Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e36342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          tbKkO6TVAI4po0mxxUl5AexMbcHySypcTaMrqTde9so=
Subject key identifier:   FA:50:C5:D4:A7:F1:7C:04:A3:FD:BB:89:1E:46:D6:C1:B6:D4:F5:D1
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6570D2E0488A0569BED7C8E488C0B9B102716E6B
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     28573
IP address blocks:        187.64.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:70:d2:e0:48:8a:05:69:be:d7:c8:e4:88:c0:b9:b1:02:71:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:a7:ef:f1:dc:31:45:9e:6f:47:2e:6c:b3:
                    2e:53:a6:f2:95:1a:56:eb:4d:a7:cd:a0:58:9e:21:
                    40:df:03:43:c9:ff:a4:8d:b3:14:57:16:1a:b2:03:
                    ce:82:72:2a:fa:1e:7f:b2:00:92:1a:ad:9e:89:43:
                    80:4c:c0:f1:a8:6e:ec:8b:bd:93:fc:5f:cf:4b:c9:
                    c2:29:83:30:07:1f:2b:33:0e:9f:91:38:7f:9e:6a:
                    65:30:73:31:8a:f3:ee:ab:49:be:bc:96:36:e5:15:
                    03:b1:b6:d1:6a:93:d4:09:70:2d:22:44:63:48:3b:
                    7c:4f:d9:d1:61:e5:f1:26:c8:97:3f:98:0b:38:f1:
                    e5:60:ed:d8:33:c5:c2:48:b8:d0:12:26:4b:97:d6:
                    2b:8a:38:f6:22:ad:6b:66:e5:18:e4:d2:8a:0a:40:
                    d7:6f:6c:8e:77:47:cd:ae:71:96:1f:0e:3e:18:a3:
                    00:9c:82:9c:c5:2f:c1:b3:bf:25:b8:95:68:66:29:
                    c9:af:5f:b2:3e:9c:7c:12:89:c7:8a:f1:22:63:b6:
                    b5:49:32:bb:52:36:e5:16:9b:c8:bd:2c:37:5e:0c:
                    04:da:46:a8:72:5b:cd:94:24:75:51:01:e8:b0:4a:
                    a6:d5:ba:07:c8:0c:fa:2d:0f:2a:05:09:b9:da:35:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:C5:D4:A7:F1:7C:04:A3:FD:BB:89:1E:46:D6:C1:B6:D4:F5:D1
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.64.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         58:72:22:d5:a9:06:57:29:80:09:9c:3d:5e:09:c6:2d:8b:75:
         b3:78:6e:c3:73:86:79:7e:50:dc:de:a1:12:ae:fd:4b:96:8e:
         01:3d:63:6a:a1:47:e2:42:af:6b:3f:84:be:02:33:f5:28:9f:
         7e:37:f1:55:6f:48:20:b4:e8:cc:29:e0:e2:18:d2:22:5d:59:
         c4:12:25:32:aa:4d:da:6a:46:5d:14:1a:7b:af:8d:2e:a0:b4:
         e4:4d:f6:0a:27:3c:a5:05:b7:9c:eb:bc:dc:63:06:95:0c:5b:
         96:f6:0c:c5:34:49:47:06:e7:8e:4d:90:c8:fd:f3:b0:af:a9:
         78:02:81:14:6c:cc:e7:70:e1:85:4f:33:5e:90:e6:bd:a6:0b:
