Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
File:                     34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa (raw, json)
Hash identifier:          Lpye6s2I5j4NqFhF2rAMbAC/YWnW1kffT3aR2xV2Mbg=
Subject key identifier:   DE:46:7B:43:58:E2:C1:A1:CB:C6:F2:E9:CF:8C:BD:86:9E:2E:83:AB
Certificate issuer:       /CN=2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099
Certificate serial:       2040663902E6E930917C55CDE9AFFEF1FA840EAC
Authority key identifier: 2E:3C:6F:2B:CA:06:ED:36:CA:44:93:8E:BA:E0:FD:E5:FE:7B:90:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
Signing time:             Fri 20 Feb 2026 18:28:47 +0000
ROA not before:           Fri 20 Feb 2026 18:23:47 +0000
ROA not after:            Fri 19 Feb 2027 18:28:47 +0000
asID:                     267669
IP address blocks:        45.224.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.crl
                          rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:66:39:02:e6:e9:30:91:7c:55:cd:e9:af:fe:f1:fa:84:0e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099
        Validity
            Not Before: Feb 20 18:23:47 2026 GMT
            Not After : Feb 19 18:28:47 2027 GMT
        Subject: CN=DE467B4358E2C1A1CBC6F2E9CF8CBD869E2E83AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:15:1d:7b:08:8a:36:bf:a0:89:66:16:3b:
                    18:4b:34:6e:f4:4c:0a:96:51:fd:15:c9:32:2a:0a:
                    4d:9b:57:3d:eb:3d:8a:17:57:42:32:a5:f7:52:51:
                    26:8b:0a:70:6b:19:fb:eb:3c:9c:73:27:29:25:5c:
                    b4:3c:fa:ae:6b:78:3f:61:b6:d1:1c:12:d8:05:54:
                    b7:bf:15:1f:a0:f5:7b:3c:c8:39:3f:bc:d3:c5:1d:
                    39:ae:90:01:49:72:fd:22:77:ed:7e:e6:46:82:72:
                    9d:41:3c:7d:f0:be:dd:56:54:cb:41:9a:e3:e3:d0:
                    1d:80:ad:a2:7f:f9:2d:a9:85:52:f0:62:d8:9c:1e:
                    eb:4f:a3:2c:37:8b:66:df:79:96:82:b9:33:bf:37:
                    da:d5:4a:b3:3a:7c:13:be:eb:54:22:5b:fb:11:ab:
                    94:b7:f4:be:7b:83:24:7b:03:5e:96:c8:e1:bf:bb:
                    a3:fe:a7:c5:1e:8b:b5:5a:0f:bb:57:60:92:3b:aa:
                    63:49:d6:18:ed:62:42:57:5a:27:2f:7b:d6:b8:53:
                    2a:c2:7b:0e:3f:33:8c:d4:6d:6e:35:e9:b7:00:7f:
                    e7:1e:28:a5:70:04:d7:51:be:a5:7c:b5:5c:d8:73:
                    9e:ff:5e:6b:23:f5:5a:93:6a:66:a2:1a:85:09:7b:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:7B:43:58:E2:C1:A1:CB:C6:F2:E9:CF:8C:BD:86:9E:2E:83:AB
            X509v3 Authority Key Identifier:
                keyid:2E:3C:6F:2B:CA:06:ED:36:CA:44:93:8E:BA:E0:FD:E5:FE:7B:90:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:b4:fb:2b:ef:cc:16:06:36:2f:91:90:75:a2:7a:89:1c:
