Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3134332e3133372e3233362e302f32322d3234203d3e20323633363439.roa
File:                     3134332e3133372e3233362e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          Ss+b9JpQmezKMe0a37nOYF1G90ppRXEAYPTIvoOdrxs=
Subject key identifier:   E3:A6:52:42:2A:92:62:03:76:B5:CE:A9:EC:FD:A5:BF:00:FB:7A:E3
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       539DF50EA69DEA03C1CEB38B5464EA424FBAF295
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3134332e3133372e3233362e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 04 Feb 2026 22:00:29 +0000
ROA not before:           Wed 04 Feb 2026 21:55:29 +0000
ROA not after:            Wed 03 Feb 2027 22:00:29 +0000
asID:                     263649
IP address blocks:        143.137.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9d:f5:0e:a6:9d:ea:03:c1:ce:b3:8b:54:64:ea:42:4f:ba:f2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Feb  4 21:55:29 2026 GMT
            Not After : Feb  3 22:00:29 2027 GMT
        Subject: CN=E3A652422A92620376B5CEA9ECFDA5BF00FB7AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:d5:f2:c6:8d:7b:cf:34:10:0a:cd:d2:bc:
                    89:bf:76:ce:9c:19:37:7d:10:f6:47:64:f1:a2:aa:
                    19:fc:77:61:3c:76:c2:e3:60:12:e3:85:5d:7e:73:
                    08:9c:9a:03:04:4d:07:5a:81:94:48:50:b0:c9:31:
                    60:08:4f:99:99:42:ac:c1:85:5e:87:08:bc:30:67:
                    70:43:c9:66:51:15:d5:02:10:ba:e4:20:2a:36:d0:
                    b9:89:01:65:b6:48:cc:97:e7:36:f4:34:29:c9:67:
                    2f:c2:42:dc:f8:aa:92:49:55:18:d8:1a:f5:97:be:
                    72:aa:28:1b:e6:1f:95:41:1b:01:29:7c:7c:77:50:
                    5e:06:38:02:6a:e1:97:76:a0:7e:23:33:a5:70:f8:
                    2f:e1:f1:bc:40:f1:95:fd:cf:81:32:f8:b2:37:cb:
                    d4:d8:47:4a:97:58:fd:78:bf:98:3b:aa:8c:af:23:
                    63:88:5f:3a:a3:dc:56:7c:cc:f9:6d:1f:af:02:0a:
                    32:6d:ff:c3:7f:d0:ab:89:41:26:c2:dc:e9:19:b1:
                    58:54:8e:99:f4:c8:4a:0e:91:11:61:0c:af:4c:79:
                    0b:c8:6c:a0:ba:74:fe:3b:bd:98:3e:31:54:b2:41:
                    07:88:79:0b:d1:dc:4c:6b:38:a3:50:af:0a:25:f3:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:52:42:2A:92:62:03:76:B5:CE:A9:EC:FD:A5:BF:00:FB:7A:E3
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3134332e3133372e3233362e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:4d:7a:02:24:14:db:5a:51:32:3c:b7:45:82:ef:77:c0:
         4e:af:7c:c6:3a:43:61:e5:f4:ab:16:eb:08:a9:29:c6:e7:39:
         17:b1:36:12:09:25:15:68:ab:28:aa:e9:53:16:3c:5d:56:95:
         f9:4b:d9:c0:bd:3c:c6:cb:da:d2:89:ef:57:07:96:56:60:05:
         c4:5f:5d:72:35:51:02:bf:0f:5d:18:49:56:a0:be:6f:1b:9a:
         20:7e:2b:dc:48:0e:4d:06:34:78:60:b7:43:6a:64:18:43:3c:
         bc:61:6d:a7:f0:fd:58:3c:13:86:1b:b9:98:4c:33:0f:a8:80:
         8a:79:e6:ae:b2:06:c8:1e:40:3e:69:56:82:95:d0:b5:06:98:
         e5:7a:37:f0:e6:5e:c9:8f:6b:12:00:13:ee:5f:43:e4:d6:da:
         83:d6:75:ff:4c:df:da:3f:7b:25:ec:db:78:9d:4c:d7:6d:f9:
         33:22:fc:94:fc:82:e2:95:9f:49:5b:ec:19:f3:a2:88:ed:78:
         8c:3e:f5:19:a3:9c:74:14:82:a0:7e:70:6d:fa:6e:59:92:7f:
         f6:83:cc:df:7c:10:db:8a:e7:d0:a3:bf:c3:50:e4:72:fd:6f:
         a9:52:26:15:ee:f9:10:3f:cc:5a:88:ce:ee:37:f0:9f:50:42:
         48:c1:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:32 2026 by rpki-client