         c0:48:ba:94:12:e7:8b:0f:ae:13:e7:c8:0c:33:41:42:13:94:
         a5:51:49:e2:37:29:e1:96:9b:94:d2:ce:c6:6c:ef:99:01:a2:
         78:6f:75:f2:79:4c:97:21:f8:f1:e2:04:0f:ee:1a:6e:a7:8f:
         aa:2e:f7:40:fa:23:2c:20:57:10:bb:2a:65:95:f5:1b:ba:a5:
         96:15:3e:9f:96:e3:22:8d:aa:84:6b:cb:d8:50:4f:c6:11:eb:
         fc:dd:38:73:a4:06:47:c3:09:e1:aa:de:54:da:f4:b8:a8:82:
         12:f1:c6:a2
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUZXDS4EiKBWm+18jkiMC5sQJxbmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTBaFw0yNzAyMDMyMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDcxREE3RUZGMURDMzE0NTlF
NkY0NzJFNkNCMzJFNTNBNkYyOTUxQTU2RUI0REE3Q0RBMDU4OUUyMTQwREYwMzQz
QzlGRkE0OERCMzE0NTcxNjFBQjIwM0NFODI3MjJBRkExRTdGQjIwMDkyMUFBRDlF
ODk0MzgwNENDMEYxQTg2RUVDOEJCRDkzRkM1RkNGNEJDOUMyMjk4MzMwMDcxRjJC
MzMwRTlGOTEzODdGOUU2QTY1MzA3MzMxOEFGM0VFQUI0OUJFQkM5NjM2RTUxNTAz
QjFCNkQxNkE5M0Q0MDk3MDJEMjI0NDYzNDgzQjdDNEZEOUQxNjFFNUYxMjZDODk3
M0Y5ODBCMzhGMUU1NjBFREQ4MzNDNUMyNDhCOEQwMTIyNjRCOTdENjJCOEEzOEY2
MjJBRDZCNjZFNTE4RTREMjhBMEE0MEQ3NkY2QzhFNzc0N0NEQUU3MTk2MUYwRTNF
MThBMzAwOUM4MjlDQzUyRkMxQjNCRjI1Qjg5NTY4NjYyOUM5QUY1RkIyM0U5QzdD
MTI4OUM3OEFGMTIyNjNCNkI1NDkzMkJCNTIzNkU1MTY5QkM4QkQyQzM3NUUwQzA0
REE0NkE4NzI1QkNEOTQyNDc1NTEwMUU4QjA0QUE2RDVCQTA3QzgwQ0ZBMkQwRjJB
MDUwOUI5REEzNTc0MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1x2n7/HcMUWeb0cubLMuU6bylRpW602nzaBYniFA3wNDyf+kjbMU
VxYasgPOgnIq+h5/sgCSGq2eiUOATMDxqG7si72T/F/PS8nCKYMwBx8rMw6fkTh/
nmplMHMxivPuq0m+vJY25RUDsbbRapPUCXAtIkRjSDt8T9nRYeXxJsiXP5gLOPHl
YO3YM8XCSLjQEiZLl9Yrijj2Iq1rZuUY5NKKCkDXb2yOd0fNrnGWHw4+GKMAnIKc
xS/Bs78luJVoZinJr1+yPpx8EonHivEiY7a1STK7UjblFpvIvSw3XgwE2kaoclvN
lCR1UQHosEqm1boHyAz6LQ8qBQm52jV0EwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FPpQxdSn8XwEo/27iR5G1sG21PXRMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNzJlMzYzNDJlMzAyZTMw
MmYzMTM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCu0AwDQYJ
KoZIhvcNAQELBQADggEBAFhyItWpBlcpgAmcPV4Jxi2LdbN4bsNzhnl+UNzeoRKu
/UuWjgE9Y2qhR+JCr2s/hL4CM/Uon3438VVvSCC06Mwp4OIY0iJdWcQSJTKqTdpq
Rl0UGnuvjS6gtORN9gonPKUFt5zrvNxjBpUMW5b2DMU0SUcG545NkMj987CvqXgC
gRRszOdw4YVPM16Q5r2mC8BIupQS54sPrhPnyAwzQUITlKVRSeI3KeGWm5TSzsZs
75kBonhvdfJ5TJch+PHiBA/uGm6nj6ou90D6IywgVxC7KmWV9Ru6pZYVPp+W4yKN
qoRry9hQT8YR6/zdOHOkBkfDCeGq3lTa9LioghLxxqI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:53 2026 by rpki-client