Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e33362e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          QC7aMSBO/kbaNDy3fcp6D6ZI9BdqzoPkJs1geWmumbE=
Subject key identifier:   CA:70:8A:A7:8B:FD:F2:06:54:A9:99:AB:1C:5D:8C:83:CF:57:14:62
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0AED4ACB0277432A97FF46E7598909DCDC9C302F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        187.36.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ed:4a:cb:02:77:43:2a:97:ff:46:e7:59:89:09:dc:dc:9c:30:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:21:05:7a:0f:48:a2:eb:2d:43:6b:d9:d2:
                    c4:fc:a7:ea:00:ba:26:18:4b:a9:7c:74:e0:ef:0e:
                    40:8b:c6:4c:38:2c:d5:90:be:13:38:d3:c6:4b:40:
                    bd:f6:e9:3e:df:97:11:68:3f:2e:04:5c:b8:8d:af:
                    be:bd:ae:c9:ef:a5:cf:60:ef:03:c7:45:24:a0:0d:
                    bb:5a:92:c6:0b:1a:a8:1a:81:ba:1c:54:32:7a:50:
                    ff:ec:4a:bd:fe:0b:8c:42:47:e9:22:eb:d9:35:f2:
                    d5:cd:80:fe:4d:43:73:83:1b:df:0b:e0:18:10:cb:
                    59:2c:22:0a:14:dd:a6:29:b3:9d:2a:ee:f1:7d:a0:
                    6b:ba:90:80:6f:46:53:24:c6:b8:f1:1a:f5:cb:c0:
                    08:fc:00:6c:7a:27:2f:75:26:18:fc:9f:96:19:d0:
                    da:fa:64:02:12:37:e6:e0:46:56:b1:79:73:67:59:
                    51:5b:68:1c:0f:8e:6f:3b:a5:ad:9a:4f:dd:3f:20:
                    80:ce:d9:f5:9c:16:7e:d9:d9:bf:71:5d:f6:f3:49:
                    34:0b:2c:90:e4:96:6c:67:fb:a7:9c:aa:2e:67:78:
                    b4:05:f3:33:f2:61:32:e2:7d:89:39:bc:30:67:ad:
                    2e:4d:a4:3b:b4:d9:6e:b3:bf:c3:f0:18:b5:5c:2e:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:70:8A:A7:8B:FD:F2:06:54:A9:99:AB:1C:5D:8C:83:CF:57:14:62
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         bb:9a:9d:87:8e:ec:68:4b:93:00:b8:42:85:bb:a9:d3:93:ae:
         81:4d:cd:40:5b:62:07:ce:40:a2:75:15:54:aa:c7:49:eb:88:
         dd:be:fa:44:b4:3e:bd:80:3d:0b:00:fa:93:45:eb:64:a5:29:
         da:13:ec:bf:22:aa:27:5b:ad:a0:a1:8f:a1:ad:1b:b3:10:36:
         28:82:f3:c0:6c:00:d5:e4:e9:91:28:04:2a:ae:59:1e:2e:f3:
         ea:4e:95:a1:97:a3:ed:00:70:29:b7:fa:6a:fe:43:e4:75:50:
         b5:7b:34:2c:19:d5:c3:6b:4e:96:8b:1e:94:36:4c:47:0f:dd:
         58:00:a0:4f:c9:18:41:4a:1c:86:98:c5:69:ab:3d:ef:be:aa:
         d5:80:9a:f5:9b:d7:9b:ed:76:a8:70:b0:59:02:29:21:5a:05:
         ee:84:f4:27:5c:1e:c1:fd:3d:7c:a8:96:91:ca:95:1d:a8:4a:
         54:cb:fb:a7:75:63:72:3e:ca:8a:80:e3:8d:05:f7:d2:a6:d6:
         46:45:48:4a:82:bf:79:70:d1:02:f6:fc:3c:60:d6:1d:11:21:
         ee:25:8e:00:21:72:03:1f:9d:08:2b:16:d6:82:2e:f4:70:3c:
         ca:9b:79:67:02:f8:b7:ad:0c:00:7e:56:23:00:92:46:4b:7d:
         e2:b1:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:53 2026 by rpki-client