Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3231302e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          g3ENl4jucUBmy26exxGJ/BA+1wTBouhwZIeoClMyUMU=
Subject key identifier:   58:CA:57:EF:C4:5F:14:3F:D4:19:80:88:05:4F:FB:C6:37:5E:CA:17
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       2B3DB2BB783D8D41FBE485B22B4D72DA67A5C80C
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:09 +0000
ROA not before:           Thu 05 Feb 2026 15:01:09 +0000
ROA not after:            Thu 04 Feb 2027 15:06:09 +0000
asID:                     269597
IP address blocks:        45.71.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3d:b2:bb:78:3d:8d:41:fb:e4:85:b2:2b:4d:72:da:67:a5:c8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:09 2026 GMT
            Not After : Feb  4 15:06:09 2027 GMT
        Subject: CN=58CA57EFC45F143FD4198088054FFBC6375ECA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:27:65:03:50:71:8d:67:e1:98:4a:e1:9d:
                    79:ad:2b:d6:10:10:04:71:5b:42:8c:61:2e:19:03:
                    56:de:c2:8f:3a:a6:87:d1:53:5e:de:82:dc:af:91:
                    58:38:7e:e1:8e:ee:dd:11:34:b5:30:1d:a7:ba:5a:
                    b1:21:aa:4f:65:6b:e4:cb:30:b5:f4:3e:5f:e6:4f:
                    e9:25:de:c7:57:bf:d8:f0:3d:ec:e7:f6:5f:ca:22:
                    80:9f:16:d1:c2:6d:ff:aa:78:30:7c:d5:06:1f:cc:
                    35:3d:11:09:0d:4f:3f:d8:44:b8:a2:43:9d:e9:62:
                    38:7d:4f:ef:92:18:88:c0:51:04:b7:39:0c:53:ef:
                    c8:54:2f:ce:8b:e0:a1:4b:e3:0d:84:35:e9:89:2f:
                    23:ef:08:8d:e2:81:4b:13:ba:5e:8a:ba:e8:19:68:
                    e2:a9:8b:6f:75:9d:43:13:54:1b:6f:5d:15:11:d1:
                    2a:43:30:7f:83:f6:32:c7:1f:31:e9:76:9b:9d:8d:
                    5e:57:90:9d:bd:10:67:d1:54:17:94:27:bd:03:02:
                    26:59:cf:37:2f:05:af:6e:67:b1:d7:75:00:6f:5a:
                    7e:8f:b7:eb:80:88:eb:3a:c8:9b:cb:a3:0d:5e:95:
                    4a:ee:06:fe:1d:76:c0:52:4c:b3:11:7b:c1:cb:3b:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:57:EF:C4:5F:14:3F:D4:19:80:88:05:4F:FB:C6:37:5E:CA:17
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e9:46:ee:68:bb:2b:89:08:cd:84:15:34:9b:8d:27:88:0e:13:
         e6:0d:61:69:ab:2a:20:a6:eb:62:83:e9:a9:6f:6f:91:0b:f3:
         c5:3c:3f:5e:d2:82:6f:35:a2:3d:1d:64:1b:bc:a4:e7:7c:5f:
         2c:85:41:0b:29:1c:e6:a7:40:ba:62:c0:ef:0b:15:63:de:59:
         63:26:08:a7:82:54:53:4d:35:14:31:01:49:89:de:5e:1a:28:
         f3:c0:72:8d:75:e1:41:58:a1:1c:33:7c:82:4b:2b:41:58:d8:
         1f:dd:02:1a:7e:f7:00:e0:4e:db:c0:fe:a2:36:ea:96:03:a5:
         27:9f:f0:73:9a:60:38:a4:99:5c:b9:ce:6e:38:83:b4:04:45:
         1e:27:d8:de:a5:1a:f9:b7:c8:24:b1:5f:33:79:cc:a4:e2:2d:
         7d:9c:57:83:d7:af:97:f9:dd:ad:39:9d:c8:6e:d1:1f:dd:67:
         1e:db:bd:04:84:f3:a3:b3:2f:bc:a4:aa:76:74:db:e6:27:ad:
         dc:4b:fd:39:ae:63:59:6b:80:6d:04:d5:25:62:a8:dd:17:eb:
         67:44:c9:1e:ad:98:33:3e:9a:27:a3:1f:34:ae:df:fd:df:24:
         93:d5:c3:71:61:5e:e2:cf:cf:d4:91:20:e8:da:26:8b:74:d5:
         b1:e7:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:47 2026 by rpki-client