Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          YTgO5W4vat4eFD0HY8xEqbohjorn5LouU6TM21QN+IY=
Subject key identifier:   D1:2D:87:6A:22:0F:5D:F5:B8:6B:AB:91:79:79:F0:43:76:BC:4D:C1
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       021F0F67B0616F76B68587A477A88ED7F307BD6B
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:08 +0000
ROA not before:           Thu 05 Feb 2026 15:01:08 +0000
ROA not after:            Thu 04 Feb 2027 15:06:08 +0000
asID:                     269597
IP address blocks:        45.71.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:0f:67:b0:61:6f:76:b6:85:87:a4:77:a8:8e:d7:f3:07:bd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:08 2026 GMT
            Not After : Feb  4 15:06:08 2027 GMT
        Subject: CN=D12D876A220F5DF5B86BAB917979F04376BC4DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:c7:a1:c5:e8:11:e8:12:24:cb:8a:f6:02:
                    8b:57:c7:3b:db:2f:32:32:07:ef:6a:d3:42:75:bf:
                    73:e2:70:89:93:4e:1b:0a:ad:85:a2:64:69:23:4f:
                    1f:d1:c7:00:8f:50:e5:69:a9:85:cb:27:37:c7:cc:
                    72:9a:54:8d:c4:31:28:2a:18:2c:0f:01:79:03:e1:
                    3d:73:89:7c:0b:d2:ef:37:9a:9c:ea:a1:b1:5f:c0:
                    f4:69:2f:7e:a3:c5:14:58:6d:3b:bb:42:39:18:b6:
                    64:e2:26:cc:3d:04:65:b6:a1:84:18:79:f2:a5:17:
                    bd:a8:17:7f:c9:b7:25:80:87:01:94:5e:5c:12:1f:
                    0b:e2:7d:45:da:3c:ef:0b:05:d8:0d:2e:0c:62:f9:
                    72:2c:51:2f:70:6a:ea:ca:4c:b4:2e:a5:4a:57:ab:
                    ef:91:b9:0a:7c:67:6d:f3:6b:45:32:0f:7f:7a:49:
                    98:6c:00:e9:b2:c2:23:20:53:7b:90:64:7c:63:e3:
                    45:6a:f2:16:2b:c4:38:62:a4:58:4d:bc:d3:70:ad:
                    b3:80:52:eb:6c:0e:41:5e:d7:99:70:97:58:09:94:
                    1b:02:00:04:d5:63:1c:33:8f:35:6b:37:82:fc:77:
                    76:dc:bd:e5:51:df:25:92:50:90:33:21:eb:38:0a:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2D:87:6A:22:0F:5D:F5:B8:6B:AB:91:79:79:F0:43:76:BC:4D:C1
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:d2:5a:01:b0:d3:1d:f8:d0:ea:e4:89:ec:e8:f2:08:5c:
         b7:5d:a2:da:a7:93:ee:5c:c5:e4:36:c2:37:4d:32:40:e1:70:
         0f:36:af:6a:11:d1:dd:52:cc:43:2d:0f:3b:01:47:8a:b9:5f:
         b2:5e:14:be:a6:61:72:2d:95:de:bc:6f:f4:db:fe:6c:a4:84:
         50:dc:75:17:83:ef:37:63:5e:53:58:2a:72:2d:58:c6:db:6c:
         71:cb:54:5c:9b:6a:65:5c:5f:db:70:1f:3f:2a:43:39:fa:33:
         7f:0f:23:db:88:55:8b:f2:b5:56:ab:d5:84:c6:26:f1:6e:8d:
         57:4d:90:58:d7:06:bb:56:9a:d4:1c:67:cd:48:72:3b:61:58:
         0f:99:6d:f0:3a:c1:96:9d:34:2b:e9:4b:63:ed:48:eb:8b:52:
         83:12:70:d8:45:58:29:00:20:2a:43:58:68:e2:82:b2:c9:eb:
         9d:f7:22:7d:c8:8f:cc:40:99:7e:4c:b0:85:08:18:94:c1:d6:
         10:3f:57:0e:ed:1a:26:bc:a6:f7:a1:37:59:0e:9b:23:34:f1:
         91:12:09:83:7c:a9:b9:80:7f:fe:5c:7e:32:f3:dd:b6:fb:75:
         4b:c9:c8:2a:ed:6c:4e:20:22:48:78:0d:19:83:3c:3e:72:de:
         f2:16:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:36 2026 by rpki-client