Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3130302e302e302f31362d3234203d3e203238353733.roa
File:                     3137372e3130302e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          +xy88WxbKXlq/rTzPZiaWl1LS/sJAzZxoB3lBWGJZ1M=
Subject key identifier:   76:94:C2:67:3A:6E:D4:F2:67:7F:FA:ED:A7:93:96:F4:02:BC:FB:04
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       720A6AC06CFFD1B6EA7F92795D4D8F0A2010B0A7
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3130302e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     28573
IP address blocks:        177.100.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0a:6a:c0:6c:ff:d1:b6:ea:7f:92:79:5d:4d:8f:0a:20:10:b0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject: CN=3082010A0282010100DC360CCB95FC13DC6055D732E564E2E9DA1C4F7940B2DAF9E7762D074E383DC147DC67A781CE5510D6FB606FBA4018233FE9A8BD77C6837E28E542E56D82C6FD270DB0F29814DFF51D99C9BE1A73F5BA0CB27AB19560EFFB3744914E31FFDC9F51AEC4FCA206DFB956287FFAA982FC5E8F8FE303CD2D99F0B56D6F9C0AFA95DAECB83A8F2182D23C848BA67AB0DA8BDB5FC3E5096223861E337C82E6337CB5045CC492EAC4A013B001EEC2DEEA55CC4B78010F2F49AE8A9E6A0FEC527E53092E2D3CB6285B2121D9B99A69BF5BA8EA378A0E609949447B7355475D5CDFEAFBE7646FE2DD12630D48DD09AFA4FFE9E1B29FAACEA5897C7C4B0FB31F42E5DA62670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:0c:cb:95:fc:13:dc:60:55:d7:32:e5:64:
                    e2:e9:da:1c:4f:79:40:b2:da:f9:e7:76:2d:07:4e:
                    38:3d:c1:47:dc:67:a7:81:ce:55:10:d6:fb:60:6f:
                    ba:40:18:23:3f:e9:a8:bd:77:c6:83:7e:28:e5:42:
                    e5:6d:82:c6:fd:27:0d:b0:f2:98:14:df:f5:1d:99:
                    c9:be:1a:73:f5:ba:0c:b2:7a:b1:95:60:ef:fb:37:
                    44:91:4e:31:ff:dc:9f:51:ae:c4:fc:a2:06:df:b9:
                    56:28:7f:fa:a9:82:fc:5e:8f:8f:e3:03:cd:2d:99:
                    f0:b5:6d:6f:9c:0a:fa:95:da:ec:b8:3a:8f:21:82:
                    d2:3c:84:8b:a6:7a:b0:da:8b:db:5f:c3:e5:09:62:
                    23:86:1e:33:7c:82:e6:33:7c:b5:04:5c:c4:92:ea:
                    c4:a0:13:b0:01:ee:c2:de:ea:55:cc:4b:78:01:0f:
                    2f:49:ae:8a:9e:6a:0f:ec:52:7e:53:09:2e:2d:3c:
                    b6:28:5b:21:21:d9:b9:9a:69:bf:5b:a8:ea:37:8a:
                    0e:60:99:49:44:7b:73:55:47:5d:5c:df:ea:fb:e7:
                    64:6f:e2:dd:12:63:0d:48:dd:09:af:a4:ff:e9:e1:
                    b2:9f:aa:ce:a5:89:7c:7c:4b:0f:b3:1f:42:e5:da:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:C2:67:3A:6E:D4:F2:67:7F:FA:ED:A7:93:96:F4:02:BC:FB:04
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3130302e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:ed:ae:d1:d6:37:d6:c3:2a:55:09:39:0c:de:24:7c:7b:
         32:11:fb:e2:55:37:ef:00:65:70:30:1c:61:d0:7b:d5:fd:03:
         ff:af:05:33:ce:35:20:20:65:47:a2:98:6f:61:85:82:f4:b9:
         b9:63:0e:15:2a:6b:aa:f0:27:7c:5e:55:59:39:f6:dc:cf:66:
         18:1f:b8:e1:ce:c8:5a:a5:60:79:be:8f:44:1e:8b:80:7d:a9:
         ee:e8:b5:87:6b:f3:c4:89:f1:80:b0:fa:cf:20:60:56:c5:02:
         61:a0:96:35:71:1a:cd:99:fd:2c:32:b4:26:7e:d5:b5:36:01:
         66:af:11:f1:3b:d9:3b:59:d3:34:35:83:7a:ad:db:52:cc:93:
         b8:55:b3:a1:54:1b:da:d4:a5:81:87:4f:6e:6b:01:bb:72:b2:
         ee:fa:7d:cf:10:08:93:35:43:a2:f6:66:01:b6:b4:5d:ed:f8:
         9f:ce:26:f4:57:19:1d:2d:be:99:49:d2:8b:78:c2:2f:18:b5:
         bf:74:bc:10:34:1a:84:02:ca:5a:a5:60:fb:62:26:61:5a:8a:
         a1:43:40:2c:6e:88:fe:53:a1:5f:f5:7f:e3:3d:de:81:8f:c2:
         d7:8a:f1:17:8f:f7:d9:7b:e6:1e:11:98:6d:26:38:54:a4:65:
         54:d4:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:49 2026 by rpki-client