Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3130342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          sHkDiWavQqVwUHqAdWWbdZpTJvf8CPHFg+dikt1Pz9E=
Subject key identifier:   B0:88:29:F5:44:B7:AE:9F:88:90:58:44:85:91:CD:45:1A:EC:51:28
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       319DC7DBC9FF0F5C82251742E4FBBA07EC0A563F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     28573
IP address blocks:        187.104.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9d:c7:db:c9:ff:0f:5c:82:25:17:42:e4:fb:ba:07:ec:0a:56:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:a1:44:0d:12:86:6d:b4:fb:b1:14:85:67:
                    06:ff:93:e6:c0:9d:83:53:ee:73:50:bb:51:f7:1d:
                    c3:96:c7:ed:25:19:06:89:7a:a2:aa:13:a2:f6:c0:
                    cd:5a:e4:62:84:f1:da:34:50:17:2a:c7:0b:a9:7c:
                    15:f6:8f:d8:6d:25:04:4e:94:42:7f:d5:8a:89:27:
                    0e:e1:20:21:c5:32:3d:7a:38:e6:d9:5f:2c:d4:f7:
                    2b:22:7a:47:56:86:bf:f3:34:92:a3:51:41:d6:ce:
                    ba:7e:84:66:9c:fc:34:8c:d3:a1:1f:ac:6f:b9:14:
                    b4:a6:e4:30:ac:0d:21:a0:1a:7a:db:13:a2:3f:d2:
                    c1:f7:e2:ed:62:22:df:0a:71:10:2b:b1:e2:11:94:
                    81:6c:b5:8c:90:41:0b:26:17:46:3b:6b:ce:1f:b8:
                    82:73:b6:40:4d:d9:66:19:16:e0:a7:01:13:5c:49:
                    7e:94:00:57:c2:20:db:83:73:8a:15:9c:80:e9:82:
                    d9:bd:6f:91:62:f5:25:e6:2d:3d:fd:7e:0e:ef:79:
                    b2:42:7d:77:1b:09:92:d2:b9:91:79:c3:55:a3:33:
                    49:d0:ae:11:cf:37:a2:67:03:a1:fa:07:16:02:37:
                    37:89:59:f2:15:c0:f6:a5:9a:64:9e:7d:0f:31:16:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:29:F5:44:B7:AE:9F:88:90:58:44:85:91:CD:45:1A:EC:51:28
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c4:0a:b4:ac:ab:66:e3:60:d6:ff:da:1e:a5:74:23:05:4a:31:
         f1:98:84:77:e8:10:d4:d8:fd:c8:6c:68:57:fc:8b:5a:ad:5a:
         60:18:7d:0b:80:f3:59:a8:ae:29:fb:98:5e:e2:f7:94:e9:20:
         bc:70:06:bd:bb:d3:99:30:1f:2c:61:4e:a3:ad:42:69:d8:b1:
         84:95:17:41:66:19:30:2a:b2:aa:f4:f1:98:d2:48:7a:6a:ee:
         cc:79:99:11:9e:b3:ef:85:85:6f:4d:61:fc:f8:a6:fb:bd:c3:
         65:d2:3c:5b:45:5d:bc:dd:47:d9:82:f2:f4:31:6d:e4:43:e7:
         af:71:4d:b9:da:56:a1:ec:53:8c:84:53:bf:40:a9:66:4e:e6:
