Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
File:                     3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (raw, json)
Hash identifier:          dqfh25QxS8RbRh9Z0pFvfixf33QBdpQUemQv4CBe7Kc=
Subject key identifier:   B5:C5:6B:BA:A4:D1:99:05:98:09:47:6F:64:4D:44:2B:39:12:8D:A4
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       059D2CCCBBE2FEC3F7189E7B306756F890947D68
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     270586
IP address blocks:        177.152.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9d:2c:cc:bb:e2:fe:c3:f7:18:9e:7b:30:67:56:f8:90:94:7d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=3082010A0282010100D4C675398A0312E5BA4217DBC9533DE78D3619B5A89ECF84DD1600F6BFB75609656B428BE03100B043C64215154C3194DA0547B0B2C58CE6FE3C0553C32A604B7F5C497BB003344045437147F3841DBB426605CC4286869D539C6ADA89F5226223929CDF1D4F40FF50165A35E4C6E33820C680341DCA0492EF4B848D47EF817A2B09995CDD84ACD02F7181A4B1D22900F944E7722FBD2D8409466E6E75113B3F7B585FCF0CEFDB2F56E71CF7BF17FD0B700B72955CE4EBA04622DBBA5564240FD7AB6715B2A0493EB11E4D903EFA228F6626E3CEC83DB36CAC6F298829081A39D9A23C9D1D7712FC0342D2DCB1011AC395E030859941F07D5B90AD54CCAE32370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:75:39:8a:03:12:e5:ba:42:17:db:c9:53:
                    3d:e7:8d:36:19:b5:a8:9e:cf:84:dd:16:00:f6:bf:
                    b7:56:09:65:6b:42:8b:e0:31:00:b0:43:c6:42:15:
                    15:4c:31:94:da:05:47:b0:b2:c5:8c:e6:fe:3c:05:
                    53:c3:2a:60:4b:7f:5c:49:7b:b0:03:34:40:45:43:
                    71:47:f3:84:1d:bb:42:66:05:cc:42:86:86:9d:53:
                    9c:6a:da:89:f5:22:62:23:92:9c:df:1d:4f:40:ff:
                    50:16:5a:35:e4:c6:e3:38:20:c6:80:34:1d:ca:04:
                    92:ef:4b:84:8d:47:ef:81:7a:2b:09:99:5c:dd:84:
                    ac:d0:2f:71:81:a4:b1:d2:29:00:f9:44:e7:72:2f:
                    bd:2d:84:09:46:6e:6e:75:11:3b:3f:7b:58:5f:cf:
                    0c:ef:db:2f:56:e7:1c:f7:bf:17:fd:0b:70:0b:72:
                    95:5c:e4:eb:a0:46:22:db:ba:55:64:24:0f:d7:ab:
                    67:15:b2:a0:49:3e:b1:1e:4d:90:3e:fa:22:8f:66:
                    26:e3:ce:c8:3d:b3:6c:ac:6f:29:88:29:08:1a:39:
                    d9:a2:3c:9d:1d:77:12:fc:03:42:d2:dc:b1:01:1a:
                    c3:95:e0:30:85:99:41:f0:7d:5b:90:ad:54:cc:ae:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:6B:BA:A4:D1:99:05:98:09:47:6F:64:4D:44:2B:39:12:8D:A4
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:8f:eb:cf:79:e6:70:9a:cb:c4:4d:25:a5:5c:f1:53:74:
         de:9e:a2:a0:ce:b8:8d:ab:cd:cd:e0:e6:00:a2:21:4b:aa:1c:
         75:c7:f3:d6:32:47:8f:2c:c3:2c:36:0a:57:5a:d2:fe:b5:c7:
         5b:f7:4e:0e:c1:2c:72:27:da:54:e5:d2:be:03:a7:59:fb:f1:
         5b:ba:19:6d:e8:e7:ef:10:64:e5:06:af:63:a2:12:b5:c7:49:
         08:10:d0:a6:68:50:e2:39:5c:1e:c4:cd:2f:5f:ab:ba:66:da:
         93:0b:d8:8b:3d:ce:6f:40:71:87:3d:1f:c5:82:af:71:27:f9:
