Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa
File:                     3137372e3233352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          eF888BMddhJGg+CdmS5OF2neN6N2FI81W255oy6XLJM=
Subject key identifier:   CB:A2:F1:48:3A:92:C4:2F:D6:44:B7:A5:02:03:3B:AE:8B:18:92:93
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       07EBBF420255C169BAEAA5EE096CC0876183D155
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     28573
IP address blocks:        177.235.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:eb:bf:42:02:55:c1:69:ba:ea:a5:ee:09:6c:c0:87:61:83:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:80:58:27:31:b9:03:3e:a8:2a:51:6f:c5:
                    3b:0e:5e:54:ee:99:a1:50:56:da:16:71:a6:b2:84:
                    42:41:43:03:96:0f:5b:88:ac:8f:12:d3:63:30:b8:
                    04:80:07:93:a5:eb:61:3f:7f:77:04:fe:80:71:19:
                    01:6b:3a:25:5d:9f:ad:a7:87:94:bc:e8:b0:54:3a:
                    eb:55:30:b6:3a:c2:fa:97:ea:b2:10:ae:19:0f:c3:
                    d2:7f:ca:4b:94:c4:62:d4:6f:40:fb:bc:a8:97:2c:
                    b3:fb:f4:c1:9e:8c:aa:69:44:15:05:29:62:c5:b4:
                    fe:f2:7c:c8:ec:44:1e:16:e7:8e:55:73:8c:69:cc:
                    bd:ff:d0:98:7a:3e:de:dc:2f:78:b0:61:f4:d5:6e:
                    cc:eb:7f:0f:ac:49:fa:7a:68:4f:8a:e1:dd:8e:22:
                    cf:80:40:47:af:b8:30:48:69:a7:7e:ef:3d:1c:f0:
                    66:1f:d2:cf:94:40:b1:ce:de:8e:17:97:65:c1:74:
                    f4:2e:10:07:9f:a0:69:df:64:1a:04:74:40:cb:44:
                    a0:13:ed:0f:bf:50:54:4e:54:c4:d9:a4:dd:41:3d:
                    c0:86:cc:9d:39:5d:f4:ed:d4:c2:d5:90:34:ef:b2:
                    d5:d0:42:d2:79:13:c9:72:d6:3a:25:68:b4:1d:f5:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:F1:48:3A:92:C4:2F:D6:44:B7:A5:02:03:3B:AE:8B:18:92:93
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.235.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:33:11:30:da:c7:22:7f:4f:9c:cc:43:85:a5:07:b0:4f:
         45:26:8a:a2:4a:27:93:7c:6c:bb:49:4b:7e:65:f9:88:3f:a5:
         52:da:f8:98:75:c2:c7:69:e9:72:ed:09:26:b0:be:59:d0:db:
         f5:59:1e:5f:68:b9:8d:64:4c:96:db:9f:bc:af:a3:25:fa:5b:
         63:5f:2b:8a:70:4b:b3:09:54:29:f0:2a:94:73:6d:1e:c3:ca:
         1b:2c:2d:42:8b:21:dd:0e:39:a1:a5:b4:63:af:53:2c:d7:c7:
         50:16:ee:87:be:16:0a:89:9e:c0:50:58:b1:f0:c0:ac:e8:82:
         7a:1f:57:31:ea:0d:c7:f8:94:81:26:4c:99:4e:ae:99:78:47:
         45:7d:89:d1:78:6a:9d:69:10:e3:39:98:4d:e0:3c:83:86:1f:
         1c:cd:7f:5c:46:e3:47:81:93:4d:73:2d:f1:29:05:69:8e:b4:
         27:08:87:1c:5c:ad:08:e5:3e:a7:d3:c4:24:ab:fd:7b:16:b4:
         03:a5:43:89:10:fe:88:a9:58:18:3e:7b:7c:7f:aa:fc:a7:72:
         23:5c:96:87:3a:ae:36:af:d8:d7:e2:d2:f3:3f:af:d2:a2:1f:
         a8:28:d5:c1:9f:f8:2a:ea:7d:0e:99:dc:4e:56:69:b3:74:85:
         09:0e:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:07 2026 by rpki-client