Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
File:                     3138312e3231332e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          7Q9sdq1h/pXUsIbTxhkWMKdrqINcc77pxYEEbrSufs8=
Subject key identifier:   8F:57:79:AC:6A:E7:B1:AC:26:65:A4:41:ED:48:79:CE:E1:02:95:CF
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2A855E16E4AB56DABEA2B8A39D6EA89320230DBF
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     28573
IP address blocks:        181.213.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:85:5e:16:e4:ab:56:da:be:a2:b8:a3:9d:6e:a8:93:20:23:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject: CN=3082010A0282010100E0CB772A7768348C2C293DB53292A76E092326181FE73D2A75AF8D980ECA76D3660ACE7474FF440D4B408B888246EF28E4E0800B0D338F7323C4575EE6A0CF6673AB87B269D8CC8E9CEA3261C6DDD7F0B013E336AA2A63C23DA4209095C430B6008C05465865296BD2C6551F903B09E3079F14007B467DB5659BC478A9059851C37AFA20B5FF82936C447A6EF06ED9BFC697E27F2475FDB8A5934E939688C0F879CA7E569B5366C4D9632B390F3F37BE91F63F1420F74E1E5D4CD5610CC35B68EFBF858082FA06B2D4A071F9BB04C5B9D9C43C8741CBB3B4F7A45FC59312829B2127A664C8ABBDEE527DE38EF7DAE9CED918DA20CA1E3EB58F7B4D0F7C7F27AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:77:2a:77:68:34:8c:2c:29:3d:b5:32:92:
                    a7:6e:09:23:26:18:1f:e7:3d:2a:75:af:8d:98:0e:
                    ca:76:d3:66:0a:ce:74:74:ff:44:0d:4b:40:8b:88:
                    82:46:ef:28:e4:e0:80:0b:0d:33:8f:73:23:c4:57:
                    5e:e6:a0:cf:66:73:ab:87:b2:69:d8:cc:8e:9c:ea:
                    32:61:c6:dd:d7:f0:b0:13:e3:36:aa:2a:63:c2:3d:
                    a4:20:90:95:c4:30:b6:00:8c:05:46:58:65:29:6b:
                    d2:c6:55:1f:90:3b:09:e3:07:9f:14:00:7b:46:7d:
                    b5:65:9b:c4:78:a9:05:98:51:c3:7a:fa:20:b5:ff:
                    82:93:6c:44:7a:6e:f0:6e:d9:bf:c6:97:e2:7f:24:
                    75:fd:b8:a5:93:4e:93:96:88:c0:f8:79:ca:7e:56:
                    9b:53:66:c4:d9:63:2b:39:0f:3f:37:be:91:f6:3f:
                    14:20:f7:4e:1e:5d:4c:d5:61:0c:c3:5b:68:ef:bf:
                    85:80:82:fa:06:b2:d4:a0:71:f9:bb:04:c5:b9:d9:
                    c4:3c:87:41:cb:b3:b4:f7:a4:5f:c5:93:12:82:9b:
                    21:27:a6:64:c8:ab:bd:ee:52:7d:e3:8e:f7:da:e9:
                    ce:d9:18:da:20:ca:1e:3e:b5:8f:7b:4d:0f:7c:7f:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:57:79:AC:6A:E7:B1:AC:26:65:A4:41:ED:48:79:CE:E1:02:95:CF
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:af:26:33:2b:e5:e0:5c:00:d0:8d:dc:cd:d6:7b:b4:94:c7:
         62:1b:50:db:b2:b3:03:d8:a3:5e:e9:76:d0:8a:d7:71:a1:9a:
         23:33:82:91:65:66:c5:98:17:a4:72:08:b3:79:57:b7:18:cc:
