Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa
File:                     3137392e3133362e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          rxz1FJObdnJzj6xoToCjL2pLQ+OsvRcWXdDqrnvsBZc=
Subject key identifier:   A2:C8:45:C5:17:7E:DB:B2:AC:C9:A6:8B:AD:7A:9B:19:3E:93:0D:04
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       72D183F3576DF4CB01AC585A623213AC027DE7CB
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa
Signing time:             Tue 17 Feb 2026 14:00:00 +0000
ROA not before:           Tue 17 Feb 2026 13:55:00 +0000
ROA not after:            Tue 16 Feb 2027 14:00:00 +0000
asID:                     28573
IP address blocks:        179.136.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d1:83:f3:57:6d:f4:cb:01:ac:58:5a:62:32:13:ac:02:7d:e7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb 17 13:55:00 2026 GMT
            Not After : Feb 16 14:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:1f:11:bf:71:c7:41:b7:23:81:56:f3:bd:
                    2d:87:da:5e:24:75:dd:fa:d5:00:2d:9c:81:f6:47:
                    71:a2:9f:82:ec:59:a0:4f:18:e5:d8:65:a8:24:ff:
                    8c:c0:d0:fd:3f:34:3c:18:67:dc:d4:61:29:ad:f1:
                    15:7f:5f:48:2b:69:03:03:1b:7c:72:98:f4:d3:51:
                    e2:de:99:3a:37:bb:6a:4c:56:ea:e4:9e:44:ab:85:
                    d9:21:75:a6:62:5e:1f:c8:0e:b4:71:f0:dd:95:59:
                    2d:bc:91:b1:9d:c5:3c:59:bb:bc:c8:89:a2:79:9d:
                    13:2b:cb:a4:8c:8d:68:75:7d:0c:3f:c2:09:c6:e5:
                    86:1b:5d:16:1a:f0:6b:19:04:59:19:be:f2:49:6e:
                    af:7b:fa:70:70:9f:65:b7:94:61:e2:e3:de:b0:41:
                    55:b5:5d:76:4a:72:8d:bc:7c:d0:e7:eb:98:6b:9e:
                    45:53:94:f5:1c:ef:b5:27:24:6a:d8:7d:77:ce:13:
                    b3:20:49:65:4b:3d:1c:cc:7b:d5:82:ca:70:3d:ab:
                    71:cc:c7:7b:62:86:82:d3:f5:4b:7d:c9:9e:6f:3a:
                    ac:f6:cf:62:c8:77:b3:db:46:d3:34:46:d1:d7:13:
                    36:e7:68:c6:a5:e0:69:38:d2:77:40:a2:fd:fe:22:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:45:C5:17:7E:DB:B2:AC:C9:A6:8B:AD:7A:9B:19:3E:93:0D:04
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.136.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         05:17:2c:09:32:30:70:b1:1c:61:95:47:7e:b4:77:f3:73:57:
         31:ee:71:c9:71:b6:52:89:7d:97:69:44:51:43:34:82:05:ee:
         6f:eb:a0:26:ad:9f:85:7b:8f:2e:83:77:59:6f:db:90:f8:4b:
         9a:63:de:d2:21:d3:19:43:d7:63:77:a2:82:e2:cb:cd:54:80:
         ec:07:ac:5b:aa:23:5d:50:c7:dd:43:24:8f:37:00:60:cc:4d:
         56:6e:73:54:90:88:99:c8:3e:c5:51:b2:ae:60:d1:81:d6:a7:
         b9:59:16:01:2c:cc:0d:f2:81:e2:64:ed:3d:e1:0a:35:37:f7:
         80:7d:10:87:84:14:41:1a:de:20:cf:4a:39:ef:c3:d6:93:cb:
         a6:28:a5:66:f6:28:b3:cc:bb:c5:ab:95:27:9a:e2:1f:26:87:
         2f:17:ff:b0:a2:f6:4e:09:98:f4:64:be:04:40:b7:7e:ef:db:
         4b:e9:4d:e7:4b:db:90:7c:3f:97:b1:49:61:47:e8:34:4b:c3:
         7d:e1:76:4d:fb:33:dd:0d:64:b0:dd:da:cb:3d:2e:aa:11:08:
         62:a7:e9:fe:20:07:e3:f6:af:db:66:ac:c5:72:00:ea:9e:32:
         c1:f1:65:29:68:b3:d6:4b:68:61:5f:df:3c:1b:dc:7f:2d:87:
         30:cd:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:00 2026 by rpki-client