Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
File:                     3137392e3130352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          tfnVFX8CpIiUN+VYmyVCaBQ4h9QiGvF2zq8Xloj2mtw=
Subject key identifier:   04:AE:08:C5:53:38:EA:28:D1:79:1E:64:1B:A6:FC:4D:52:62:BB:90
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2ECFB309FBC202A16492A0DE3697C6B5F90742C9
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     28573
IP address blocks:        179.105.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cf:b3:09:fb:c2:02:a1:64:92:a0:de:36:97:c6:b5:f9:07:42:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7d:fa:3a:b6:12:f2:f7:26:24:35:39:33:09:
                    60:c2:20:7c:f7:da:04:97:de:ee:6d:87:e2:bc:8d:
                    66:32:e4:96:0f:84:97:40:a9:95:c6:17:15:f7:b5:
                    81:13:fc:98:da:b3:07:74:28:ed:53:8b:1e:9d:eb:
                    6c:32:b1:b1:20:7f:58:51:56:a7:cb:21:3d:1d:ba:
                    e6:6c:08:d2:c7:5e:b2:01:5b:cb:d9:d4:b4:18:ac:
                    d6:ad:c4:27:e4:10:18:4c:85:60:c9:9b:95:4c:c4:
                    5e:77:49:2b:ef:99:7b:a5:1f:ce:c7:b2:4e:1c:5f:
                    f3:01:1d:b1:ab:67:e9:d5:3c:07:81:a6:ec:d1:a6:
                    1f:e5:0c:7e:25:c7:a3:c2:76:7b:87:6f:a9:95:66:
                    61:b9:4b:c7:6d:7e:1d:d9:53:03:65:e0:6c:10:6a:
                    04:4c:7a:5b:ed:a8:00:13:ca:b9:da:1e:de:bb:5a:
                    d6:9a:7e:32:4d:ee:3d:38:e5:73:89:70:85:6b:ef:
                    5a:02:e3:3f:2e:4e:44:fb:3b:fe:e9:29:8b:e9:bb:
                    26:b4:66:56:5f:e3:db:29:03:e8:fc:84:94:16:8e:
                    79:37:95:c1:9f:dc:11:33:77:51:3b:73:42:74:62:
                    1e:7d:b5:bf:7a:88:d6:92:d7:30:a0:17:c3:47:a9:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:08:C5:53:38:EA:28:D1:79:1E:64:1B:A6:FC:4D:52:62:BB:90
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:b7:2c:42:e1:28:d8:9a:34:3a:6d:96:c2:0b:0f:21:05:
         f0:ca:4c:e5:d0:04:bd:dd:e5:36:a1:91:53:51:c8:ca:19:c1:
         33:5e:8c:bd:ec:40:af:4d:fc:ae:5b:2a:ee:cf:ee:63:d0:ca:
         b9:e4:bf:7e:56:3b:3b:09:34:e8:5f:29:61:03:0b:8c:d0:6e:
         a1:26:13:93:97:a9:6b:d1:69:53:b8:2c:00:77:59:7b:a0:63:
         68:1a:0a:e6:b8:c9:87:47:66:dd:ce:76:99:5c:08:90:61:62:
         f8:f0:8b:0a:84:14:de:94:8d:ad:2e:b7:1e:da:1b:33:3d:46:
         54:d6:ea:f4:79:de:2c:92:ab:5d:9a:3b:da:ac:0e:9a:df:a0:
         fc:97:47:5d:0b:90:f4:31:b7:03:f0:2e:d3:d1:6c:2e:db:b8:
         e1:08:5c:c7:b3:3d:15:f9:7b:e1:84:60:e6:5a:06:35:4e:ad:
         86:5e:0d:4d:4e:3b:f6:4a:5a:0c:64:52:ae:06:d8:33:58:52:
         60:04:5f:7c:cd:cb:40:33:00:1f:cf:5b:d4:67:ae:fe:cf:75:
         fb:03:40:b0:0d:fc:20:5c:cb:00:a4:ee:3c:ce:1a:a2:c2:08:
         c8:95:ed:0b:22:20:b7:65:e3:4f:07:53:0e:69:f6:67:ff:17:
         46:60:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:03 2026 by rpki-client