Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
File:                     3138372e3235352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          7QiDZFwwubRPuJ2g3dS5DaMlXT3UkfTp/oxelC5JIF4=
Subject key identifier:   8C:37:B3:9D:EF:D2:73:7E:59:DF:25:A2:93:4A:FE:D7:34:C1:9A:9C
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       192D4402612A9F258ACEE9FD29A85D22ABBAC58A
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     28573
IP address blocks:        187.255.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2d:44:02:61:2a:9f:25:8a:ce:e9:fd:29:a8:5d:22:ab:ba:c5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:a9:ec:da:65:ee:93:28:fb:f8:e0:95:cd:
                    fe:54:3a:4a:32:95:7f:b2:69:d0:a6:25:a4:68:41:
                    33:84:57:d3:79:44:fa:49:19:d2:0e:bd:be:41:b7:
                    e4:a6:15:64:bd:90:07:89:dd:05:88:fa:9c:e4:03:
                    d0:a3:29:87:ff:19:71:2c:3a:f1:fe:05:f9:35:21:
                    08:60:2c:f9:d2:e4:09:39:aa:16:f1:8e:12:e4:36:
                    38:a6:fa:df:e6:6b:16:ee:37:ee:9c:e5:68:70:f7:
                    98:4c:5f:e8:f4:3d:0f:dc:f9:73:d1:ac:17:7c:21:
                    2f:10:d6:92:a8:2b:30:a2:36:ce:8e:d6:d8:71:8b:
                    3b:82:e7:9c:77:1e:da:50:04:06:c6:e5:ad:05:b8:
                    3f:43:ea:4e:4c:57:78:cc:68:31:a3:d1:01:a4:2f:
                    a9:76:f7:26:b5:cb:ed:65:98:f4:e3:a6:8c:09:14:
                    d9:c9:a9:7e:49:42:ea:11:5e:e7:dc:b1:da:ac:c5:
                    8b:8f:60:4d:0c:be:65:8c:8e:20:d9:69:42:e1:fb:
                    0c:fd:6e:30:30:cb:22:08:35:b1:1f:41:c2:00:5a:
                    35:bf:5e:7f:73:aa:df:08:ab:60:4e:24:ed:3a:0a:
                    20:3a:72:0a:24:35:4f:12:f6:81:40:f5:6c:c0:7c:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:37:B3:9D:EF:D2:73:7E:59:DF:25:A2:93:4A:FE:D7:34:C1:9A:9C
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:39:ea:f7:d2:c3:d1:df:bf:36:fd:bb:a3:e4:91:73:bf:ac:
         79:6d:cc:7d:ef:04:e9:9d:62:c2:2c:29:20:a2:76:cd:17:9a:
         47:48:05:3e:91:e1:9c:73:b0:d4:d7:dd:53:bd:f2:a8:2e:29:
         ec:4e:15:f8:56:ac:a7:45:8a:c7:38:53:19:36:47:a0:16:e0:
         74:69:9b:b8:92:08:a8:7f:7b:68:da:77:46:93:5b:4e:dc:af:
         85:54:f4:94:fc:c7:7c:17:ab:11:7e:4e:d4:e1:47:95:d6:5a:
         06:90:58:2f:f9:ec:0e:85:f7:92:0f:19:fb:75:f7:41:cd:e1:
         3c:57:99:2d:73:c3:a2:6f:15:79:87:f9:82:1f:8c:a3:a0:ca:
