Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
File:                     3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (raw, json)
Hash identifier:          +ODIS3rj5a/W1xNyt4BANN3rh9hpC0w08EOLa1AbDeQ=
Subject key identifier:   0C:60:13:54:B4:DE:31:19:B6:B8:E6:B2:CF:A8:C8:11:FD:29:16:3F
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       51A914D408052AC4D1D8BECEB3EDEC1164CC1448
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
Signing time:             Thu 05 Feb 2026 16:02:29 +0000
ROA not before:           Thu 05 Feb 2026 15:57:29 +0000
ROA not after:            Thu 04 Feb 2027 16:02:29 +0000
asID:                     264042
IP address blocks:        143.137.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 23:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:14:d4:08:05:2a:c4:d1:d8:be:ce:b3:ed:ec:11:64:cc:14:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Feb  5 15:57:29 2026 GMT
            Not After : Feb  4 16:02:29 2027 GMT
        Subject: CN=0C601354B4DE3119B6B8E6B2CFA8C811FD29163F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:f8:a4:f8:dc:f3:67:e9:d0:c6:3f:a0:8c:
                    54:69:f3:36:3f:99:0a:04:fc:11:85:92:98:03:14:
                    c0:0b:fe:59:84:cf:d5:a9:28:2d:f5:cd:29:5d:be:
                    a6:9c:b6:2a:87:b5:37:fe:05:bc:ea:91:44:91:1c:
                    03:5d:aa:d1:04:17:67:26:0d:04:c6:0e:17:e1:ec:
                    b5:61:d3:62:07:8e:6d:8e:52:03:12:bb:39:81:74:
                    0e:5e:c8:9c:e8:7b:1e:c2:12:5f:cf:71:16:7c:03:
                    20:88:a6:36:52:f0:31:72:ae:e0:7b:1b:92:49:66:
                    32:89:b0:b2:22:f7:55:25:df:e9:2b:10:97:ec:ea:
                    0e:fe:59:f6:65:39:95:f5:00:4b:2d:e0:1d:15:ed:
                    8e:31:bb:33:6c:4a:ef:b1:46:5c:86:84:41:21:87:
                    aa:57:14:ca:67:fe:59:14:89:74:d9:35:3c:1b:1f:
                    da:2d:63:53:f3:9d:56:65:3b:4e:a0:aa:3d:d7:8f:
                    5f:52:97:15:13:99:2c:bc:34:51:50:bd:d6:90:bc:
                    42:82:e8:c3:0c:ad:19:89:ea:9d:0e:20:ea:d1:fb:
                    b5:80:74:c8:87:59:cf:d3:45:17:18:d6:68:e5:71:
                    f4:e0:e6:dc:ee:4a:35:04:1d:c0:1d:0c:8a:58:7e:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:13:54:B4:DE:31:19:B6:B8:E6:B2:CF:A8:C8:11:FD:29:16:3F
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:95:00:10:9a:64:3b:38:e0:ee:01:50:32:34:fa:46:b8:
         50:50:02:34:64:06:6b:fe:3b:b3:cf:4c:43:58:69:67:95:d8:
         b6:9c:1a:5b:ff:f7:9d:42:53:93:f9:c0:2c:93:33:c6:36:4e:
         ab:d7:af:6f:ee:aa:af:5b:1a:91:00:33:46:ce:10:3f:2e:f8:
         d6:1c:0d:fa:f0:0d:c3:52:a6:1d:53:ee:83:48:5d:7c:67:f6:
         c5:09:bf:c6:28:30:08:65:7b:6e:9d:23:bb:f4:0e:8a:de:75:
         24:84:70:52:b1:3e:5f:f8:82:17:ba:7e:b8:77:db:2c:d3:93:
         f9:76:9e:8d:ec:ee:5a:5d:f6:93:82:1b:b2:f4:86:43:5c:f5:
         4f:e3:b9:da:50:d5:63:47:94:d6:04:d1:4b:10:20:df:9f:d5:
         65:d7:34:22:86:f5:5a:e4:30:9a:3a:2c:80:e3:a4:3a:65:55:
         78:57:96:96:f2:f0:2a:5e:75:4f:b4:91:35:6d:e3:77:11:48:
         ee:a9:68:e6:17:c0:25:36:54:3d:ba:92:f2:c1:d0:05:36:c3:
         aa:f0:68:38:f8:fb:29:50:98:1f:a0:1c:7e:9b:6e:f6:54:12:
         b9:61:d8:75:31:52:43:f5:29:32:a8:14:e3:4e:4c:c0:47:81:
         3a:ec:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:49 2026 by rpki-client