Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa
File:                     3138372e3132322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          aPcmM+r5y+wBNjDcE7GRNXqwUIJz/Vy66HFbSlXFUMI=
Subject key identifier:   41:F8:29:27:77:87:CA:D6:EE:B2:67:91:B7:36:93:55:D0:D4:02:02
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       047784F8F5141468DEFAE8F783F22FE8942DCB9D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     28573
IP address blocks:        187.122.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:77:84:f8:f5:14:14:68:de:fa:e8:f7:83:f2:2f:e8:94:2d:cb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:79:72:95:ec:a0:4e:f8:6c:1b:f8:5c:72:
                    38:6d:97:58:c6:6c:1a:15:78:5e:25:ab:37:9c:5a:
                    6c:10:f9:c7:87:a8:92:e4:8f:de:cb:d0:76:92:62:
                    48:f9:fe:75:32:9f:00:0f:c9:15:cc:b0:e8:9d:2f:
                    3e:84:c2:2a:78:5c:e4:2a:0e:e6:3a:8a:c2:0d:4d:
                    54:dd:31:74:35:8d:c9:7c:2a:75:39:65:b1:5e:51:
                    75:c1:ac:54:52:17:98:18:7d:95:80:3a:77:35:55:
                    2b:10:02:b0:41:97:a9:8e:6c:cb:4a:ed:9e:0b:8b:
                    7b:26:31:95:2a:ae:9e:1c:74:dc:0a:e0:06:99:f7:
                    c7:07:87:cd:ab:8e:5c:f6:99:7a:09:f1:3f:64:01:
                    a0:30:97:fa:7b:36:36:80:83:15:47:48:f2:0d:0e:
                    8f:6b:4a:12:5d:02:d2:ff:b0:a4:72:52:07:8f:c6:
                    39:92:35:a9:a9:e2:9c:e0:5e:0b:54:69:7d:ac:b1:
                    4f:a4:d0:d9:87:a3:b4:65:79:a1:9b:00:b7:d9:73:
                    5b:ac:3b:3b:ae:4a:09:74:3f:0a:9a:4e:cd:de:7b:
                    2c:a5:c9:70:a8:6b:ba:1d:34:20:5c:97:2a:12:fa:
                    d6:04:1b:44:37:63:6c:cb:c5:c2:52:eb:32:af:21:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:29:27:77:87:CA:D6:EE:B2:67:91:B7:36:93:55:D0:D4:02:02
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:8f:68:f5:f2:71:35:0e:d1:28:7d:f9:d7:1f:59:7b:15:
         71:08:f4:d6:31:11:b5:db:36:63:69:03:b2:4c:d1:97:0b:0a:
         a1:87:f6:8d:ce:a4:09:b5:6b:43:a8:44:80:d0:d2:cf:9a:98:
         bd:4f:61:cc:e6:65:79:b3:a1:23:c6:2e:71:ee:49:01:93:52:
         37:22:15:13:2c:45:e9:1e:f3:c4:51:50:db:68:67:bf:e4:7e:
         7d:a2:57:3f:c5:62:1c:88:47:b7:67:52:b0:cd:f6:8d:93:9c:
         82:56:c1:06:95:26:c6:21:84:15:d9:68:ec:13:31:58:d1:41:
         07:22:d9:85:0b:d1:b1:e7:86:f9:48:bd:cf:1a:e8:fd:a0:17:
