Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          987lYbdhsOBvJwPL+xPZHExQG3iDyl/57FRn66HruT0=
Subject key identifier:   94:C1:E1:23:71:84:90:63:60:8B:77:53:4F:8C:F2:40:64:67:07:33
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7D14A35E52162BAA3BBC90F21A8E2C491A625C46
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        189.4.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:14:a3:5e:52:16:2b:aa:3b:bc:90:f2:1a:8e:2c:49:1a:62:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:10:4b:c3:01:89:47:7d:57:c2:f1:11:c1:
                    da:ab:5e:d6:33:3e:6c:8e:b3:23:62:40:cc:2d:58:
                    04:83:20:2b:d9:ff:a8:aa:b7:ea:e6:88:bd:1f:5a:
                    af:8c:6c:1f:bf:c9:3b:97:a9:72:fa:b6:3d:c7:c0:
                    d5:8a:41:3b:e1:73:44:3e:8f:11:f3:14:be:9c:6f:
                    f8:d6:df:a3:de:8b:16:ba:23:06:98:a8:df:ad:e4:
                    69:2c:bb:64:40:1a:77:ea:5d:e0:09:a3:d5:ec:a0:
                    8e:d8:3f:aa:21:9d:6c:69:38:05:68:27:ad:94:05:
                    a4:5e:c4:9d:df:0f:5b:8e:30:a9:7c:56:b8:4e:e0:
                    c1:0d:8b:27:25:32:26:1c:5c:5b:1c:bd:ad:11:03:
                    6d:40:3b:eb:27:b9:a6:c7:1f:de:99:2d:b4:13:b2:
                    98:10:aa:30:29:a1:bb:d6:0b:63:8b:3d:fe:f4:cb:
                    a6:0d:2f:49:d6:c3:3a:50:02:5c:36:d5:eb:96:ca:
                    4c:cc:ed:ec:78:a0:22:6d:5b:bd:ac:ee:03:97:96:
                    7b:b7:96:5f:5e:f7:08:d0:03:88:82:ab:f0:30:f7:
                    cc:00:af:6d:9a:cf:85:9f:4c:9b:28:fd:bf:a6:27:
                    25:98:47:c1:97:6c:a5:4c:95:50:93:56:33:fa:6a:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:E1:23:71:84:90:63:60:8B:77:53:4F:8C:F2:40:64:67:07:33
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.4.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:92:6c:d5:93:51:fc:df:aa:fe:1f:7c:10:4c:85:e8:21:
         d7:22:93:91:1b:a0:ae:38:ff:b7:bb:bf:54:82:f7:a1:e7:50:
         8c:25:a8:59:24:ac:6c:61:58:dd:15:5d:63:53:28:91:79:81:
         fb:64:3b:d9:6a:23:d5:a5:2c:8a:71:03:e2:84:ce:77:f1:bc:
         be:f2:5d:f0:f0:61:ae:34:bb:d1:ca:e1:0b:97:6a:0e:1e:ea:
         59:80:1f:d8:98:c2:75:d6:e6:f4:f9:30:f0:f2:23:d5:71:72:
         ad:9e:17:e8:c6:15:37:d7:40:f6:1f:d8:2a:ba:5a:0f:79:cb:
         a7:11:82:8f:99:d1:ea:e0:34:a0:7c:ed:c8:d1:14:7f:33:d8:
         09:37:f7:1c:d5:3d:44:de:c3:94:87:e9:ca:e1:60:97:77:99:
         0d:95:5d:a1:7f:e0:9b:28:51:ae:6d:06:ac:24:3a:e8:b3:65:
         32:cf:30:47:57:83:0f:36:fa:31:96:55:a0:6d:a2:6c:a8:eb:
         b8:40:85:83:e7:92:c3:f5:09:d2:47:79:7c:cf:22:53:dc:c6:
         ea:2a:4f:91:60:63:4e:34:76:92:eb:42:2b:3a:6b:96:ed:57:
         8c:50:cd:d6:9a:e8:46:fc:f0:c0:ba:f0:13:61:f2:75:04:53:
         d9:7a:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:51 2026 by rpki-client