Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3230342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          q3nOPxPDF1iX7UpmgQLxGTkEvZd3QdaU+WDQaPqpB04=
Subject key identifier:   12:63:2D:83:1B:1D:5A:1A:05:2C:B3:52:A1:AA:03:AB:2D:20:FD:54
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4D27C13785538CF2CF2DD3AE827BC98169DBBF68
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        186.204.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:27:c1:37:85:53:8c:f2:cf:2d:d3:ae:82:7b:c9:81:69:db:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=3082010A0282010100CEF28891A18A762AE4BAD6D55ECE3CF8593CDD7E1394A54DE5FD926C8CA51C6B441C997F7EC01A525D61B71987E46903898C99EEBFB552ACA26B2ECB29DBE892023E3AA34A304F3A6BD6FC9ED9DB34BC5ECFCC36A78AAAA298149D31CED82A40D396E308C8785A8E34EC5DF654231F891FDFD6246DED6DB294E31E661F0CD5D3FE7F410F69C879CE7387949990E15B740C966671886DDBBB8F15AB0DCED047F5D04B0FE087179988CFE1849B510728D4762AB073AF09CD378AB3E525FC6F0C1D7BEA22C6FB04BDF0805D06A0A68C8FB498CDAAE77DA6778BC60C7AB328EA2AED4D7B29FF163726F949C41D6A5668B10A10E865CF1B68FAEA3E7790CB5E570F4B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:88:91:a1:8a:76:2a:e4:ba:d6:d5:5e:ce:
                    3c:f8:59:3c:dd:7e:13:94:a5:4d:e5:fd:92:6c:8c:
                    a5:1c:6b:44:1c:99:7f:7e:c0:1a:52:5d:61:b7:19:
                    87:e4:69:03:89:8c:99:ee:bf:b5:52:ac:a2:6b:2e:
                    cb:29:db:e8:92:02:3e:3a:a3:4a:30:4f:3a:6b:d6:
                    fc:9e:d9:db:34:bc:5e:cf:cc:36:a7:8a:aa:a2:98:
                    14:9d:31:ce:d8:2a:40:d3:96:e3:08:c8:78:5a:8e:
                    34:ec:5d:f6:54:23:1f:89:1f:df:d6:24:6d:ed:6d:
                    b2:94:e3:1e:66:1f:0c:d5:d3:fe:7f:41:0f:69:c8:
                    79:ce:73:87:94:99:90:e1:5b:74:0c:96:66:71:88:
                    6d:db:bb:8f:15:ab:0d:ce:d0:47:f5:d0:4b:0f:e0:
                    87:17:99:88:cf:e1:84:9b:51:07:28:d4:76:2a:b0:
                    73:af:09:cd:37:8a:b3:e5:25:fc:6f:0c:1d:7b:ea:
                    22:c6:fb:04:bd:f0:80:5d:06:a0:a6:8c:8f:b4:98:
                    cd:aa:e7:7d:a6:77:8b:c6:0c:7a:b3:28:ea:2a:ed:
                    4d:7b:29:ff:16:37:26:f9:49:c4:1d:6a:56:68:b1:
                    0a:10:e8:65:cf:1b:68:fa:ea:3e:77:90:cb:5e:57:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:2D:83:1B:1D:5A:1A:05:2C:B3:52:A1:AA:03:AB:2D:20:FD:54
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:86:63:e3:a7:9d:6f:58:a0:f8:78:f7:7e:40:23:43:77:
         eb:a2:7a:f2:10:4b:c8:95:52:7a:77:ca:6b:ec:2b:ed:9f:29:
         0a:21:b5:56:c7:29:6c:cb:cb:28:bf:c0:35:4d:17:97:4e:32:
         0c:e6:32:b8:d5:58:74:03:2b:a4:2c:45:6c:0c:b7:43:ba:0e:
