Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3232302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          cwZABoKm+3oeqQnTL/p3sitCS8WoAhc/ioOrctPvK6M=
Subject key identifier:   AE:7A:52:00:E2:17:54:4D:E7:6C:F1:09:E6:3F:45:9D:3E:A3:3B:9B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       68CFE5A0B500418F26137138E18CB4830058C0DE
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        186.220.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:e5:a0:b5:00:41:8f:26:13:71:38:e1:8c:b4:83:00:58:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:c0:7a:7b:28:61:33:f6:3f:e7:6a:60:bb:
                    39:33:9c:21:7f:0d:ea:26:b0:87:3d:2c:84:04:77:
                    b4:5c:16:0c:aa:ac:ed:08:e1:93:ff:9d:da:93:01:
                    a5:d7:47:e7:7d:b6:dc:1f:88:0a:fd:e8:97:6d:9d:
                    10:cc:31:03:b8:81:44:aa:ea:a8:3d:53:19:60:4f:
                    16:35:d4:2c:31:b9:48:eb:99:f5:85:4a:b3:9f:08:
                    97:92:a4:b3:ac:81:72:2b:7e:f3:73:c4:61:f0:5d:
                    60:2a:12:ba:b6:f8:30:a9:cb:d3:f1:cc:8b:6d:49:
                    b4:66:b4:56:a0:37:ca:95:75:ea:57:72:e6:41:48:
                    cd:fa:3a:27:bd:84:ab:6a:37:78:0b:12:91:cf:aa:
                    b7:52:5c:ee:74:92:00:bb:58:0c:ae:89:6d:bc:3d:
                    2f:ce:ad:b2:35:86:f7:e5:28:3d:ac:fd:9e:89:11:
                    db:9f:90:03:11:74:6a:4d:3b:bd:bc:13:05:19:fd:
                    08:ae:ef:e5:53:cf:7d:84:fe:c3:7e:3b:dd:14:ce:
                    f2:9d:a6:92:6e:b2:5d:94:7c:62:c0:2a:3c:f7:7c:
                    b3:1e:df:9b:60:de:da:99:c6:e2:63:5b:52:ee:fe:
                    94:77:a9:46:a3:5c:1d:68:e0:49:53:01:75:e3:bf:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:52:00:E2:17:54:4D:E7:6C:F1:09:E6:3F:45:9D:3E:A3:3B:9B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         bf:4d:6f:53:dc:89:85:e2:6b:1d:c1:d3:c0:d4:8e:ad:b7:c4:
         46:79:1c:61:20:b9:e3:b9:6d:1d:eb:2c:2c:fc:b6:77:e5:0d:
         a7:f7:f2:0b:06:f8:e3:18:cc:07:67:98:b4:8d:7f:f4:fd:19:
         a0:bb:6e:2b:2d:60:14:23:1e:b8:9c:1e:f2:bb:c0:2c:8c:a7:
         af:bd:48:5e:d9:f8:7a:f0:23:e9:31:c3:fe:6e:a9:68:11:cd:
         f5:6e:9d:25:2a:70:ea:bf:37:55:ec:f3:eb:ce:e7:9a:a6:01:
         42:c6:9a:e1:1d:59:ff:56:c7:cd:d3:9b:9e:79:8e:15:03:6c:
         3f:56:59:d9:d6:69:ae:ba:e6:fb:b5:4f:c0:62:0b:9e:d7:5e:
         9f:e2:a4:b9:4f:0e:20:12:2d:ab:ea:fb:3f:af:88:53:4b:1c:
         9d:48:4d:0d:3d:30:9b:dc:cf:a9:97:f7:05:89:bf:34:3a:33:
         c3:59:a5:69:5b:6b:47:66:21:53:94:26:21:be:f1:80:f8:b5:
         d8:79:8b:21:bb:99:a5:08:8c:b7:7c:1a:2e:40:15:18:c6:f7:
         47:a4:b1:7e:d2:a7:ad:d9:a6:d1:2c:f2:52:52:ef:e6:3a:c7:
         5c:21:21:09:59:b0:7a:d1:d0:45:de:64:58:a7:8d:c0:05:78:
         b0:42:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:08 2026 by rpki-client