Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e3130302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          v87A9aKjxn60r9sOUf694w2ADX1HTQGEDp60M+1MkNE=
Subject key identifier:   3F:A0:28:83:3A:C4:76:31:11:CB:BD:E2:E3:55:05:FE:30:86:38:1E
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       71B0169701A064000E01B52E8C1DF49078795E34
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        189.100.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:16:97:01:a0:64:00:0e:01:b5:2e:8c:1d:f4:90:78:79:5e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:b3:cd:b9:e1:de:0b:38:81:c0:ad:40:d7:
                    83:b1:49:8e:f7:31:36:be:05:14:9a:de:e3:1f:a2:
                    80:db:ec:9b:d9:fa:4b:3c:6f:ad:df:76:2e:e3:65:
                    e2:37:bb:03:bf:72:cb:93:0a:ac:22:16:b0:b7:45:
                    4f:6d:c7:cb:69:e8:7e:b5:33:03:ac:0d:91:5f:b9:
                    d0:d9:eb:df:62:a0:53:f8:37:57:b5:4c:4f:fa:4f:
                    2f:4f:43:7e:f7:f9:9d:57:b5:52:7e:55:ba:d9:49:
                    af:f8:a0:76:41:69:88:e4:92:56:75:24:fa:a0:4e:
                    5f:00:18:ee:5d:a4:0a:5e:a8:db:29:ca:76:6c:bb:
                    6d:65:08:77:a5:25:8f:82:7e:76:b1:bb:1a:5e:e8:
                    c4:5c:05:ea:d1:76:c5:28:78:f5:c0:4d:9a:07:df:
                    4a:8b:b1:99:2b:da:20:4a:ac:d1:c0:c4:f6:86:30:
                    5a:35:56:4c:17:72:96:ee:fb:64:86:e8:ba:b9:8f:
                    1a:ce:cd:34:ae:4b:c6:5e:16:b4:b6:02:83:ad:43:
                    e2:c8:5c:53:eb:50:b1:7a:c8:39:48:17:ca:84:b3:
                    b6:85:cd:c1:6a:d7:e6:a1:2d:18:b6:bd:d7:d1:0f:
                    00:3f:44:26:9f:ad:cc:d9:63:a8:3e:92:70:91:40:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A0:28:83:3A:C4:76:31:11:CB:BD:E2:E3:55:05:FE:30:86:38:1E
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.100.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:b9:dc:2c:21:60:a7:3a:f9:51:8e:5e:f8:e9:4d:16:3e:
         2e:b1:3d:bd:67:14:f1:7e:16:ef:f4:62:68:25:79:eb:03:56:
         31:5a:1f:b4:eb:32:70:80:a7:c4:18:2c:0c:28:d8:3a:f5:d8:
         d3:85:1f:73:cb:93:f3:0c:67:d8:61:2c:e0:64:4e:3f:19:c9:
         33:1b:6b:4c:9d:24:96:81:9b:99:e8:76:ff:b2:ed:24:ef:40:
         c8:e0:f3:71:ac:73:03:26:2c:40:78:b8:10:b3:ae:b5:fc:78:
         32:ab:51:ee:95:53:a8:fb:33:3c:bb:33:60:b8:a2:f4:94:1a:
         de:40:58:3a:c9:61:96:04:5e:06:3b:2c:c3:4b:a8:0b:dd:36:
         17:f2:33:0e:ed:b4:a6:ed:98:27:3f:72:bd:ac:26:44:e8:75:
         a0:61:1d:6f:0c:5a:b1:0c:3e:b1:b7:40:8c:3f:87:a0:e3:46:
         72:0b:6d:4a:3a:8d:f8:38:ad:00:68:68:30:52:94:8b:a8:99:
         e7:c0:25:80:d1:2d:4e:ff:bb:73:c2:da:8d:34:a4:39:09:9c:
         55:e2:4f:67:b7:8d:c4:82:1d:26:59:1d:7d:8b:78:a3:52:91:
         67:04:a7:63:43:25:26:19:88:18:4e:d0:f2:9e:f8:e1:ef:a4:
         d0:de:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:05 2026 by rpki-client