         10:15:d7:60:5a:59:b6:0f:59:79:87:3d:1f:87:43:04:de:5a:
         41:6a:41:50:e1:c8:5e:0f:52:0f:8f:04:39:bb:e7:01:3b:b6:
         96:68:1b:99:1b:4b:79:61:61:a9:46:ae:51:2e:20:a5:d0:6e:
         25:86:67:81:1b:f7:82:e6:b5:f1:f8:f9:c0:d0:88:5d:d5:8d:
         87:77:65:c3:12:a1:9f:ad:50:c7:2c:26:05:70:ec:20:57:1c:
         b2:1c:6e:3a:ef:eb:6a:72:2e:55:a9:c5:08:25:24:6a:79:5b:
         90:33:e6:70
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUGS1EAmEqnyWKzun9KahdIqu6xYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTFaFw0yNzAyMDMyMDAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I4RUE5RUNEQTY1RUU5MzI4
RkJGOEUwOTVDREZFNTQzQTRBMzI5NTdGQjI2OUQwQTYyNUE0Njg0MTMzODQ1N0Qz
Nzk0NEZBNDkxOUQyMEVCREJFNDFCN0U0QTYxNTY0QkQ5MDA3ODlERDA1ODhGQTlD
RTQwM0QwQTMyOTg3RkYxOTcxMkMzQUYxRkUwNUY5MzUyMTA4NjAyQ0Y5RDJFNDA5
MzlBQTE2RjE4RTEyRTQzNjM4QTZGQURGRTY2QjE2RUUzN0VFOUNFNTY4NzBGNzk4
NEM1RkU4RjQzRDBGRENGOTczRDFBQzE3N0MyMTJGMTBENjkyQTgyQjMwQTIzNkNF
OEVENkQ4NzE4QjNCODJFNzlDNzcxRURBNTAwNDA2QzZFNUFEMDVCODNGNDNFQTRF
NEM1Nzc4Q0M2ODMxQTNEMTAxQTQyRkE5NzZGNzI2QjVDQkVENjU5OEY0RTNBNjhD
MDkxNEQ5QzlBOTdFNDk0MkVBMTE1RUU3RENCMURBQUNDNThCOEY2MDREMENCRTY1
OEM4RTIwRDk2OTQyRTFGQjBDRkQ2RTMwMzBDQjIyMDgzNUIxMUY0MUMyMDA1QTM1
QkY1RTdGNzNBQURGMDhBQjYwNEUyNEVEM0EwQTIwM0E3MjBBMjQzNTRGMTJGNjgx
NDBGNTZDQzA3Q0EzRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy46p7Npl7pMo+/jglc3+VDpKMpV/smnQpiWkaEEzhFfTeUT6SRnS
Dr2+QbfkphVkvZAHid0FiPqc5APQoymH/xlxLDrx/gX5NSEIYCz50uQJOaoW8Y4S
5DY4pvrf5msW7jfunOVocPeYTF/o9D0P3Plz0awXfCEvENaSqCswojbOjtbYcYs7
guecdx7aUAQGxuWtBbg/Q+pOTFd4zGgxo9EBpC+pdvcmtcvtZZj046aMCRTZyal+
SULqEV7n3LHarMWLj2BNDL5ljI4g2WlC4fsM/W4wMMsiCDWxH0HCAFo1v15/c6rf
CKtgTiTtOgogOnIKJDVPEvaBQPVswHyj0wIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FIw3s53v0nN+Wd8lopNK/tc0wZqcMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNzJlMzIzNTM1MmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC7/zAN
BgkqhkiG9w0BAQsFAAOCAQEAMznq99LD0d+/Nv27o+SRc7+seW3Mfe8E6Z1iwiwp
IKJ2zReaR0gFPpHhnHOw1NfdU73yqC4p7E4V+Fasp0WKxzhTGTZHoBbgdGmbuJII
qH97aNp3RpNbTtyvhVT0lPzHfBerEX5O1OFHldZaBpBYL/nsDoX3kg8Z+3X3Qc3h
PFeZLXPDom8VeYf5gh+Mo6DKEBXXYFpZtg9ZeYc9H4dDBN5aQWpBUOHIXg9SD48E
ObvnATu2lmgbmRtLeWFhqUauUS4gpdBuJYZngRv3gua18fj5wNCIXdWNh3dlwxKh
n61QxywmBXDsIFccshxuOu/ranIuVanFCCUkanlbkDPmcA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:02 2026 by rpki-client