         31:3c:e7:76:1d:3d:a3:b6:f0:f0:b3:37:72:fc:9b:aa:34:ca:
         d9:4e:bd:f2:ed:77:dc:e5:e8:96:4c:a0:64:7a:3b:73:57:ce:
         87:24:0c:30:6c:ab:94:4a:55:71:03:06:78:20:9f:a1:5d:6f:
         33:c2:b5:63:2f:9e:ec:e1:f1:56:52:8b:18:36:4e:09:31:b1:
         a4:30:88:3b:79:5d:99:ba:38:d9:23:c1:87:59:6b:2b:fa:a8:
         fe:e2:3f:0e:9e:fe:de:98:a5:a2:3f:74:b1:eb:4f:fc:04:a2:
         f4:af:c0:4c:3c:5e:82:ae:05:f8:6b:f3:04:d9:68:f3:a6:22:
         0c:ea:46:ed:4b:56:ae:09:c7:fe:dd:20:49:07:29:4e:ca:d0:
         95:72:73:12:88:e9:fd:aa:65:8c:bb:64:60:de:39:85:de:79:
         82:5c:36:79:c1:25:be:7e:5b:d3:99:bf:e8:bc:88:00:5a:0b:
         01:b8:16:45:48:e9:3d:de:97:af:48:b9:d3:c5:28:d9:c7:1e:
         fa:dc:80:ae:fe:80:7d:7d:41:30:f7:dc:28:60:ea:d9:e8:05:
         e1:bc:21:3d:0f:a8:b6:2a:61:c5:81:cb:33:44:0e:5f:68:c7:
         88:b9:d5:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIEBmOQLm6TCRfFXN6a/+8fqEDqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzQzZGMkJDQTA2RUQzNkNBNDQ5MzhFQkFFMEZERTVG
RTdCOTA5OTAeFw0yNjAyMjAxODIzNDdaFw0yNzAyMTkxODI4NDdaMDMxMTAvBgNV
BAMTKERFNDY3QjQzNThFMkMxQTFDQkM2RjJFOUNGOENCRDg2OUUyRTgzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPxUdewiKNr+giWYWOxhLNG70
TAqWUf0VyTIqCk2bVz3rPYoXV0IypfdSUSaLCnBrGfvrPJxzJyklXLQ8+q5reD9h
ttEcEtgFVLe/FR+g9Xs8yDk/vNPFHTmukAFJcv0id+1+5kaCcp1BPH3wvt1WVMtB
muPj0B2AraJ/+S2phVLwYticHutPoyw3i2bfeZaCuTO/N9rVSrM6fBO+61QiW/sR
q5S39L57gyR7A16WyOG/u6P+p8Uei7VaD7tXYJI7qmNJ1hjtYkJXWicve9a4UyrC
ew4/M4zUbW416bcAf+ceKKVwBNdRvqV8tVzYc57/Xmsj9VqTamaiGoUJe9jfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3kZ7Q1jiwaHLxvLpz4y9hp4ug6swHwYDVR0j
BBgwFoAULjxvK8oG7TbKRJOOuuD95f57kJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3NCNlk1OWNpWUoyOHFaZWYzN1hDYkpqZDVxcWdwdFFSd3hrdUR3Mnpp
b3UvMC8yRTNDNkYyQkNBMDZFRDM2Q0E0NDkzOEVCQUUwRkRFNUZFN0I5MDk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFM0M2RjJCQ0EwNkVEMzZD
QTQ0OTM4RUJBRTBGREU1RkU3QjkwOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NzQjZZNTljaVlKMjhxWmVmMzdYQ2JKamQ1cXFncHRRUnd4a3VEdzJ6aW91LzAv
MzQzNTJlMzIzMjM0MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4MAwDQYJKoZIhvcNAQELBQADggEBAHDPtPsr
78wWBjYvkZB1onqJHDE853YdPaO28PCzN3L8m6o0ytlOvfLtd9zl6JZMoGR6O3NX
zockDDBsq5RKVXEDBnggn6FdbzPCtWMvnuzh8VZSixg2TgkxsaQwiDt5XZm6ONkj
wYdZayv6qP7iPw6e/t6YpaI/dLHrT/wEovSvwEw8XoKuBfhr8wTZaPOmIgzqRu1L
Vq4Jx/7dIEkHKU7K0JVycxKI6f2qZYy7ZGDeOYXeeYJcNnnBJb5+W9OZv+i8iABa
CwG4FkVI6T3el69IudPFKNnHHvrcgK7+gH19QTD33Chg6tnoBeG8IT0PqLYqYcWB
yzNEDl9ox4i51RQ=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:53:06 2026 by rpki-client