         18:d5:db:2b:73:5e:12:57:b5:e2:bd:af:e6:f5:33:35:06:b6:
         35:28:cc:f4:2f:36:92:c4:db:cb:7b:6c:25:96:4e:0f:87:0b:
         75:e8:40:a1:7c:d2:09:8c:ba:3c:9f:a4:9e:7d:fb:85:b2:9a:
         db:2e:3e:7e:b8:d2:c9:47:59:8d:db:36:c7:b5:c1:80:77:9c:
         8f:eb:45:33:28:c3:46:51:b5:a2:fe:38:28:a4:e4:cf:11:f0:
         88:74:1d:c1:42:71:41:14:b2:87:42:f7:5b:91:a5:3b:c1:aa:
         91:7f:1a:fc:a2:82:0c:d6:c3:f9:65:4b:15:d6:ac:27:c7:98:
         1f:ba:fd:03
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUBZ0szLvi/sP3GJ57MGdW+JCUfWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzNTBEREY2QjhCMzYxQ0Q2ODNFMEZFQjNFQkI1M0Y0
MTcxQTlBNjAeFw0yNjAyMDQxOTU1MDJaFw0yNzAyMDMyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRDNjc1Mzk4QTAzMTJFNUJB
NDIxN0RCQzk1MzNERTc4RDM2MTlCNUE4OUVDRjg0REQxNjAwRjZCRkI3NTYwOTY1
NkI0MjhCRTAzMTAwQjA0M0M2NDIxNTE1NEMzMTk0REEwNTQ3QjBCMkM1OENFNkZF
M0MwNTUzQzMyQTYwNEI3RjVDNDk3QkIwMDMzNDQwNDU0MzcxNDdGMzg0MURCQjQy
NjYwNUNDNDI4Njg2OUQ1MzlDNkFEQTg5RjUyMjYyMjM5MjlDREYxRDRGNDBGRjUw
MTY1QTM1RTRDNkUzMzgyMEM2ODAzNDFEQ0EwNDkyRUY0Qjg0OEQ0N0VGODE3QTJC
MDk5OTVDREQ4NEFDRDAyRjcxODFBNEIxRDIyOTAwRjk0NEU3NzIyRkJEMkQ4NDA5
NDY2RTZFNzUxMTNCM0Y3QjU4NUZDRjBDRUZEQjJGNTZFNzFDRjdCRjE3RkQwQjcw
MEI3Mjk1NUNFNEVCQTA0NjIyREJCQTU1NjQyNDBGRDdBQjY3MTVCMkEwNDkzRUIx
MUU0RDkwM0VGQTIyOEY2NjI2RTNDRUM4M0RCMzZDQUM2RjI5ODgyOTA4MUEzOUQ5
QTIzQzlEMUQ3NzEyRkMwMzQyRDJEQ0IxMDExQUMzOTVFMDMwODU5OTQxRjA3RDVC
OTBBRDU0Q0NBRTMyMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1MZ1OYoDEuW6QhfbyVM95402GbWons+E3RYA9r+3Vglla0KL4DEA
sEPGQhUVTDGU2gVHsLLFjOb+PAVTwypgS39cSXuwAzRARUNxR/OEHbtCZgXMQoaG
nVOcatqJ9SJiI5Kc3x1PQP9QFlo15MbjOCDGgDQdygSS70uEjUfvgXorCZlc3YSs
0C9xgaSx0ikA+UTnci+9LYQJRm5udRE7P3tYX88M79svVucc978X/QtwC3KVXOTr
oEYi27pVZCQP16tnFbKgST6xHk2QPvoij2Ym487IPbNsrG8piCkIGjnZojydHXcS
/ANC0tyxARrDleAwhZlB8H1bkK1UzK4yNwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLXFa7qk0ZkFmAlHb2RNRCs5Eo2kMB8GA1UdIwQYMBaAFOo1Dd9rizYc1oPg/rPr
tT9BcammMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUdLOTh5NjNWN0c1dksx
WDhpck5YRVp1TXZ1VG9YdXNKVVdCTDNIZ1dnNi8xL0VBMzUwRERGNkI4QjM2MUNE
NjgzRTBGRUIzRUJCNTNGNDE3MUE5QTYuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvRUEzNTBEREY2QjhCMzYxQ0Q2ODNFMEZFQjNFQkI1M0Y0MTcxQTlB
Ni5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUdLOTh5NjNWN0c1dksxWDhpck5Y
RVp1TXZ1VG9YdXNKVVdCTDNIZ1dnNi8xLzMxMzczNzJlMzEzNTMyMmUzMTMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzNTM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKx
mGQwDQYJKoZIhvcNAQELBQADggEBAD2kj+vPeeZwmsvETSWlXPFTdN6eoqDOuI2r
zc3g5gCiIUuqHHXH89YyR48swyw2Clda0v61x1v3Tg7BLHIn2lTl0r4Dp1n78Vu6
GW3o5+8QZOUGr2OiErXHSQgQ0KZoUOI5XB7EzS9fq7pm2pML2Is9zm9AcYc9H8WC
r3En+RjV2ytzXhJXteK9r+b1MzUGtjUozPQvNpLE28t7bCWWTg+HC3XoQKF80gmM
ujyfpJ59+4WymtsuPn640slHWY3bNse1wYB3nI/rRTMow0ZRtaL+OCik5M8R8Ih0
HcFCcUEUsodC91uRpTvBqpF/GvyiggzWw/llSxXWrCfHmB+6/QM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:04 2026 by rpki-client