Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3132372e302e302f31362d3234203d3e203238353733.roa
File:                     3137372e3132372e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          g34EuiUHUKiAUNRcjcuJyG3SfwaNuiH/rL7DALf4HUY=
Subject key identifier:   2E:66:A8:BF:1B:D4:82:14:7C:65:7A:4B:FA:4E:ED:B5:A7:4C:26:C4
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       122458AC81ADA518271516BD0542988B9828667C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3132372e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        177.127.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:24:58:ac:81:ad:a5:18:27:15:16:bd:05:42:98:8b:98:28:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=3082010A0282010100E16B14C225FF249C1A558508A3CAB438E500D3604316E6173639C7FB64462F890B7791C3EBA3CF8BB49C5AFFC054A07DA02C62B8787C8114FC7DB187DDE8A11BC57763217054B24A1FFF3B84D13FFF0E5FEBDC1963A4B9B610012C0C41D0020A8D15E92F435588EA923480A122E5DB756294B3C57B95F1B00B5771AEADF126CD17B51B8B97E20D1A3200A03CFA4A7392D8DC0488AD51709B2E838284F480AD828932CE61BFD77FAC294AC6C18C481D1041543E082ECF1FC506F87572EA7F165213106180DB34C8932F349A4C3977BF6882F691D90812C91E9B28CB947071F11DADEA5DB575A618299C2F0CE757E77E1B2974B3CE7C7A57CD5C8736EB749D576D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:14:c2:25:ff:24:9c:1a:55:85:08:a3:ca:
                    b4:38:e5:00:d3:60:43:16:e6:17:36:39:c7:fb:64:
                    46:2f:89:0b:77:91:c3:eb:a3:cf:8b:b4:9c:5a:ff:
                    c0:54:a0:7d:a0:2c:62:b8:78:7c:81:14:fc:7d:b1:
                    87:dd:e8:a1:1b:c5:77:63:21:70:54:b2:4a:1f:ff:
                    3b:84:d1:3f:ff:0e:5f:eb:dc:19:63:a4:b9:b6:10:
                    01:2c:0c:41:d0:02:0a:8d:15:e9:2f:43:55:88:ea:
                    92:34:80:a1:22:e5:db:75:62:94:b3:c5:7b:95:f1:
                    b0:0b:57:71:ae:ad:f1:26:cd:17:b5:1b:8b:97:e2:
                    0d:1a:32:00:a0:3c:fa:4a:73:92:d8:dc:04:88:ad:
                    51:70:9b:2e:83:82:84:f4:80:ad:82:89:32:ce:61:
                    bf:d7:7f:ac:29:4a:c6:c1:8c:48:1d:10:41:54:3e:
                    08:2e:cf:1f:c5:06:f8:75:72:ea:7f:16:52:13:10:
                    61:80:db:34:c8:93:2f:34:9a:4c:39:77:bf:68:82:
                    f6:91:d9:08:12:c9:1e:9b:28:cb:94:70:71:f1:1d:
                    ad:ea:5d:b5:75:a6:18:29:9c:2f:0c:e7:57:e7:7e:
                    1b:29:74:b3:ce:7c:7a:57:cd:5c:87:36:eb:74:9d:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:A8:BF:1B:D4:82:14:7C:65:7A:4B:FA:4E:ED:B5:A7:4C:26:C4
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3132372e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:a5:35:49:b9:94:cf:e4:e7:c8:98:55:ca:c7:80:52:fb:
         64:3a:99:f4:96:8e:af:13:3e:ba:5c:c9:97:41:06:48:21:da:
         e1:41:c1:d3:4e:32:ca:d0:cb:3d:a6:a0:b4:55:b9:2b:7d:ad:
         37:6b:27:9d:a8:d8:24:68:2a:1b:3d:72:e9:78:40:be:3a:83:
         eb:c3:ac:8a:79:d4:2c:ec:f1:0e:c4:8c:28:68:15:b9:f4:14:
         85:b6:4f:22:17:2f:f8:b6:10:ab:ac:f1:24:3f:b8:ed:75:ac:
         c6:c1:24:b1:da:a9:af:19:f8:4c:7f:af:bd:11:0e:9e:16:63:
         32:c8:59:30:4d:c2:1a:3c:6d:17:11:01:60:c3:33:f3:6e:18:
         7b:72:78:e4:e7:ee:ef:cc:57:63:dc:b5:ae:2e:50:6e:b6:72:
         bd:65:c9:34:68:7d:e2:dd:41:66:a3:00:ae:08:9a:b4:6f:60:
         fc:df:ff:93:f1:42:f9:f2:52:e2:92:6a:84:bd:4b:dd:50:eb:
         0c:d2:79:c5:9e:30:67:4f:dc:03:73:ca:d8:99:f0:8e:39:00:
         21:a8:f6:bf:0d:06:8e:1c:63:59:11:ad:54:cd:40:b9:b7:40:
         8c:6d:14:f4:9c:b0:8f:a3:21:e3:21:9f:a2:4a:7f:06:be:aa:
         08:52:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:04 2026 by rpki-client