Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e32392e302e302f31362d3234203d3e203238353733.roa
File:                     3138392e32392e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          lILa0+0d9J2VQghSGjN4UdGcQvsQK8MKExZlJcgktVs=
Subject key identifier:   DB:9F:96:E2:3B:3C:4E:9D:04:7C:18:99:4D:E0:7F:B8:27:63:7A:63
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       65F915CDD640E73EFC7D9803974CEBFF7730786A
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e32392e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     28573
IP address blocks:        189.29.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:15:cd:d6:40:e7:3e:fc:7d:98:03:97:4c:eb:ff:77:30:78:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject: CN=3082010A0282010100C3BFA6400BCBE2AC9014EAB4B09EA39677720FCC5FF8B9FC31CCA525615A25038AC5F8FDEFC1640DCB8C5B972BA7C03FB8EB5D9244023E77C66B36F0CBE94160509C65C9B9CC511E14B3763DEC1428CDD730C3507456A64C4A9AC8E8E648D2DD9B958AD51923A40F1116E65B65825702C7E54C2FA256F631D9FC29C6EE5A0B2F6B926F7B1A7DA95958F8E7BA7EB9757149B26A65BFD18D24C57E513A6C2F13F08DAEC1AE76BB5571EFD0FA9161BEE8374A9892AA47BAF4EA8B2F7D600A1A7DF7E668D6E5FD9F45BCC9FDDEDD21B9C83697AD0CCDF33797DBC296B58FBD78760CC0815176DCA809D4BE28106F751FE923A142A0FAE3BAEE3EE3219A347AA12D5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:a6:40:0b:cb:e2:ac:90:14:ea:b4:b0:9e:
                    a3:96:77:72:0f:cc:5f:f8:b9:fc:31:cc:a5:25:61:
                    5a:25:03:8a:c5:f8:fd:ef:c1:64:0d:cb:8c:5b:97:
                    2b:a7:c0:3f:b8:eb:5d:92:44:02:3e:77:c6:6b:36:
                    f0:cb:e9:41:60:50:9c:65:c9:b9:cc:51:1e:14:b3:
                    76:3d:ec:14:28:cd:d7:30:c3:50:74:56:a6:4c:4a:
                    9a:c8:e8:e6:48:d2:dd:9b:95:8a:d5:19:23:a4:0f:
                    11:16:e6:5b:65:82:57:02:c7:e5:4c:2f:a2:56:f6:
                    31:d9:fc:29:c6:ee:5a:0b:2f:6b:92:6f:7b:1a:7d:
                    a9:59:58:f8:e7:ba:7e:b9:75:71:49:b2:6a:65:bf:
                    d1:8d:24:c5:7e:51:3a:6c:2f:13:f0:8d:ae:c1:ae:
                    76:bb:55:71:ef:d0:fa:91:61:be:e8:37:4a:98:92:
                    aa:47:ba:f4:ea:8b:2f:7d:60:0a:1a:7d:f7:e6:68:
                    d6:e5:fd:9f:45:bc:c9:fd:de:dd:21:b9:c8:36:97:
                    ad:0c:cd:f3:37:97:db:c2:96:b5:8f:bd:78:76:0c:
                    c0:81:51:76:dc:a8:09:d4:be:28:10:6f:75:1f:e9:
                    23:a1:42:a0:fa:e3:ba:ee:3e:e3:21:9a:34:7a:a1:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9F:96:E2:3B:3C:4E:9D:04:7C:18:99:4D:E0:7F:B8:27:63:7A:63
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e32392e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:42:f6:44:79:63:12:5c:ff:45:e2:4f:a9:e8:81:66:ba:
         5e:ad:31:6d:a3:e6:29:4f:19:a7:7d:78:e4:0e:8b:6d:09:56:
         6d:c7:35:ca:63:44:de:97:21:82:d6:38:03:22:51:7e:e3:d8:
         ba:1e:f1:a4:a1:38:42:3a:27:de:70:2f:b5:b9:29:df:6c:4c:
         49:1b:f6:a8:b6:c4:fb:80:7d:73:f1:08:c6:f2:e1:31:e9:2b:
         38:92:a3:cb:90:86:58:53:d2:db:df:e3:b1:28:fd:c4:89:05:
         9b:86:5f:6e:48:f1:6f:d4:19:a4:b9:ee:46:c1:cb:c3:f5:65:
         d6:87:11:d0:40:34:db:dc:9e:09:3a:27:98:dc:2e:e9:87:bb:
         81:cc:1b:69:98:e2:92:e5:b9:c1:ee:28:71:aa:61:fd:c1:72:
         76:46:82:df:69:37:2c:d0:a4:e7:62:34:c2:eb:2c:cd:7d:30:
         80:f1:17:37:41:13:7e:10:53:fd:32:b8:d1:21:61:e7:0e:c5:
         1d:7d:8d:0a:c4:16:ec:01:5b:ce:fc:77:fd:f1:99:27:2e:9e:
         a3:b4:0a:20:3f:42:a3:dc:f6:a1:2f:dc:be:71:d1:6c:5c:fc:
         dd:ab:f4:e1:5e:f5:6d:d4:9d:b9:f4:07:4c:60:e9:99:24:ae:
         94:68:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:04 2026 by rpki-client