         30:10:38:48:46:87:6c:4e:2b:32:e3:92:c1:e6:be:85:f1:4e:
         02:0b:2b:73:65:83:fb:fa:6c:82:9b:2e:21:26:61:b3:4b:e5:
         45:ff:40:6c:7f:5b:37:b7:10:86:00:a0:24:a5:d5:e7:1b:4e:
         19:81:74:d5:47:34:59:d4:96:59:f8:40:c4:53:5f:39:8f:df:
         61:fc:2b:c7:93:6a:e5:46:c6:61:23:dc:fe:5e:75:ac:e9:10:
         00:21:90:b3:8e:c2:86:42:23:af:7e:77:78:55:d6:07:62:03:
         fc:a5:84:52
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUMZ3H28n/D1yCJRdC5Pu6B+wKVj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTFaFw0yNzAyMDMyMDAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjE4QkExNDQwRDEyODY2REI0
RkJCMTE0ODU2NzA2RkY5M0U2QzA5RDgzNTNFRTczNTBCQjUxRjcxREMzOTZDN0VE
MjUxOTA2ODk3QUEyQUExM0EyRjZDMENENUFFNDYyODRGMURBMzQ1MDE3MkFDNzBC
QTk3QzE1RjY4RkQ4NkQyNTA0NEU5NDQyN0ZENThBODkyNzBFRTEyMDIxQzUzMjNE
N0EzOEU2RDk1RjJDRDRGNzJCMjI3QTQ3NTY4NkJGRjMzNDkyQTM1MTQxRDZDRUJB
N0U4NDY2OUNGQzM0OENEM0ExMUZBQzZGQjkxNEI0QTZFNDMwQUMwRDIxQTAxQTdB
REIxM0EyM0ZEMkMxRjdFMkVENjIyMkRGMEE3MTEwMkJCMUUyMTE5NDgxNkNCNThD
OTA0MTBCMjYxNzQ2M0I2QkNFMUZCODgyNzNCNjQwNEREOTY2MTkxNkUwQTcwMTEz
NUM0OTdFOTQwMDU3QzIyMERCODM3MzhBMTU5QzgwRTk4MkQ5QkQ2RjkxNjJGNTI1
RTYyRDNERkQ3RTBFRUY3OUIyNDI3RDc3MUIwOTkyRDJCOTkxNzlDMzU1QTMzMzQ5
RDBBRTExQ0YzN0EyNjcwM0ExRkEwNzE2MDIzNzM3ODk1OUYyMTVDMEY2QTU5QTY0
OUU3RDBGMzExNkZDNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsYuhRA0Shm20+7EUhWcG/5PmwJ2DU+5zULtR9x3DlsftJRkGiXqi
qhOi9sDNWuRihPHaNFAXKscLqXwV9o/YbSUETpRCf9WKiScO4SAhxTI9ejjm2V8s
1PcrInpHVoa/8zSSo1FB1s66foRmnPw0jNOhH6xvuRS0puQwrA0hoBp62xOiP9LB
9+LtYiLfCnEQK7HiEZSBbLWMkEELJhdGO2vOH7iCc7ZATdlmGRbgpwETXEl+lABX
wiDbg3OKFZyA6YLZvW+RYvUl5i09/X4O73myQn13GwmS0rmRecNVozNJ0K4Rzzei
ZwOh+gcWAjc3iVnyFcD2pZpknn0PMRb8VQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FLCIKfVEt66fiJBYRIWRzUUa7FEoMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNzJlMzEzMDM0MmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK7aDAN
BgkqhkiG9w0BAQsFAAOCAQEAxAq0rKtm42DW/9oepXQjBUox8ZiEd+gQ1Nj9yGxo
V/yLWq1aYBh9C4DzWaiuKfuYXuL3lOkgvHAGvbvTmTAfLGFOo61CadixhJUXQWYZ
MCqyqvTxmNJIemruzHmZEZ6z74WFb01h/Pim+73DZdI8W0VdvN1H2YLy9DFt5EPn
r3FNudpWoexTjIRTv0CpZk7mMBA4SEaHbE4rMuOSwea+hfFOAgsrc2WD+/psgpsu
ISZhs0vlRf9AbH9bN7cQhgCgJKXV5xtOGYF01Uc0WdSWWfhAxFNfOY/fYfwrx5Nq
5UbGYSPc/l51rOkQACGQs47ChkIjr353eFXWB2ID/KWEUg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:51 2026 by rpki-client