         2a:3f:cd:59:e4:ad:07:7e:b2:03:55:41:37:93:8d:b7:85:d2:
         a8:26:77:5f:2a:53:e4:cf:a1:72:1b:e2:84:fb:79:b1:0f:83:
         1b:44:08:98:db:5d:9f:54:42:fe:36:17:11:6c:53:0d:13:73:
         b6:0a:68:7d:7b:f9:f7:77:cb:21:09:68:1c:d2:cf:d8:3f:54:
         30:f7:66:b6:1f:f0:fd:10:44:92:d5:99:85:eb:44:82:ca:e2:
         95:c5:ec:d5:e3:fc:58:f3:d3:09:15:b8:08:0e:07:27:1e:48:
         27:2a:b0:8c
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUBHeE+PUUFGje+uj3g/Iv6JQty50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTNaFw0yNzAyMDMyMDAwMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI0Mjc5NzI5NUVDQTA0RUY4
NkMxQkY4NUM3MjM4NkQ5NzU4QzY2QzFBMTU3ODVFMjVBQjM3OUM1QTZDMTBGOUM3
ODdBODkyRTQ4RkRFQ0JEMDc2OTI2MjQ4RjlGRTc1MzI5RjAwMEZDOTE1Q0NCMEU4
OUQyRjNFODRDMjJBNzg1Q0U0MkEwRUU2M0E4QUMyMEQ0RDU0REQzMTc0MzU4REM5
N0MyQTc1Mzk2NUIxNUU1MTc1QzFBQzU0NTIxNzk4MTg3RDk1ODAzQTc3MzU1NTJC
MTAwMkIwNDE5N0E5OEU2Q0NCNEFFRDlFMEI4QjdCMjYzMTk1MkFBRTlFMUM3NERD
MEFFMDA2OTlGN0M3MDc4N0NEQUI4RTVDRjY5OTdBMDlGMTNGNjQwMUEwMzA5N0ZB
N0IzNjM2ODA4MzE1NDc0OEYyMEQwRThGNkI0QTEyNUQwMkQyRkZCMEE0NzI1MjA3
OEZDNjM5OTIzNUE5QTlFMjlDRTA1RTBCNTQ2OTdEQUNCMTRGQTREMEQ5ODdBM0I0
NjU3OUExOUIwMEI3RDk3MzVCQUMzQjNCQUU0QTA5NzQzRjBBOUE0RUNEREU3QjJD
QTVDOTcwQTg2QkJBMUQzNDIwNUM5NzJBMTJGQUQ2MDQxQjQ0Mzc2MzZDQ0JDNUMy
NTJFQjMyQUYyMTE2N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu0J5cpXsoE74bBv4XHI4bZdYxmwaFXheJas3nFpsEPnHh6iS5I/e
y9B2kmJI+f51Mp8AD8kVzLDonS8+hMIqeFzkKg7mOorCDU1U3TF0NY3JfCp1OWWx
XlF1waxUUheYGH2VgDp3NVUrEAKwQZepjmzLSu2eC4t7JjGVKq6eHHTcCuAGmffH
B4fNq45c9pl6CfE/ZAGgMJf6ezY2gIMVR0jyDQ6Pa0oSXQLS/7CkclIHj8Y5kjWp
qeKc4F4LVGl9rLFPpNDZh6O0ZXmhmwC32XNbrDs7rkoJdD8Kmk7N3nsspclwqGu6
HTQgXJcqEvrWBBtEN2Nsy8XCUusyryEWfQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FEH4KSd3h8rW7rJnkbc2k1XQ1AICMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNzJlMzEzMjMyMmUzMDJl
MzAyZjMxMzUyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG7ejAN
BgkqhkiG9w0BAQsFAAOCAQEAoNWPaPXycTUO0Sh9+dcfWXsVcQj01jERtds2Y2kD
skzRlwsKoYf2jc6kCbVrQ6hEgNDSz5qYvU9hzOZlebOhI8Yuce5JAZNSNyIVEyxF
6R7zxFFQ22hnv+R+faJXP8ViHIhHt2dSsM32jZOcglbBBpUmxiGEFdlo7BMxWNFB
ByLZhQvRseeG+Ui9zxro/aAXKj/NWeStB36yA1VBN5ONt4XSqCZ3XypT5M+hchvi
hPt5sQ+DG0QImNtdn1RC/jYXEWxTDRNztgpofXv593fLIQloHNLP2D9UMPdmth/w
/RBEktWZhetEgsrilcXs1eP8WPPTCRW4CA4HJx5IJyqwjA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:06 2026 by rpki-client