         84:b4:1e:09:31:de:51:cc:ee:d0:03:d0:fa:c3:3f:53:58:cf:
         6f:de:4f:1f:c8:6e:61:87:b6:ea:0e:97:fc:e0:e3:19:a6:fd:
         9e:7f:fe:bd:d8:81:41:b4:79:f0:7f:88:c1:7e:dd:ad:b6:8a:
         10:41:f9:19:8f:bf:d0:40:9d:67:0e:33:77:1c:4d:8e:65:a5:
         a4:31:6e:1c:d9:78:6b:05:0b:a1:79:d1:43:af:33:a6:aa:54:
         7e:21:51:5c:ff:6c:83:7c:1d:40:28:5c:8a:96:61:ff:fe:93:
         43:4a:8c:7b:7a:af:4d:f3:80:08:26:64:40:76:e3:75:ec:98:
         79:ab:69:c1:db:27:96:52:34:87:41:3b:b2:35:c2:df:06:53:
         99:62:35:0f:6e:2b:ca:36:a6:2a:58:fc:b7:fc:d1:fb:7f:49:
         6c:e8:a1:20:ba:e8:3c:04:f1:17:a9:20:11:64:93:80:45:e9:
         bd:f0:be:b9
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUTSfBN4VTjPLPLdOugnvJgWnbv2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTZaFw0yNzAyMDMyMDAwMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VGMjg4OTFBMThBNzYyQUU0
QkFENkQ1NUVDRTNDRjg1OTNDREQ3RTEzOTRBNTRERTVGRDkyNkM4Q0E1MUM2QjQ0
MUM5OTdGN0VDMDFBNTI1RDYxQjcxOTg3RTQ2OTAzODk4Qzk5RUVCRkI1NTJBQ0Ey
NkIyRUNCMjlEQkU4OTIwMjNFM0FBMzRBMzA0RjNBNkJENkZDOUVEOURCMzRCQzVF
Q0ZDQzM2QTc4QUFBQTI5ODE0OUQzMUNFRDgyQTQwRDM5NkUzMDhDODc4NUE4RTM0
RUM1REY2NTQyMzFGODkxRkRGRDYyNDZERUQ2REIyOTRFMzFFNjYxRjBDRDVEM0ZF
N0Y0MTBGNjlDODc5Q0U3Mzg3OTQ5OTkwRTE1Qjc0MEM5NjY2NzE4ODZEREJCQjhG
MTVBQjBEQ0VEMDQ3RjVEMDRCMEZFMDg3MTc5OTg4Q0ZFMTg0OUI1MTA3MjhENDc2
MkFCMDczQUYwOUNEMzc4QUIzRTUyNUZDNkYwQzFEN0JFQTIyQzZGQjA0QkRGMDgw
NUQwNkEwQTY4QzhGQjQ5OENEQUFFNzdEQTY3NzhCQzYwQzdBQjMyOEVBMkFFRDRE
N0IyOUZGMTYzNzI2Rjk0OUM0MUQ2QTU2NjhCMTBBMTBFODY1Q0YxQjY4RkFFQTNF
Nzc5MENCNUU1NzBGNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzvKIkaGKdirkutbVXs48+Fk83X4TlKVN5f2SbIylHGtEHJl/fsAa
Ul1htxmH5GkDiYyZ7r+1Uqyiay7LKdvokgI+OqNKME86a9b8ntnbNLxez8w2p4qq
opgUnTHO2CpA05bjCMh4Wo407F32VCMfiR/f1iRt7W2ylOMeZh8M1dP+f0EPach5
znOHlJmQ4Vt0DJZmcYht27uPFasNztBH9dBLD+CHF5mIz+GEm1EHKNR2KrBzrwnN
N4qz5SX8bwwde+oixvsEvfCAXQagpoyPtJjNqud9pneLxgx6syjqKu1Neyn/Fjcm
+UnEHWpWaLEKEOhlzxto+uo+d5DLXlcPSwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FBJjLYMbHVoaBSyzUqGqA6stIP1UMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNjJlMzIzMDM0MmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK6zDAN
BgkqhkiG9w0BAQsFAAOCAQEAKOOGY+OnnW9YoPh4935AI0N366J68hBLyJVSenfK
a+wr7Z8pCiG1VscpbMvLKL/ANU0Xl04yDOYyuNVYdAMrpCxFbAy3Q7oOhLQeCTHe
Uczu0APQ+sM/U1jPb95PH8huYYe26g6X/ODjGab9nn/+vdiBQbR58H+IwX7drbaK
EEH5GY+/0ECdZw4zdxxNjmWlpDFuHNl4awULoXnRQ68zpqpUfiFRXP9sg3wdQChc
ipZh//6TQ0qMe3qvTfOACCZkQHbjdeyYeatpwdsnllI0h0E7sjXC3wZTmWI1D24r
yjamKlj8t/zR+39JbOihILroPATxF6kgEWSTgEXpvfC+uQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:51 2026 by rpki-client