Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e38302e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e38302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          vuFv0CchMrbIlSyNLBFVAUI2uVFtqglsrU4RT4I4CKc=
Subject key identifier:   D2:5E:23:21:C4:67:B7:2C:FB:CD:E0:CE:50:AB:8E:02:5C:C3:4D:6B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       23BE4565372C99B565C074D418664C1B5FB0D5D5
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e38302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:18 +0000
ROA not before:           Wed 04 Feb 2026 19:55:18 +0000
ROA not after:            Wed 03 Feb 2027 20:00:18 +0000
asID:                     28573
IP address blocks:        177.80.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:be:45:65:37:2c:99:b5:65:c0:74:d4:18:66:4c:1b:5f:b0:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:18 2026 GMT
            Not After : Feb  3 20:00:18 2027 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:8a:fe:54:ad:8c:ec:fe:37:40:11:1b:51:
                    53:aa:a4:d5:a0:c7:c2:9f:56:5d:f0:92:70:e4:f9:
                    52:88:3b:e2:12:57:da:2f:2f:06:b9:56:44:83:36:
                    b0:18:e8:95:77:4e:e8:67:86:46:33:b3:54:5d:14:
                    a6:4d:94:fe:6f:8b:a7:60:cf:a4:2c:20:2c:78:4f:
                    70:98:ba:17:48:07:1e:d1:61:fc:f1:fe:34:63:0a:
                    1e:49:14:2e:a9:c8:e0:0a:73:be:cc:c1:ee:32:ad:
                    21:93:bc:c6:2f:a5:66:96:a0:ce:52:f7:9f:b7:14:
                    c2:d8:d5:3f:84:3f:78:10:7a:50:3c:f4:40:f6:a7:
                    26:86:fa:67:19:bb:36:32:14:fe:4b:37:5d:ee:a0:
                    5d:82:b6:c2:53:bb:87:fe:d6:11:7c:15:44:71:c0:
                    e9:4f:37:62:a7:f0:2c:fa:b4:ac:8b:4d:fd:f6:19:
                    8e:fb:71:3a:e7:ae:c3:f4:fa:ea:88:e1:20:ff:b3:
                    5a:a2:78:82:af:0b:65:44:57:cd:b3:ec:a7:3d:fc:
                    a4:48:3f:87:a8:da:28:3a:42:63:b9:bc:42:43:de:
                    a6:98:37:da:c6:ca:a4:dc:be:2a:d6:4e:aa:a2:b7:
                    d5:d5:47:72:27:a2:71:73:1c:09:3e:be:9a:01:a4:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5E:23:21:C4:67:B7:2C:FB:CD:E0:CE:50:AB:8E:02:5C:C3:4D:6B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e38302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b4:80:54:e3:9e:ff:b3:af:01:1c:7a:ce:bd:e1:79:09:71:07:
         a3:c5:70:28:c8:d6:2d:32:ed:fa:aa:54:c5:8b:c5:48:f8:66:
         fb:60:e4:8c:9f:7b:37:4e:2c:5d:90:44:69:a2:b8:74:8a:c9:
         9d:c9:74:fa:10:5a:12:26:81:5d:0e:97:67:33:cf:9a:c2:a4:
         8f:fd:c3:7d:3b:ae:55:9b:23:e2:9d:4e:e1:a5:b6:6f:66:92:
         c4:5b:30:64:8c:93:76:26:9e:56:df:7e:c7:4f:02:2f:93:e8:
         29:48:88:b9:1f:f1:6c:3e:d0:4b:bd:af:a2:ca:2b:b5:68:cc:
         c8:2e:9f:82:7b:fe:e8:40:5c:dd:c0:72:27:a9:1c:00:5d:5f:
         a0:a3:78:0a:91:d6:36:0b:81:90:41:8d:92:04:12:53:da:14:
         4c:56:ae:a5:cf:a9:ac:dd:0f:fd:66:f8:4a:76:d4:bd:c3:93:
         0b:3b:88:f7:98:27:2e:b8:01:fa:18:2d:ed:7b:00:a3:43:b6:
         a2:a9:6a:fb:b8:f4:3c:c0:55:7b:f5:04:7f:6d:63:95:0c:e6:
         75:74:66:3c:a3:5f:a9:fd:08:3d:83:20:72:82:56:e9:99:24:
         c3:3a:9c:9e:a2:f5:3c:a4:c1:35:43:3c:00:2a:82:3d:1e:76:
         fa:5f:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:53 2026 by rpki-client