         ee:f4:cb:d5:7e:bc:8d:e3:ff:44:5d:e3:94:fe:a8:86:24:0e:
         df:49:16:17:b3:72:c2:16:7d:6a:f6:f7:b3:83:ba:71:35:63:
         b2:c5:63:97:9d:f8:e7:10:e9:70:ab:fd:74:e7:b7:e4:50:0c:
         6f:f1:be:53:48:38:e6:b8:38:fe:6b:90:d5:6d:91:41:10:6b:
         a7:83:6a:da:13:ed:25:28:bc:e1:fb:28:76:29:f6:09:59:6e:
         f3:1a:54:4f:59:7e:e1:47:26:6d:30:6d:d7:83:84:01:45:a2:
         dd:95:89:38:3f:ea:35:8e:b8:5d:5c:f1:5c:f0:31:b7:64:8a:
         74:44:34:b4:7b:24:7c:d7:ae:90:1c:9c:a4:86:fb:60:fd:9d:
         18:75:19:24:f2:53:b6:82:49:e8:c7:b5:70:0d:dc:6e:ec:25:
         89:51:b7:9e:a3:58:94:c0:04:a3:86:fc:c9:3b:c7:fb:6e:1a:
         f8:94:53:9f:c9:46:95:b7:13:9d:01:52:90:9d:2c:a0:c1:0a:
         20:a1:a2:3d
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUKoVeFuSrVtq+orijnW6okyAjDb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTBaFw0yNzAyMDMyMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBDQjc3MkE3NzY4MzQ4QzJD
MjkzREI1MzI5MkE3NkUwOTIzMjYxODFGRTczRDJBNzVBRjhEOTgwRUNBNzZEMzY2
MEFDRTc0NzRGRjQ0MEQ0QjQwOEI4ODgyNDZFRjI4RTRFMDgwMEIwRDMzOEY3MzIz
QzQ1NzVFRTZBMENGNjY3M0FCODdCMjY5RDhDQzhFOUNFQTMyNjFDNkRERDdGMEIw
MTNFMzM2QUEyQTYzQzIzREE0MjA5MDk1QzQzMEI2MDA4QzA1NDY1ODY1Mjk2QkQy
QzY1NTFGOTAzQjA5RTMwNzlGMTQwMDdCNDY3REI1NjU5QkM0NzhBOTA1OTg1MUMz
N0FGQTIwQjVGRjgyOTM2QzQ0N0E2RUYwNkVEOUJGQzY5N0UyN0YyNDc1RkRCOEE1
OTM0RTkzOTY4OEMwRjg3OUNBN0U1NjlCNTM2NkM0RDk2MzJCMzkwRjNGMzdCRTkx
RjYzRjE0MjBGNzRFMUU1RDRDRDU2MTBDQzM1QjY4RUZCRjg1ODA4MkZBMDZCMkQ0
QTA3MUY5QkIwNEM1QjlEOUM0M0M4NzQxQ0JCM0I0RjdBNDVGQzU5MzEyODI5QjIx
MjdBNjY0QzhBQkJERUU1MjdERTM4RUY3REFFOUNFRDkxOERBMjBDQTFFM0VCNThG
N0I0RDBGN0M3RjI3QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4Mt3KndoNIwsKT21MpKnbgkjJhgf5z0qda+NmA7KdtNmCs50dP9E
DUtAi4iCRu8o5OCACw0zj3MjxFde5qDPZnOrh7Jp2MyOnOoyYcbd1/CwE+M2qipj
wj2kIJCVxDC2AIwFRlhlKWvSxlUfkDsJ4wefFAB7Rn21ZZvEeKkFmFHDevogtf+C
k2xEem7wbtm/xpfifyR1/bilk06TlojA+HnKflabU2bE2WMrOQ8/N76R9j8UIPdO
Hl1M1WEMw1to77+FgIL6BrLUoHH5uwTFudnEPIdBy7O096RfxZMSgpshJ6ZkyKu9
7lJ944732unO2RjaIMoePrWPe00PfH8nqwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FI9Xeaxq57GsJmWkQe1Iec7hApXPMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzMTJlMzIzMTMzMmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC11TAN
BgkqhkiG9w0BAQsFAAOCAQEABK8mMyvl4FwA0I3czdZ7tJTHYhtQ27KzA9ijXul2
0IrXcaGaIzOCkWVmxZgXpHIIs3lXtxjM7vTL1X68jeP/RF3jlP6ohiQO30kWF7Ny
whZ9avb3s4O6cTVjssVjl5345xDpcKv9dOe35FAMb/G+U0g45rg4/muQ1W2RQRBr
p4Nq2hPtJSi84fsodin2CVlu8xpUT1l+4UcmbTBt14OEAUWi3ZWJOD/qNY64XVzx
XPAxt2SKdEQ0tHskfNeukBycpIb7YP2dGHUZJPJTtoJJ6Me1cA3cbuwliVG3nqNY
lMAEo4b8yTvH+24a+JRTn8lGlbcTnQFSkJ0soMEKIKGiPQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:06 2026 by rpki-client