:4f:0a:e2:48:94:15:1e:61:56:25:
                    08:da:62:71:1f:da:4e:2f:ff:b4:5f:fd:58:c0:57:
                    1c:4e:f8:b3:2b:ed:ad:e0:04:8e:ac:c9:63:fb:a7:
                    0f:27:67:53:43:08:fb:5e:7b:bb:cf:f9:e4:5a:8b:
                    af:32:db:0e:be:7c:e6:f7:8e:cc:45:d5:26:a1:10:
                    90:c7:6b:9c:e6:89:98:44:9b:18:fe:8c:c3:41:09:
                    e3:7b:c2:ca:2b:cf:84:3e:74:f8:cc:6e:58:0d:75:
                    79:b9:16:ea:63:61:58:d8:ba:f9:26:7a:7c:02:24:
                    b7:00:34:64:d2:4d:47:22:32:70:2e:c5:61:7b:84:
                    60:07:ce:4d:4a:45:6c:9e:0d:c5:63:49:8c:56:b8:
                    0f:f4:e6:3e:97:6c:48:84:31:4e:74:56:68:90:fc:
                    fe:d2:d3:76:0f:1e:5f:f2:36:dc:37:ae:89:cb:85:
                    11:23:9e:23:31:ce:65:3e:99:8a:f8:0d:1e:20:d6:
                    4a:a1:cf:f9:ab:88:14:78:fb:38:56:cf:7f:ef:1b:
                    ac:0f:b1:0e:ff:2a:4d:e0:b5:ea:dc:df:fa:07:9b:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:D3:CC:C8:D9:4D:30:CC:CC:39:4D:B7:3B:01:E8:60:D2:A2:7F
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:72:d4:ce:37:95:ea:03:3d:19:40:d1:e6:de:f8:b0:b1:
         80:f3:ed:1a:94:f0:e3:88:c1:45:f2:8a:3e:7a:a7:65:3e:1a:
         62:68:36:86:9b:97:b5:f8:f5:34:8d:32:3e:2a:7e:ff:5b:b2:
         f1:fa:c3:eb:ea:2a:62:74:49:81:9b:8a:34:a1:af:d6:62:ce:
         42:51:cc:96:bf:8d:65:d9:ce:48:a7:5a:92:0c:21:f8:14:9d:
         59:5a:9f:ba:d8:cb:3e:d0:2b:19:62:77:03:6e:b8:56:94:bb:
         0b:b1:0a:4b:a3:65:76:76:aa:ce:d9:bf:e8:c7:11:a7:27:9e:
         08:97:73:a1:b8:89:01:e9:27:05:e3:a9:35:83:77:6f:67:1c:
         cc:b0:05:31:06:74:1f:ae:3d:7e:d2:66:bd:73:70:10:6b:77:
         1b:c9:f1:87:1d:2e:83:bc:07:4b:f7:a2:cc:d8:64:b7:11:00:
         2f:cb:92:e7:2f:84:df:95:6a:91:db:79:2d:3a:6e:ac:b9:d9:
         25:4a:21:0d:ac:cb:1f:7c:7b:42:fe:0b:80:26:d6:9b:7f:07:
         f9:b2:c9:6d:cb:69:ae:4b:a9:a1:92:28:29:59:2c:a9:58:7e:
         06:49:f9:b1:8f:12:2e:9e:05:8e:a4:36:42:75:6a:d4:96:b4:
         a1:46:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:15:08 2026 by rpki-client