Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa
File:                     3137392e3230382e302e302f31322d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Yt723g3SUoTamlZjQQNCJ7s62ucaOlHaqSItqJKoke4=
Subject key identifier:   D0:C7:53:4B:03:BF:14:CF:78:5E:31:66:E4:0C:97:C9:EC:08:7D:4C
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       067113B0D0DA83CAC7175E63D41E4469F7C06BDF
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        179.208.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:71:13:b0:d0:da:83:ca:c7:17:5e:63:d4:1e:44:69:f7:c0:6b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:9d:30:2a:36:dd:d6:cd:2a:2e:6a:af:ea:
                    9e:ae:7e:6f:e1:66:92:f2:f3:b1:71:e6:6d:d7:92:
                    2e:2f:7e:07:e5:df:5f:8d:f0:5d:20:73:5f:5a:91:
                    0c:da:0e:23:9c:7c:c8:1c:1a:36:57:6e:99:9f:a5:
                    5a:62:1b:7f:4f:65:dd:01:42:39:7b:5c:88:43:23:
                    4a:2c:b2:84:dc:4b:ff:d4:04:d5:7d:c3:04:5a:f5:
                    df:02:b3:83:ca:7c:0a:86:38:42:8a:9e:53:10:14:
                    4a:84:de:c1:05:f1:20:d9:ad:33:d2:79:f6:af:17:
                    b9:3b:b6:12:63:4c:58:58:5d:79:dd:96:bb:2a:7c:
                    06:22:03:14:6c:a6:21:d7:da:d9:e4:72:04:d0:67:
                    b0:9e:1d:88:0d:9e:23:f5:9c:63:b2:87:33:b9:0e:
                    8d:9b:e7:13:37:5f:21:6f:21:7a:a9:51:81:8e:18:
                    55:02:b0:39:98:c9:de:12:4e:86:cd:5c:53:8d:4c:
                    11:9e:cb:96:88:01:c2:43:79:d8:84:85:1c:5c:15:
                    ca:66:7e:de:af:2e:4e:e8:c1:3b:1c:68:53:9f:e5:
                    8e:06:9b:d6:b3:d5:3b:40:8f:2d:26:66:c5:09:aa:
                    b1:29:85:c7:fd:5c:e3:76:ab:3f:4c:d8:87:a7:34:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:53:4B:03:BF:14:CF:78:5E:31:66:E4:0C:97:C9:EC:08:7D:4C
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.208.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:dd:b9:41:fa:dd:02:ca:9f:26:61:19:89:72:d1:a8:c7:
         e9:b4:b9:b7:c3:6e:55:d7:65:62:fa:14:3a:72:98:98:30:ed:
         40:68:3f:52:da:02:a5:26:5f:68:00:b3:95:ef:61:ac:c2:47:
         99:f4:c0:d8:1f:f1:e3:ae:1e:45:aa:df:bb:69:fa:52:17:b2:
         13:fa:17:69:c3:85:7e:26:bc:bc:c5:e2:8b:70:c5:8c:c9:1b:
         69:db:0f:2f:32:f7:0b:31:e2:74:ac:ef:29:55:1e:11:98:33:
         a1:4e:cf:d5:cb:5b:a8:ff:98:be:ed:5c:4a:df:51:55:c1:7e:
         42:b3:33:63:da:d1:9f:b0:d6:9c:05:20:b1:6a:37:13:8a:7c:
         5a:6d:29:11:83:ea:c6:78:2c:25:18:27:83:df:6c:3a:2c:8d:
         3a:62:38:41:13:99:42:0c:bb:d0:50:f4:bb:7a:93:63:26:11:
         d9:7f:8e:53:6a:89:aa:be:aa:25:18:65:6b:f3:ea:e1:43:73:
         a4:3b:1b:5d:ff:69:34:7e:71:ba:b0:83:01:65:6b:73:65:88:
         c0:55:92:2e:b7:c9:15:e1:53:ea:2b:07:e6:05:a0:cd:50:15:
         82:8f:90:b7:4d:d6:ca:0e:e0:e0:a3:94:fc:ed:f5:d8:68:a1:
         f8:f8:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:00 2026 by rpki-client